Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File:                     5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier:          jDdDpuIfJpj5LHzSVTUgBNXhNvLsuGEWhsL5nPnlhDI=
Subject key identifier:   E2:EF:5D:8B:CE:6F:9E:D0:B9:5C:DC:69:74:3D:F5:3B:74:C9:D2:F1
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer:       /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial:       019E3072AAF043D13B39C153815B704FBC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number:          0580
Signing time:             Sat 16 May 2026 11:01:21 +0000
Manifest this update:     Sat 16 May 2026 11:01:21 +0000
Manifest next update:     Sun 17 May 2026 11:01:21 +0000
Files and hashes:         1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: Uz0QMv8r/xMizhZFxkgy0MhNW3/xxP3YqLpiXHqFU6s=)
                          2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:aa:f0:43:d1:3b:39:c1:53:81:5b:70:4f:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
        Validity
            Not Before: May 16 11:01:21 2026 GMT
            Not After : May 17 11:01:21 2026 GMT
        Subject: CN=e2ef5d8bce6f9ed0b95cdc69743df53b74c9d2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:7e:f7:5e:b2:98:d3:d3:e6:7a:b6:08:db:
                    d1:58:f3:58:6d:fe:bb:3d:e9:1a:8b:b8:fc:4c:c4:
                    26:da:07:fd:50:0f:35:49:99:a1:e8:25:ac:18:70:
                    d4:0d:6e:b2:68:85:92:29:1a:46:fb:26:5f:38:cf:
                    5a:84:fa:f2:4c:5d:c1:c0:a5:9d:cc:7d:9f:07:52:
                    98:26:4f:b1:1a:2d:08:0a:b9:cf:87:b5:b8:b9:00:
                    1e:ac:36:06:87:0b:86:3d:ff:69:63:04:41:d1:6a:
                    5b:ff:05:37:c7:44:40:02:bf:12:33:c8:3d:06:47:
                    2f:7e:1d:e6:bb:ce:76:a2:1f:b8:93:bc:15:d0:94:
                    a6:67:cb:da:23:e7:92:b0:67:69:8c:f7:12:7b:b9:
                    20:3f:05:e3:84:ab:6d:56:60:79:3b:8e:7c:0e:51:
                    25:6b:b6:17:9d:5e:37:e8:3f:97:9b:f4:e6:98:dc:
                    2b:1f:51:f8:08:63:46:ae:dc:94:51:c5:24:93:ab:
                    a3:61:ce:29:bd:5a:1c:0a:13:e1:58:2f:02:9c:0c:
                    19:a2:54:e0:77:de:56:f2:f6:d9:b6:d9:ff:aa:92:
                    f2:de:32:b2:22:b6:2e:7f:3d:57:64:57:d3:36:f3:
                    7a:fa:d4:bb:87:04:9f:96:63:81:fb:5a:c5:35:3b:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EF:5D:8B:CE:6F:9E:D0:B9:5C:DC:69:74:3D:F5:3B:74:C9:D2:F1
            X509v3 Authority Key Identifier:
                keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:21:0b:9c:42:bd:1c:ff:41:84:5b:ad:ef:9a:08:4d:9b:4c:
         06:b3:9d:e8:49:44:2e:07:2f:ba:81:79:7d:40:b2:1e:3a:dc:
         bc:01:d9:a2:67:2e:7c:6b:b0:a4:e3:01:a1:54:2b:28:3d:6a:
         a8:9a:f5:7f:4d:e0:6a:1e:50:c4:6e:db:bf:1d:94:01:60:67:
         7e:a0:f3:7a:d1:d4:67:a9:60:41:3a:5f:b0:1e:21:88:1b:7b:
         2d:29:1c:23:01:4c:46:4e:f5:6f:e8:2e:aa:84:71:94:3e:03:
         af:bf:1b:55:79:f0:ab:55:1f:e6:92:ef:e3:5b:71:8d:f9:ff:
         82:5a:9b:46:9a:3f:3f:64:1d:1b:8b:eb:5b:df:95:91:f2:fd:
         20:fb:8f:2e:d1:6f:dc:80:a5:7d:a1:f9:15:b5:60:3f:07:eb:
         89:8a:01:1f:09:58:2e:b8:26:d7:58:7b:db:14:e9:b3:b3:53:
         bf:6c:1a:71:15:6f:0e:9d:39:a1:52:11:0e:ff:bc:67:28:2e:
         6a:cb:35:f8:53:19:d4:2a:67:a5:04:95:2a:2c:e3:ae:23:a3:
         85:07:ad:f5:b9:71:e1:9f:c3:50:67:2f:73:f4:62:d4:5c:d9:
         c5:d0:03:76:12:8e:30:30:28:e2:3d:b6:f5:ea:0c:cf:63:32:
         b4:71:32:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:56 2026 by rpki-client