Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          GHpMIBXF2/uXaOqoA2Yvsn90/U4bhd1B/V5v1dzmp2c=
Subject key identifier:   5E:9C:0F:A6:AC:0A:00:42:D7:DE:00:ED:39:38:F2:C1:A3:E7:72:FE
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       019E2CCC337291DEDCE195D0E3A83612201D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          17F5
Signing time:             Fri 15 May 2026 18:00:40 +0000
Manifest this update:     Fri 15 May 2026 18:00:40 +0000
Manifest next update:     Sat 16 May 2026 18:00:40 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: eX5AFni4ObKr9NLlPt1iuAyfJ69kU65ObQaPNbSDzrU=)
                          2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:cc:33:72:91:de:dc:e1:95:d0:e3:a8:36:12:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: May 15 18:00:40 2026 GMT
            Not After : May 16 18:00:40 2026 GMT
        Subject: CN=5e9c0fa6ac0a0042d7de00ed3938f2c1a3e772fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:a5:99:85:2b:7f:06:a9:4a:7b:a4:c7:d2:
                    84:f5:83:23:64:73:43:cb:ff:4e:fa:e6:4c:29:57:
                    1e:b7:5d:43:10:ef:00:e7:2e:6a:58:de:f8:43:10:
                    2a:5d:e7:75:c6:63:b5:23:55:94:30:b7:2a:e6:bc:
                    98:d5:4b:61:e8:35:db:77:0b:30:0e:d1:b8:3d:56:
                    98:e5:eb:43:0b:cb:e8:a8:07:da:29:d8:5c:ab:cb:
                    d0:31:2e:54:de:eb:c5:8f:57:f7:29:6f:21:44:48:
                    4a:fa:e1:35:9a:c9:8f:98:f5:80:06:6c:a4:1f:65:
                    17:84:4d:74:d0:82:f6:0c:96:67:9e:16:f8:04:1a:
                    bf:aa:62:97:60:6b:f7:f2:59:fe:31:2f:1c:52:92:
                    02:ad:ce:84:73:c2:6f:03:b1:21:60:66:5c:1e:fe:
                    e5:c4:b8:b3:a7:ec:05:23:ce:58:c4:e0:49:4f:30:
                    ba:06:77:16:70:c7:66:0d:60:f3:ef:83:e9:d4:10:
                    4f:be:a2:fa:e0:be:90:1b:d6:74:02:b3:a8:06:5d:
                    ba:2c:c0:c2:d5:a1:4a:26:84:0f:c1:4a:a8:ed:d0:
                    36:34:85:b6:1c:ca:58:a8:14:b3:2c:12:0f:f3:34:
                    ca:48:09:d7:1f:50:a0:9b:29:64:2d:3f:ae:78:2c:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:0F:A6:AC:0A:00:42:D7:DE:00:ED:39:38:F2:C1:A3:E7:72:FE
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:3e:b7:9c:43:e2:77:ff:19:d5:a7:fd:59:df:68:57:7b:
         24:68:07:c6:8a:99:76:55:88:f5:7f:65:1c:3b:3d:5c:da:51:
         50:c8:7e:40:8f:23:c1:57:b4:b6:77:22:ed:bb:fe:db:0c:f3:
         fa:2e:96:8a:28:70:6d:82:64:9e:f0:ef:9e:8b:70:f5:5c:03:
         d4:96:fb:ab:a8:4a:d6:29:06:3d:a6:0d:b6:1f:bf:1d:df:99:
         ab:ff:46:c1:7c:e3:1c:48:81:09:c8:46:3c:33:47:2c:3c:a7:
         47:db:0d:73:2a:81:30:84:5c:91:5a:f9:cf:d4:d7:7e:e1:07:
         ca:1b:d9:77:65:3b:2e:ab:c0:11:e4:7d:17:44:02:fa:f8:1b:
         5c:0c:f9:5d:1b:ed:3d:b2:84:b5:d4:fa:91:d6:96:d5:79:50:
         2f:cb:48:b6:f1:96:5d:96:c3:66:0a:a2:94:69:04:63:f6:03:
         03:23:35:4d:4b:8c:db:6d:de:7d:ce:a5:69:a7:16:1b:d8:39:
         e3:f4:d1:77:93:68:f2:bf:62:f9:5b:73:d2:c7:cf:5b:21:72:
         31:1d:14:e1:45:4a:2e:be:32:79:46:9a:93:d7:8f:28:a7:e0:
         ae:4a:26:05:e6:70:51:19:2c:59:8d:ee:70:ea:42:37:4c:9e:
         13:d4:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:46:09 2026 by rpki-client