Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File:                     H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier:          f4ZiJaomMHwSmeRkcbqqJIIb8I5EyNWwlORRPDE5fr8=
Subject key identifier:   2D:6F:F6:92:E4:B8:0D:23:2D:2D:61:36:02:38:1A:FD:1F:24:48:8E
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer:       /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial:       019E2C5E5C8C4D5FDDCDB91738ACFDEDCE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number:          18A1
Signing time:             Fri 15 May 2026 16:00:42 +0000
Manifest this update:     Fri 15 May 2026 16:00:42 +0000
Manifest next update:     Sat 16 May 2026 16:00:42 +0000
Files and hashes:         1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: SFR6YfWvSVWt/K9LDYyDX8fVeANtsoGIGd76l2u5N0I=)
                          2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:5e:5c:8c:4d:5f:dd:cd:b9:17:38:ac:fd:ed:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
        Validity
            Not Before: May 15 16:00:42 2026 GMT
            Not After : May 16 16:00:42 2026 GMT
        Subject: CN=2d6ff692e4b80d232d2d613602381afd1f24488e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:50:31:88:2d:36:d1:e9:0d:52:4c:08:35:
                    f4:cb:7d:4a:32:c3:03:d5:89:03:3c:d5:2b:16:4a:
                    af:06:97:03:b1:84:69:5d:18:48:8f:1e:22:42:51:
                    7a:88:76:ae:89:b6:8e:32:8c:ce:b2:47:20:fe:1d:
                    02:2b:4c:23:64:bf:13:f4:b9:12:f1:eb:8e:a6:dc:
                    e3:bc:dd:44:47:0a:da:88:bb:2f:ef:ea:fa:02:8b:
                    d0:2f:2e:c0:70:47:a4:35:92:50:c1:ee:d6:d2:58:
                    f3:01:2a:09:fb:b6:18:0a:ca:9d:83:63:68:a4:af:
                    94:cf:aa:0d:67:c0:13:ac:8b:cd:e2:6b:fb:7e:84:
                    f3:36:dc:10:d3:3d:0b:b8:72:65:34:f7:73:fc:a5:
                    4e:bc:fd:76:c7:d1:37:8d:94:82:61:a8:70:03:10:
                    25:77:fc:b4:69:0c:83:17:d1:cc:c5:90:e8:21:ff:
                    e3:c7:0f:b6:c8:ba:75:f7:95:72:f6:df:21:6c:e6:
                    40:11:81:ff:b8:c2:76:1e:f1:4f:ee:f7:04:a3:ee:
                    48:e7:20:76:6c:75:67:1b:88:9e:14:c8:ab:61:48:
                    38:c8:37:a3:53:4f:a1:7a:25:e0:2b:14:6b:fe:37:
                    93:8d:69:0c:0a:af:9a:d1:97:4f:e9:3b:3c:87:c2:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:F6:92:E4:B8:0D:23:2D:2D:61:36:02:38:1A:FD:1F:24:48:8E
            X509v3 Authority Key Identifier:
                keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:23:f9:ec:08:e5:3c:99:9a:53:1b:51:a8:45:44:bd:fa:
         3b:0f:a9:7f:1f:0a:8e:32:e6:e1:a9:c7:69:3e:df:c0:91:11:
         ab:c2:1d:a0:80:0d:36:eb:e2:9e:48:fd:4f:04:e2:2e:cb:93:
         ef:19:34:3d:9c:99:07:6b:25:55:2b:c6:ad:71:3a:d9:d4:27:
         ee:50:59:a6:00:87:86:9f:90:ca:38:49:d6:c5:9e:ff:2e:e1:
         37:4a:d0:c6:86:97:6b:58:e9:21:f9:90:95:d4:77:08:3a:c3:
         64:86:54:4c:2b:f1:b2:9b:43:a4:a0:1b:f9:cf:6f:d7:5a:2f:
         90:37:02:16:e2:a9:c0:cd:21:30:eb:8f:9b:e2:87:df:3a:c4:
         51:91:3b:e3:f1:27:7c:8d:8a:88:1c:7c:49:70:b4:67:fd:43:
         4e:17:e4:50:3c:44:d4:18:49:e2:3d:9f:6e:c1:49:22:fc:89:
         9f:ef:51:1b:44:ed:7f:c6:40:9e:33:b0:44:3d:a6:90:84:fd:
         b1:04:ab:ac:29:5c:1e:62:e2:a2:79:72:d6:05:7d:03:57:c1:
         cc:92:e8:53:5e:7f:4c:b4:a9:04:2c:0c:93:05:a3:5b:30:ae:
         4c:87:5a:a3:d5:c8:b5:3d:aa:74:6b:58:93:9a:53:cb:e8:cd:
         1e:23:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:13 2026 by rpki-client