Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          cTPUbP0vWp2WcAHsgfMJ4B7zrVtqpdryzbuPk5a2uXU=
Subject key identifier:   6E:9E:35:37:5C:DF:3B:24:A6:8C:81:5F:3C:52:C6:D2:71:F8:EB:5F
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       019E3004EC1960E3FF61CE544E97079DA26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          0F76
Signing time:             Sat 16 May 2026 09:01:29 +0000
Manifest this update:     Sat 16 May 2026 09:01:29 +0000
Manifest next update:     Sun 17 May 2026 09:01:29 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: lHZ+zeLLByuRF8Zay0/e4WEbA36M82wFEOERyLHGIwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:ec:19:60:e3:ff:61:ce:54:4e:97:07:9d:a2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: May 16 09:01:29 2026 GMT
            Not After : May 17 09:01:29 2026 GMT
        Subject: CN=6e9e35375cdf3b24a68c815f3c52c6d271f8eb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:aa:14:74:e7:36:50:a9:a7:58:be:d1:4f:
                    55:cc:c6:61:06:d5:d5:1d:e3:77:e6:10:8b:77:3e:
                    f5:ee:a8:9f:04:18:7d:7d:26:6b:35:d2:ba:f9:49:
                    90:fd:e5:d1:66:37:4f:83:44:59:ef:5e:4c:46:39:
                    18:bb:47:05:57:7b:83:c0:d4:db:1e:05:29:d1:81:
                    ac:cb:ed:22:79:53:92:2d:ea:7f:b8:a9:21:74:18:
                    6f:fb:4d:02:60:cf:1e:89:4d:66:a4:d6:87:56:3e:
                    38:b2:06:f9:cd:07:36:86:bd:e7:cb:06:95:9f:ce:
                    8a:c3:79:64:1b:6c:1f:be:4e:b3:f9:cb:62:c2:c2:
                    45:f7:63:b8:f1:3f:65:e4:c0:08:04:08:33:1e:21:
                    3d:d1:5f:af:e8:b2:7d:96:b6:6b:34:b9:0f:44:1e:
                    e0:4e:7a:51:8e:86:aa:33:ae:2d:ec:02:fe:93:9a:
                    cb:71:c3:17:de:b5:79:24:b0:c5:c1:ee:63:f4:cd:
                    35:de:98:6d:75:f5:fc:ad:64:59:26:ec:97:a0:8a:
                    84:30:7b:7a:fd:91:a3:3c:2c:89:a3:a7:89:05:47:
                    15:e9:8b:93:38:e5:93:53:e2:01:72:5e:29:2c:be:
                    b3:fb:15:a1:b7:73:7a:35:02:0d:41:72:04:02:eb:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:35:37:5C:DF:3B:24:A6:8C:81:5F:3C:52:C6:D2:71:F8:EB:5F
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:0f:a7:15:a2:66:a0:b3:78:48:aa:3d:66:fc:59:b1:10:
         aa:68:67:cb:13:0f:34:4c:e6:3a:45:94:cd:ae:ec:bd:a8:ba:
         c8:15:52:57:7c:53:3e:07:cb:1f:ce:08:55:49:74:e6:53:b2:
         28:0b:8a:a5:22:4f:0d:ed:4d:3b:50:42:2d:7b:f0:79:f6:56:
         47:55:ab:84:19:9d:e2:f1:6a:70:9d:37:fa:86:99:55:69:50:
         07:0e:e6:d8:5a:93:44:0a:59:12:7f:ce:8a:5e:c4:10:2c:29:
         39:7c:9e:a2:bc:9b:2e:29:c8:32:83:12:8b:04:63:70:f9:2f:
         f6:45:0b:80:d2:30:67:5d:44:45:c8:bc:83:2c:7b:a9:22:c5:
         16:a3:a0:c5:d7:a6:a6:44:54:9d:65:9f:ca:6e:19:16:b9:89:
         46:0a:be:0e:a5:98:12:24:df:72:ae:51:c7:d5:3e:90:5a:b5:
         07:93:68:75:00:b4:d4:4d:7a:21:05:ee:42:ef:45:cb:f5:88:
         18:af:52:f7:9e:6b:79:fa:d1:1f:17:7f:1b:c5:29:28:c0:91:
         1d:c8:00:33:83:0c:03:23:2f:1e:ac:29:0b:1d:fb:e5:e2:6a:
         a5:bc:6c:92:55:3a:b9:3d:2a:e3:b6:a5:cd:98:6e:63:54:fc:
         cc:89:b9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBOwZYOP/Yc5UTpcHnaJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2VkZGM0NGJjNmY1MzQ0NTc2Y2Y1OWFmMDAxMzVjNmI2
MmMwMWQwHhcNMjYwNTE2MDkwMTI5WhcNMjYwNTE3MDkwMTI5WjAzMTEwLwYDVQQD
Eyg2ZTllMzUzNzVjZGYzYjI0YTY4YzgxNWYzYzUyYzZkMjcxZjhlYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXaqFHTnNlCpp1i+0U9VzMZhBtXV
HeN35hCLdz717qifBBh9fSZrNdK6+UmQ/eXRZjdPg0RZ715MRjkYu0cFV3uDwNTb
HgUp0YGsy+0ieVOSLep/uKkhdBhv+00CYM8eiU1mpNaHVj44sgb5zQc2hr3nywaV
n86Kw3lkG2wfvk6z+ctiwsJF92O48T9l5MAIBAgzHiE90V+v6LJ9lrZrNLkPRB7g
TnpRjoaqM64t7AL+k5rLccMX3rV5JLDFwe5j9M013phtdfX8rWRZJuyXoIqEMHt6
/ZGjPCyJo6eJBUcV6YuTOOWTU+IBcl4pLL6z+xWht3N6NQINQXIEAuuuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6eNTdc3zskpoyBXzxSxtJx+OtfMB8GA1UdIwQY
MBaAFOQ+3cRLxvU0RXbPWa8AE1xrYsAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZGFhNzItMDMxNC00NmM1LWJlNWIt
OWE2OTMwNDI1OGEwLzEvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZGFhNzItMDMxNC00NmM1LWJlNWItOWE2OTMwNDI1OGEw
LzEvNUQ3ZHhFdkc5VFJGZHM5WnJ3QVRYR3Rpd0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQYPpxWi
ZqCzeEiqPWb8WbEQqmhnyxMPNEzmOkWUza7svai6yBVSV3xTPgfLH84IVUl05lOy
KAuKpSJPDe1NO1BCLXvwefZWR1WrhBmd4vFqcJ03+oaZVWlQBw7m2FqTRApZEn/O
il7EECwpOXyeorybLinIMoMSiwRjcPkv9kULgNIwZ11ERci8gyx7qSLFFqOgxdem
pkRUnWWfym4ZFrmJRgq+DqWYEiTfcq5Rx9U+kFq1B5NodQC01E16IQXuQu9Fy/WI
GK9S955refrRHxd/G8UpKMCRHcgAM4MMAyMvHqwpCx375eJqpbxsklU6uT0q47al
zZhuY1T8zIm5Ow==
-----END CERTIFICATE-----
Generated at Sat May 16 15:40:02 2026 by rpki-client