Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File:                     5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier:          7/CMrAeZqkmJYb9vugNrowbi/apv3CJYkhSjdd8rxUM=
Subject key identifier:   B4:C3:06:11:B7:66:A6:43:7C:6C:89:1C:F1:8A:E9:E0:9D:38:CA:80
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer:       /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial:       019E30E00539DE8EC100CF209ADCD75C049F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number:          1090
Signing time:             Sat 16 May 2026 13:00:48 +0000
Manifest this update:     Sat 16 May 2026 13:00:48 +0000
Manifest next update:     Sun 17 May 2026 13:00:48 +0000
Files and hashes:         1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: JQgXqD+efZuAjvAgVD5UVBqgosPH1BDMJ0kRgtagJFs=)
                          2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:05:39:de:8e:c1:00:cf:20:9a:dc:d7:5c:04:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
        Validity
            Not Before: May 16 13:00:48 2026 GMT
            Not After : May 17 13:00:48 2026 GMT
        Subject: CN=b4c30611b766a6437c6c891cf18ae9e09d38ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:c4:86:f1:8a:73:5e:30:5b:71:7c:bb:6f:
                    68:4b:3b:f1:09:a1:89:6f:04:9d:1d:2b:dd:ff:40:
                    02:43:d4:16:3b:90:68:69:74:b3:70:fc:b9:26:77:
                    ec:89:21:a8:3d:cc:8b:51:b2:29:a0:83:48:91:ee:
                    62:8d:41:bc:d8:38:35:bf:b2:61:cc:d8:85:bf:0f:
                    ef:52:b1:aa:c3:b8:01:0a:7c:9c:81:32:13:a3:4f:
                    b6:1e:4c:dc:7c:95:4b:63:ec:7d:a9:23:0b:d8:23:
                    b7:4c:8f:b9:8d:c2:b2:6d:7e:d7:22:d1:29:3c:60:
                    74:59:ec:36:16:8d:2d:6a:22:8e:42:d0:c7:fc:30:
                    54:c2:47:76:c6:a9:01:38:48:1d:9b:a7:6b:c9:ad:
                    9e:2f:b3:79:90:eb:ad:50:89:a0:b7:8c:a2:f4:94:
                    94:60:7d:b7:c9:36:b7:e5:b6:f4:45:e2:67:e6:4d:
                    74:33:15:b4:a2:4d:3d:7a:73:de:18:9c:df:d3:2f:
                    f7:a8:7e:18:3f:65:06:58:7b:b9:a7:52:ba:e4:48:
                    b8:67:13:3f:e6:11:c3:7c:55:00:48:8b:d2:9a:07:
                    06:aa:72:97:fe:5c:d9:e6:7a:f7:ec:26:5d:60:7b:
                    6d:3a:1c:ba:2f:5a:7e:c4:d9:cd:b2:cf:89:7a:39:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C3:06:11:B7:66:A6:43:7C:6C:89:1C:F1:8A:E9:E0:9D:38:CA:80
            X509v3 Authority Key Identifier:
                keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:2d:86:00:66:a6:fd:fa:f8:29:44:82:69:8a:5f:e8:74:
         00:96:70:4d:bd:c8:32:cd:8c:c9:18:83:15:0d:dc:ef:9f:2c:
         6c:e5:2c:d1:aa:71:22:11:3c:3e:07:c4:46:5a:79:f4:23:dc:
         28:4e:2b:67:8a:cb:c2:2e:d2:d8:24:7f:1d:7f:ee:1f:f3:89:
         07:f9:0e:2e:c8:da:18:c0:1c:b3:ca:1b:fe:bf:bf:54:f3:e8:
         e4:a8:9d:ee:64:c9:c1:d8:2f:4f:09:a4:72:0b:46:e7:35:12:
         2f:38:96:cf:d9:0e:89:9c:6e:b7:5f:6c:74:12:c4:88:3a:c1:
         75:bb:a0:ac:f0:fa:17:39:af:be:b6:33:00:50:8f:7f:5f:3e:
         b7:e7:81:5f:ec:81:b3:eb:f6:5e:ae:93:71:6f:d5:ac:73:26:
         24:41:01:5e:67:15:48:15:ee:a2:8f:bd:93:30:ad:dd:fd:96:
         da:c3:71:9e:e1:62:94:c3:9a:b7:90:30:fc:df:df:c4:80:95:
         c7:e3:e1:5d:bc:18:e3:f1:97:e2:69:3a:0f:7f:14:44:03:1b:
         21:62:10:c3:e9:04:7f:ca:ca:7b:ef:88:8a:75:51:d7:91:c6:
         5c:33:c5:fe:73:b2:c2:4b:2a:fb:76:b0:0f:e0:bc:47:80:44:
         90:12:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:10 2026 by rpki-client