Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          1nG2Hckq1fL9FDJjB6QkCeGKvzDS15/DkFNIl5cEJJY=
Subject key identifier:   21:B8:ED:49:5F:FB:D5:14:2C:89:5E:A8:EE:45:82:5F:02:69:00:2B
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       019E2F5FFA766ADAFF77A3F139B77285EDED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          0E52
Signing time:             Sat 16 May 2026 06:01:19 +0000
Manifest this update:     Sat 16 May 2026 06:01:19 +0000
Manifest next update:     Sun 17 May 2026 06:01:19 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: l3PQqEDbEQDeMpJnBCeQ2Why4rHKwda4jdFOoKT53KI=)
                          2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:fa:76:6a:da:ff:77:a3:f1:39:b7:72:85:ed:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: May 16 06:01:19 2026 GMT
            Not After : May 17 06:01:19 2026 GMT
        Subject: CN=21b8ed495ffbd5142c895ea8ee45825f0269002b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:44:c3:25:24:ef:ba:a7:50:31:51:5d:15:
                    8c:04:d2:a4:70:1e:bf:86:f9:7d:8f:7b:5f:ee:7e:
                    de:6d:0c:bf:40:31:59:42:09:87:61:b8:5a:1a:5d:
                    0c:09:78:4e:c7:08:2c:32:d4:14:09:55:e1:c0:aa:
                    42:56:5f:13:20:76:0b:68:41:b0:ef:65:da:e0:08:
                    13:5a:84:ca:16:af:50:b9:bd:13:5b:ba:d3:a9:29:
                    6f:84:2c:b1:43:1c:d2:8a:50:77:e9:7c:af:f4:55:
                    6f:9c:2a:dd:6f:aa:6e:7d:bd:b2:67:a5:a0:d9:c9:
                    b4:84:4c:4e:32:f3:94:74:ce:6d:f0:bf:9b:ad:0d:
                    a1:18:0e:0e:64:4c:69:53:7d:0c:c9:a4:9c:12:06:
                    02:b7:ea:21:03:e6:9e:96:6c:97:eb:91:84:ba:fa:
                    c0:88:71:be:8d:1c:5b:c7:8d:d8:22:1c:49:f8:e1:
                    31:b2:05:b6:b5:b2:83:dd:53:52:e0:96:8c:41:65:
                    70:b7:14:23:c7:49:4a:0c:e8:4e:78:37:fa:6d:c7:
                    22:36:37:30:bf:3e:6e:ad:25:cd:e0:c0:ba:00:58:
                    d4:8f:6b:03:c1:aa:4e:a0:01:a8:be:5d:dc:52:94:
                    b8:ac:b4:7c:20:7c:6e:d6:e2:27:85:50:8b:3a:de:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:ED:49:5F:FB:D5:14:2C:89:5E:A8:EE:45:82:5F:02:69:00:2B
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:0d:b8:91:0e:f3:04:40:a6:38:27:18:ef:c0:31:87:5f:
         0c:6f:60:6d:e4:d9:39:89:cf:82:22:81:b1:a0:b2:cc:d6:77:
         6a:22:22:e8:77:f2:fd:4b:ea:8c:70:c8:1e:62:5c:f2:d4:4e:
         a9:90:51:d0:04:6b:84:1f:1b:44:63:df:32:70:f8:63:44:6c:
         8f:83:fe:77:55:98:1a:fb:a8:6a:3c:c2:4a:8f:03:98:66:36:
         e4:a1:88:57:4c:e3:ff:1c:0f:14:d5:dc:d3:50:c2:bd:34:54:
         58:b0:af:b6:f8:38:98:74:a0:62:2f:eb:ed:6f:24:0b:57:ee:
         3a:06:ae:53:84:a6:a8:7b:42:5f:15:d5:9e:ac:df:28:41:d4:
         70:a8:a4:b1:1e:9f:8f:96:04:3f:c6:d7:de:ff:57:59:3f:aa:
         ca:ce:ca:a2:f4:3b:ad:7b:b0:10:28:3f:78:56:9e:0f:0c:7f:
         24:41:d6:5f:ad:c5:eb:c8:0a:e9:9b:5b:f3:5a:b5:37:58:55:
         a5:b4:b4:bc:8d:aa:4f:58:17:a4:68:64:70:29:60:e0:b1:5c:
         33:81:7b:47:ed:5e:be:b2:7f:e6:de:49:e7:c4:0f:8b:12:a3:
         9f:2d:74:48:10:86:d8:28:f6:3f:13:bf:33:c1:1d:08:91:bd:
         dc:95:bd:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX/p2atr/d6PxObdyhe3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz
ZjY3ODUwHhcNMjYwNTE2MDYwMTE5WhcNMjYwNTE3MDYwMTE5WjAzMTEwLwYDVQQD
EygyMWI4ZWQ0OTVmZmJkNTE0MmM4OTVlYThlZTQ1ODI1ZjAyNjkwMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx1EwyUk77qnUDFRXRWMBNKkcB6/
hvl9j3tf7n7ebQy/QDFZQgmHYbhaGl0MCXhOxwgsMtQUCVXhwKpCVl8TIHYLaEGw
72Xa4AgTWoTKFq9Qub0TW7rTqSlvhCyxQxzSilB36Xyv9FVvnCrdb6pufb2yZ6Wg
2cm0hExOMvOUdM5t8L+brQ2hGA4OZExpU30MyaScEgYCt+ohA+aelmyX65GEuvrA
iHG+jRxbx43YIhxJ+OExsgW2tbKD3VNS4JaMQWVwtxQjx0lKDOhOeDf6bcciNjcw
vz5urSXN4MC6AFjUj2sDwapOoAGovl3cUpS4rLR8IHxu1uInhVCLOt5xDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG47Ulf+9UULIleqO5Fgl8CaQArMB8GA1UdIwQY
MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt
OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz
LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8MNuJEO
8wRApjgnGO/AMYdfDG9gbeTZOYnPgiKBsaCyzNZ3aiIi6Hfy/UvqjHDIHmJc8tRO
qZBR0ARrhB8bRGPfMnD4Y0Rsj4P+d1WYGvuoajzCSo8DmGY25KGIV0zj/xwPFNXc
01DCvTRUWLCvtvg4mHSgYi/r7W8kC1fuOgauU4SmqHtCXxXVnqzfKEHUcKiksR6f
j5YEP8bX3v9XWT+qys7KovQ7rXuwECg/eFaeDwx/JEHWX63F68gK6Ztb81q1N1hV
pbS0vI2qT1gXpGhkcClg4LFcM4F7R+1evrJ/5t5J58QPixKjny10SBCG2Cj2PxO/
M8EdCJG93JW9VQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:35 2026 by rpki-client