Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          TG/cwDGg1LgYY+N+3xVbGuJI+qsgJ94F+c92ky2tjSk=
Subject key identifier:   E9:D8:AC:B3:D1:C8:4D:55:FA:68:A8:05:30:67:7A:93:E6:F6:4A:6F
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       019E1D5932435FE27886670123927C574F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          09F7
Signing time:             Tue 12 May 2026 18:00:45 +0000
Manifest this update:     Tue 12 May 2026 18:00:45 +0000
Manifest next update:     Wed 13 May 2026 18:00:45 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: TB7aUVQwXyevqD6RmG3TCQ50J0PyfxNveT8meClflGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:32:43:5f:e2:78:86:67:01:23:92:7c:57:4f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: May 12 18:00:45 2026 GMT
            Not After : May 13 18:00:45 2026 GMT
        Subject: CN=e9d8acb3d1c84d55fa68a80530677a93e6f64a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:49:2b:a7:eb:ce:9e:c7:0c:6c:83:0f:90:
                    5d:c0:fc:64:02:31:e8:1b:56:55:95:b3:4f:1a:40:
                    a9:95:7d:45:63:27:75:cc:91:ff:47:fe:06:97:ab:
                    a7:18:d6:29:ce:58:63:a2:94:48:4b:8a:36:21:d4:
                    31:5c:3b:00:03:7d:9f:8d:51:ce:14:db:d4:fb:a3:
                    41:99:0a:f0:60:6b:44:12:8d:95:fe:85:56:fa:55:
                    41:c1:3f:26:7f:af:47:eb:dc:7d:02:9f:22:df:e0:
                    a3:fb:1c:39:d5:17:fb:42:fc:84:0e:a0:88:9c:36:
                    cc:e8:9e:6d:02:2f:d2:ee:cf:47:12:ce:08:b9:bb:
                    d1:99:9f:9b:6e:ac:bb:4a:d2:bc:a3:8f:cc:df:d6:
                    d8:0c:cc:ec:38:85:6d:1a:21:e8:92:4e:26:2f:e6:
                    0c:4c:00:59:25:6c:af:f5:a9:c7:5c:2f:09:25:08:
                    46:ea:1e:42:f6:8b:9b:a8:98:41:1a:9c:c4:e0:25:
                    b4:28:a6:4f:00:c6:2c:50:22:5f:76:15:a8:83:e8:
                    f7:59:af:db:c3:70:31:b9:07:8e:b9:1e:ae:b7:a9:
                    40:a1:14:ae:a8:82:66:fd:71:6b:32:f8:c9:3a:2a:
                    62:88:98:28:b6:5c:cb:25:63:8d:33:79:14:15:bf:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:AC:B3:D1:C8:4D:55:FA:68:A8:05:30:67:7A:93:E6:F6:4A:6F
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:07:a6:7c:d9:0f:47:a7:95:ec:6e:6f:5e:71:f8:0f:c2:
         a6:5e:01:ac:69:4b:61:0b:be:e5:29:e9:99:5b:f4:b5:f1:f8:
         ad:3b:01:76:50:69:a8:23:b0:33:d0:b5:c4:20:e7:cd:50:a9:
         36:46:6b:00:d6:fb:89:b0:07:7d:f8:8e:8e:60:14:b7:b4:fe:
         6f:80:37:77:7f:0b:44:60:66:1f:52:3f:07:8c:ba:37:fc:47:
         31:3e:6a:14:2a:48:79:b7:dc:00:96:fd:24:30:21:60:e6:28:
         89:ac:af:13:82:1b:7c:9d:2c:2c:50:75:5c:4a:5b:f8:cc:18:
         5e:40:49:3d:16:85:bb:ff:99:08:90:0b:ba:27:ab:a1:7d:c0:
         0e:db:ac:9b:b8:68:49:ba:d0:b9:18:b8:88:83:2f:29:72:59:
         1b:4b:29:d0:8a:ce:ac:1c:b8:84:2f:15:a8:48:60:69:56:59:
         7e:12:56:26:68:51:d6:4d:ba:49:b3:a6:2c:fd:fb:aa:d6:52:
         ae:79:cf:a6:8a:c0:f8:24:27:f7:9e:cb:93:eb:ea:48:42:f5:
         d8:cb:45:ec:6f:e9:b0:8d:20:2b:bc:34:d5:8b:f0:b4:be:26:
         cf:1a:4a:bf:25:d0:3b:04:12:c4:64:63:f4:d9:0a:0b:ff:5e:
         9a:ea:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:27 2026 by rpki-client