Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          qsdA38dBxVTLz3yTxEN9cb75Z2X4m3mIlpUtYlHNTeo=
Subject key identifier:   CA:8A:66:64:C7:AD:8B:01:34:FF:0C:CC:B1:6C:5B:14:F2:A8:C9:E1
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       019E30721535D349B8507A30732CDCA8F8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          0893
Signing time:             Sat 16 May 2026 11:00:43 +0000
Manifest this update:     Sat 16 May 2026 11:00:43 +0000
Manifest next update:     Sun 17 May 2026 11:00:43 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: O6kmJNO5+Qq2S4i1/VTfgs6RTmzZNr6WDalJ0WI8lfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:15:35:d3:49:b8:50:7a:30:73:2c:dc:a8:f8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: May 16 11:00:43 2026 GMT
            Not After : May 17 11:00:43 2026 GMT
        Subject: CN=ca8a6664c7ad8b0134ff0cccb16c5b14f2a8c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:bb:0a:a6:a1:7d:78:a5:3d:13:72:94:6c:
                    5c:00:33:8c:08:cc:d5:e4:9b:25:4b:3c:4c:3a:fe:
                    8b:58:c2:75:66:8f:6a:9a:7e:37:6f:21:51:43:1a:
                    d5:cd:e4:49:fe:2e:35:43:85:5d:1e:09:0f:2d:4e:
                    7f:c5:e4:1a:38:52:ce:90:d0:f4:b9:b6:10:f1:d3:
                    81:66:c2:76:35:10:1b:f1:5f:cc:26:79:2c:d5:15:
                    c4:06:64:19:75:f6:cd:1d:2c:f6:cb:d6:5c:36:c5:
                    27:8a:17:eb:9f:d4:fb:c0:75:a9:6e:69:e2:99:24:
                    b1:a5:40:e9:c0:c0:a9:42:5a:40:b1:4e:b4:ab:a8:
                    e2:fd:d0:d4:e3:a7:58:77:cd:cf:eb:90:26:26:fc:
                    35:fd:27:a5:d0:69:c7:01:0a:bf:c9:40:ab:c5:b6:
                    17:01:f7:f0:4f:11:f1:50:34:da:30:46:2c:4c:79:
                    00:da:a3:78:5c:84:e7:90:36:b4:87:22:68:f6:c3:
                    ca:f0:4e:f5:0d:1a:5c:de:8d:83:8e:65:10:e3:a8:
                    5a:6b:46:dd:e8:6b:ac:97:8a:26:b5:5b:fc:3f:c0:
                    e0:cc:91:fc:ae:c8:05:e6:5d:87:45:e1:77:ee:34:
                    ef:88:0e:96:e3:53:19:f0:f9:eb:1c:ff:11:31:53:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8A:66:64:C7:AD:8B:01:34:FF:0C:CC:B1:6C:5B:14:F2:A8:C9:E1
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a2:90:7c:95:90:f1:b3:6c:b2:23:e2:1a:b5:64:0e:c6:e0:
         cc:46:f8:7f:66:63:41:a6:27:b6:ed:06:aa:8b:22:c8:bc:d4:
         8f:99:ce:c5:f7:10:45:d4:10:04:c8:84:4d:bd:23:38:5a:7d:
         d2:a8:a2:f1:65:e7:85:8a:b9:8a:70:6a:69:92:09:bb:9a:1c:
         c6:2f:d5:19:33:4c:15:04:45:2a:80:12:71:b9:e4:7f:aa:ad:
         b5:2b:e0:0e:d0:2b:06:eb:2e:5b:18:9b:4f:f5:eb:53:b3:4e:
         83:52:08:45:5a:99:1d:01:cf:41:7b:8c:75:2e:4f:a8:95:c1:
         b2:cf:93:6c:8b:30:d6:25:49:ac:64:ba:cf:78:08:1a:3c:48:
         0b:b3:71:60:11:24:c2:28:b6:32:8a:c6:81:a5:09:92:44:37:
         9b:7d:33:94:c0:24:2d:1a:0b:07:54:fd:a1:af:00:9a:fe:18:
         a4:27:b4:a1:32:cf:7b:f9:a3:56:3a:10:2c:a5:cd:b4:39:5d:
         e6:6f:a6:91:8d:b0:07:58:cb:8c:14:60:2c:6f:3d:50:d4:df:
         ff:3c:41:72:3c:67:01:77:7c:6b:b0:36:ce:88:8e:51:cb:2e:
         00:f1:1d:a7:fc:07:e6:9a:d9:ed:fc:83:97:4e:59:20:18:d4:
         4a:b6:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:24 2026 by rpki-client