Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier:          DSreg6qexq77WkFvyo7n3X4m3dEtboaWdK/dqlS1gyg=
Subject key identifier:   C2:9E:16:91:69:48:9E:1C:99:1A:BA:CD:FE:E7:D3:90:AF:B5:C5:1D
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer:       /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial:       019E0407DE988A03FD1A1D5A24B76A489871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number:          0562
Signing time:             Thu 07 May 2026 20:01:25 +0000
Manifest this update:     Thu 07 May 2026 20:01:25 +0000
Manifest next update:     Fri 08 May 2026 20:01:25 +0000
Files and hashes:         1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: 23sYuluLS0v7s32ep8JRhLEKLN/caLJUw/Dpx3bWn98=)
                          2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
                          3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:04:07:de:98:8a:03:fd:1a:1d:5a:24:b7:6a:48:98:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Validity
            Not Before: May  7 20:01:25 2026 GMT
            Not After : May  8 20:01:25 2026 GMT
        Subject: CN=c29e169169489e1c991abacdfee7d390afb5c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:65:0f:9f:e9:5b:37:ff:21:e4:12:3c:91:
                    ca:be:15:3d:cd:eb:a4:8c:06:29:bd:36:10:1e:67:
                    a8:a2:5e:53:c6:6a:5f:14:db:6b:5b:95:e6:0d:cc:
                    89:b3:42:0f:4c:79:68:95:b1:57:8d:20:c6:d9:23:
                    3f:88:63:07:9c:9c:20:dc:a1:2e:21:6b:a9:d0:28:
                    92:60:a8:2b:1b:80:c1:01:d9:24:ff:fb:74:7f:c6:
                    8b:59:85:41:2d:07:93:a3:2b:c1:5a:42:61:5e:ad:
                    81:b8:15:ea:ff:6a:8b:87:91:09:eb:a3:f7:b9:d2:
                    0a:72:34:fe:6c:25:f0:86:41:5f:e2:29:68:2b:a7:
                    50:46:1e:4f:7e:cb:67:2c:67:50:90:1b:76:3a:af:
                    0e:d6:ab:75:73:e5:0d:a6:eb:1f:12:47:d7:b2:6a:
                    f5:23:fe:76:6d:2d:79:37:b5:cc:bb:cd:b9:94:34:
                    37:01:16:62:1d:0e:a5:8d:e0:69:65:f2:f1:8d:07:
                    ac:68:a5:e6:b4:64:63:07:5e:39:f1:f6:69:db:ed:
                    bc:43:b1:61:48:7d:93:8b:6a:90:00:c2:11:fa:3f:
                    27:3b:70:df:4f:22:25:de:93:b8:83:7d:81:f0:a3:
                    7c:a5:56:29:b4:c7:f3:e5:83:11:be:20:8f:35:a5:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9E:16:91:69:48:9E:1C:99:1A:BA:CD:FE:E7:D3:90:AF:B5:C5:1D
            X509v3 Authority Key Identifier:
                keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:99:78:91:94:2a:07:f2:60:34:70:d6:db:3b:ca:6a:ca:
         fe:58:3e:23:d2:c1:69:41:fc:94:03:41:01:80:82:dc:89:d3:
         7f:7a:30:56:df:fa:7e:29:05:e2:63:7e:e1:7b:aa:77:92:e4:
         71:7a:38:2c:74:6a:c4:1b:0f:9a:17:b3:37:1a:ec:ed:37:04:
         69:26:4b:9b:ad:61:e1:85:f8:5b:dc:08:9b:66:e8:15:94:a5:
         55:90:d8:c4:f2:59:88:bf:3e:2c:2e:49:81:2f:6a:20:77:b4:
         e5:c0:2e:3a:27:7f:d7:cb:8b:64:79:a0:0b:ed:9b:09:30:64:
         a6:7f:a3:75:27:69:53:19:f8:b4:66:bc:1b:a2:9b:92:fa:fb:
         d8:02:a2:b0:e4:5c:1d:a5:69:bd:67:e6:d1:0b:21:81:72:ae:
         f5:1e:28:2a:fb:e4:48:16:d4:c2:6b:09:2a:c3:20:a4:3d:89:
         c2:af:13:e1:3a:1e:95:ec:f8:9e:f3:42:40:3d:9a:f9:4e:5f:
         b5:16:b0:cd:b5:aa:53:97:9e:a8:89:e3:a4:44:cb:51:1c:17:
         ae:7d:ae:b1:c5:01:e7:03:fe:18:1f:89:46:42:c7:e3:3a:76:
         89:66:bc:1a:2b:de:df:64:f9:28:cc:7c:7c:2b:b5:6c:90:bd:
         be:ab:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:20:15 2026 by rpki-client