Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File:                     5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier:          +T4Y1ZFKJ69oQEJ8Mg3QD6ZVWsZE/a8QpjVpACEvxCI=
Subject key identifier:   39:86:D4:88:07:47:0A:08:E5:EB:63:B3:D0:F7:8B:01:E9:5B:5C:B9
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer:       /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial:       019E1D59C92052EE03CE83516BC9C5380709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number:          0B15
Signing time:             Tue 12 May 2026 18:01:23 +0000
Manifest this update:     Tue 12 May 2026 18:01:23 +0000
Manifest next update:     Wed 13 May 2026 18:01:23 +0000
Files and hashes:         1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: gNMYQjvfgdtpxpIGdctSjIouxgEdjDqeTwtxUTnSJQM=)
                          2: oPgrYeYQdKE5w12V1Qsc5asf-z0.roa (hash: DyrqcRbA6WGivtdHIlCxrVDtSLyegGOpED1YlRSd3w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c9:20:52:ee:03:ce:83:51:6b:c9:c5:38:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
        Validity
            Not Before: May 12 18:01:23 2026 GMT
            Not After : May 13 18:01:23 2026 GMT
        Subject: CN=3986d48807470a08e5eb63b3d0f78b01e95b5cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:90:bb:80:5d:1f:b9:8a:68:a6:b4:a8:fa:
                    84:7e:ad:3a:0c:d4:e5:d3:20:b4:c0:ca:91:14:d3:
                    d5:c6:7f:58:0c:c5:1d:24:c6:20:ef:20:40:0e:1c:
                    48:c7:e6:a7:dd:92:ee:6d:94:da:0c:06:66:f5:82:
                    2c:4e:c7:22:da:25:50:9e:08:1a:ac:cd:9c:c3:23:
                    67:b6:ac:23:b1:ea:a8:dd:51:c2:6c:15:e1:f8:34:
                    83:b3:b7:da:c5:1f:a7:2a:9e:1f:eb:a0:69:38:18:
                    61:3a:8d:de:1c:bf:ae:3c:39:dd:cd:85:08:f0:0b:
                    90:6b:69:98:e2:2e:43:67:5f:77:5a:88:d1:ee:55:
                    41:5a:3f:9b:19:53:89:68:6a:e0:68:c9:91:92:f4:
                    55:04:03:ad:e9:c0:e8:de:fd:67:ca:52:37:59:05:
                    77:2d:69:95:2e:cb:f8:15:ad:be:4b:84:09:ca:af:
                    64:c1:53:2d:f1:50:b0:de:7b:40:de:08:f1:49:fa:
                    f5:79:37:25:3c:29:5f:44:dd:01:73:9a:3c:02:17:
                    e8:b4:67:5f:ea:b6:0b:55:a0:3a:51:38:6f:a3:0c:
                    83:43:79:a2:63:e7:93:c4:eb:f9:e1:1e:11:3d:bc:
                    71:77:79:71:77:db:f4:fb:43:16:83:90:83:77:ac:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:D4:88:07:47:0A:08:E5:EB:63:B3:D0:F7:8B:01:E9:5B:5C:B9
            X509v3 Authority Key Identifier:
                keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:e2:74:f8:97:3c:1a:ba:e2:4f:01:f9:1d:fc:3f:57:db:
         96:0b:ca:14:f8:88:a6:76:74:91:f9:1e:f2:fb:60:64:67:0e:
         92:a8:f6:9d:d9:39:6e:28:72:d5:28:5c:f2:c8:78:53:14:27:
         f9:c4:53:3f:87:7e:f7:80:94:ca:b4:df:ea:c6:b7:8a:48:02:
         b3:17:4f:cf:fd:30:b2:64:1b:f2:fb:c5:c5:0a:fc:04:50:8e:
         83:18:93:8c:ed:0c:50:25:b4:db:dd:ee:53:28:8b:3f:2a:28:
         70:29:46:76:3b:23:e1:9e:ce:3d:52:e1:6b:b0:51:ce:17:ce:
         22:b3:a8:c2:c0:14:a4:50:01:b3:4b:52:09:67:4d:e6:cf:07:
         61:aa:f7:8f:55:a3:cd:1f:ff:99:cf:78:f3:b2:4d:55:38:04:
         de:5d:f7:ea:70:43:d0:df:6d:06:35:cd:ee:59:41:8b:32:96:
         ea:c6:ea:31:27:6c:bb:5c:f6:da:bd:13:ff:80:35:7e:c1:cc:
         3a:35:0e:9c:69:a1:b7:90:35:1c:84:59:b5:73:ca:e5:a1:75:
         ed:2f:bd:b3:ac:13:7d:7a:00:12:71:bb:cd:b2:50:3b:21:47:
         cb:e6:2f:1f:52:03:82:eb:8f:5e:53:40:54:33:0c:40:de:ba:
         56:f9:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:25 2026 by rpki-client