Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          CmknUh6yxyDVoO/UnYD/arLEmYwSm7ZE14i/vFCOVvk=
Subject key identifier:   97:59:E1:40:56:6E:0E:D3:7E:92:2D:6C:9D:FD:27:16:E4:70:E2:78
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       019E30A98708A16141DED22573A371E18605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          06E4
Signing time:             Sat 16 May 2026 12:01:16 +0000
Manifest this update:     Sat 16 May 2026 12:01:16 +0000
Manifest next update:     Sun 17 May 2026 12:01:16 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: duMBM/xbZsw9sh2AbMqxB9SCkr8VIIpdqsd4kBs+G9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:87:08:a1:61:41:de:d2:25:73:a3:71:e1:86:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: May 16 12:01:16 2026 GMT
            Not After : May 17 12:01:16 2026 GMT
        Subject: CN=9759e140566e0ed37e922d6c9dfd2716e470e278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:8a:57:73:06:5a:c0:fd:17:38:66:7c:6c:
                    af:78:07:40:21:29:bc:38:1b:74:dd:09:42:96:7e:
                    2a:17:6d:e2:1f:18:bc:95:e4:3f:24:36:84:98:72:
                    59:89:b7:ff:fa:7c:5d:45:d4:ac:0a:ca:fd:63:79:
                    73:4f:e7:9f:12:40:73:70:b1:e5:a5:80:43:5a:29:
                    8d:81:4f:db:10:58:b7:8b:7d:bb:df:2d:3a:0c:41:
                    25:45:ac:e6:dc:fe:21:34:eb:b3:06:6a:d5:79:f8:
                    d2:c2:8f:e6:d8:5e:d8:9a:35:78:12:97:49:18:5b:
                    3d:1d:11:4c:e7:47:38:84:c4:e2:4e:91:e1:f3:19:
                    59:b6:6d:15:64:fa:39:b4:af:ca:2a:6e:f2:d2:27:
                    58:05:51:3e:93:c6:69:90:31:55:a9:1c:56:da:6b:
                    f5:14:01:6e:8e:09:65:c1:ae:f8:22:f2:da:e2:a3:
                    5b:2a:49:cf:fc:76:de:70:c5:c7:62:10:e7:28:88:
                    6d:5f:fe:a6:7d:2f:08:c8:ac:1e:38:e6:30:89:1c:
                    fd:cf:71:b8:32:60:8d:6d:cb:e6:d8:72:e5:01:18:
                    15:7b:ac:0b:86:b9:dd:21:a9:45:6a:2e:17:1a:6d:
                    db:53:74:19:16:3a:1a:eb:96:ea:b4:79:2c:fe:f1:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:E1:40:56:6E:0E:D3:7E:92:2D:6C:9D:FD:27:16:E4:70:E2:78
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:16:be:97:95:c8:e7:38:1d:c3:44:26:f7:43:a3:18:4c:0a:
         e9:31:f9:f5:0f:c8:f0:01:08:00:87:ee:d9:d5:bc:99:bf:91:
         6d:ce:c3:6e:95:51:8c:75:8d:b6:f2:38:66:74:15:35:8f:2f:
         5e:9b:80:2e:1b:73:83:93:27:3d:55:51:2f:c9:e8:f1:63:2a:
         9a:e2:69:9e:60:54:cd:48:b1:29:85:ab:8f:18:b2:86:ea:d0:
         35:6c:99:50:db:e7:b4:ac:7f:fb:bf:14:61:5d:32:0a:49:d9:
         a5:c8:51:63:3b:cd:b2:d8:4b:c2:10:e0:1e:2d:23:1c:e5:9e:
         93:86:c8:89:6f:58:b9:e1:c9:cf:97:58:14:94:f5:6b:56:af:
         2c:99:a5:ed:fd:20:9d:4f:b7:58:83:b6:30:68:85:cf:05:5e:
         be:73:04:d5:c4:1f:91:44:b4:d4:22:5f:e9:2e:c0:d1:ff:0c:
         76:06:a5:d3:df:65:08:e7:b2:a3:13:6d:57:46:92:02:26:3c:
         8e:33:08:bc:8e:26:9c:c0:7f:7a:9e:a4:7f:92:c4:55:1d:b9:
         88:a5:43:a2:f3:77:62:cf:6b:ef:39:e4:88:d1:1e:35:68:72:
         1d:4e:cf:4c:70:c7:ba:68:5d:75:22:74:ac:5a:ef:11:43:0a:
         50:6d:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:28 2026 by rpki-client