Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File:                     5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier:          Avis7UA+h3FLDFI9iqsH8V8Dx/Y09YR+kXuyhXHrXt0=
Subject key identifier:   DD:6A:46:61:12:91:7E:B6:07:FB:80:33:4A:9E:E3:CB:97:C7:BA:1A
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer:       /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial:       019E307231DBED872CF7D327A71189493CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number:          0BC8
Signing time:             Sat 16 May 2026 11:00:50 +0000
Manifest this update:     Sat 16 May 2026 11:00:50 +0000
Manifest next update:     Sun 17 May 2026 11:00:50 +0000
Files and hashes:         1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: 0tWOMq/T+X9frbtmcEYg8JxKAdWLSvS6eE+VO+tcIOQ=)
                          2: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (hash: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:31:db:ed:87:2c:f7:d3:27:a7:11:89:49:3c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
        Validity
            Not Before: May 16 11:00:50 2026 GMT
            Not After : May 17 11:00:50 2026 GMT
        Subject: CN=dd6a466112917eb607fb80334a9ee3cb97c7ba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:6b:c3:aa:0c:bd:f1:cd:f0:d1:21:c3:9b:
                    bb:c9:00:58:db:13:e6:66:95:13:d2:cb:37:6c:3f:
                    77:41:8b:ef:47:85:ac:fd:39:dd:0f:74:24:1e:13:
                    e6:20:58:05:ce:7f:28:74:5e:1e:bc:d0:89:77:27:
                    e0:2f:03:dd:92:e0:ca:e8:5c:09:9d:1c:dd:ee:0c:
                    f5:b3:8f:7b:f9:e5:fa:2f:49:7b:61:25:4d:c4:e8:
                    dd:74:1b:24:27:76:a3:f3:a0:e7:df:81:ab:5f:ea:
                    b3:41:43:82:c8:87:77:40:88:87:16:b6:a9:dd:6d:
                    b3:82:c6:71:d3:3c:54:35:d1:de:a6:bb:96:69:2b:
                    a3:ee:48:14:2d:cf:87:6c:41:34:83:9b:03:a4:f5:
                    14:cc:80:fe:80:e6:0e:30:c7:57:87:88:71:b1:af:
                    07:b4:aa:d2:43:f1:35:5a:2c:9f:61:46:82:fa:a3:
                    16:84:07:14:0b:fa:21:4e:a2:19:ef:6b:58:3f:66:
                    ec:22:67:0e:6e:94:64:4a:d0:cb:e6:7d:07:c6:8c:
                    91:9a:e0:9e:9f:a4:5b:2a:c8:b0:66:97:f2:b1:3a:
                    24:8e:d9:6a:cc:ed:87:99:eb:fa:f0:4c:65:f9:db:
                    c2:c7:6b:88:d4:15:b5:a0:1b:25:18:00:90:8e:11:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:46:61:12:91:7E:B6:07:FB:80:33:4A:9E:E3:CB:97:C7:BA:1A
            X509v3 Authority Key Identifier:
                keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:70:b8:e0:5c:e9:74:e8:80:3d:78:96:74:73:cc:3f:8d:
         8a:8a:2a:c7:d8:a5:10:30:65:a2:0d:c2:9e:2f:cd:b1:6a:3f:
         17:fc:7d:24:51:20:21:ac:24:61:14:d6:6b:f7:8c:c4:b4:8b:
         8a:17:98:90:b3:49:3f:c9:02:20:30:bb:dc:25:20:a3:e0:12:
         25:d6:d7:41:7d:9e:21:5b:b0:19:1e:cd:7c:34:98:54:da:bb:
         cd:51:ca:b1:19:66:ed:ce:c0:a9:6c:95:bc:12:8a:d4:6d:19:
         55:bc:78:af:94:08:41:21:65:3d:c8:36:47:70:b3:a5:c7:13:
         3f:64:5d:6c:8b:a1:b9:38:b2:54:09:42:70:ab:11:e8:6f:5e:
         99:4d:e0:45:49:c0:a2:7e:de:29:af:70:b6:0c:18:90:61:45:
         f8:f2:9c:f1:a5:c1:15:3c:02:87:74:61:2c:2c:39:13:5e:57:
         b6:8b:b7:a4:f3:84:b1:6e:9e:a2:38:89:95:7a:a3:4d:d5:83:
         07:6d:18:4a:d6:34:66:f2:77:8a:7d:ec:65:47:3a:ff:40:25:
         0e:96:84:58:3f:f1:a8:d2:a7:c3:83:1f:91:72:ed:62:39:88:
         d0:fa:37:c3:d0:55:2c:1c:ac:c5:48:77:c2:0a:e0:53:80:55:
         54:ef:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:20 2026 by rpki-client