Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          WfCFopls5eUvRzPi2ZqIzy+4N8nOqLZbQRZCRkRqFP8=
Subject key identifier:   B5:D8:9A:C6:E5:65:90:29:BD:E5:C5:32:DD:5B:85:C8:F1:97:E0:C5
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019E295D9574CAD15279A23306969F35E13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 02:00:59 +0000
Manifest this update:     Fri 15 May 2026 02:00:59 +0000
Manifest next update:     Sat 16 May 2026 02:00:59 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: +PKqOeZtrHY/3DPMGIvVQvA0O4JTWwGUoyUIJTfo12M=)
                          3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:95:74:ca:d1:52:79:a2:33:06:96:9f:35:e1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: May 15 02:00:59 2026 GMT
            Not After : May 16 02:00:59 2026 GMT
        Subject: CN=b5d89ac6e5659029bde5c532dd5b85c8f197e0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:c8:0e:44:df:a1:a5:be:69:4f:d8:e2:ef:
                    c1:ba:e7:59:ed:aa:bb:78:05:e0:ac:eb:00:e0:25:
                    88:e4:c6:2e:7b:6c:38:b5:81:1c:d1:b2:c6:1e:4e:
                    d8:8d:9e:f7:e1:d3:91:64:2c:0f:3e:3e:94:fa:1f:
                    21:1c:12:e2:cd:4a:6b:b4:2a:70:70:fd:29:ad:02:
                    89:09:fd:68:93:4e:cc:85:16:65:b1:65:25:7d:1f:
                    5c:17:28:74:34:14:d1:5d:f2:db:7e:86:c0:27:07:
                    52:92:73:82:66:86:ff:09:1a:fb:b3:88:82:70:e9:
                    fa:24:d8:df:af:fd:80:dd:ac:b3:89:07:c2:44:ab:
                    52:31:8f:87:91:19:03:13:8b:89:8f:1b:de:40:48:
                    9b:1a:e8:20:b4:c9:a8:28:4a:43:1c:0b:c7:f9:be:
                    98:bf:db:a6:50:02:df:38:65:12:a0:95:52:f0:f0:
                    c5:71:56:04:d2:1e:a6:66:f6:20:e6:2b:2c:31:42:
                    4f:5d:e2:e9:1d:51:0a:97:6e:35:75:29:d9:ac:29:
                    a5:3a:9a:bf:12:a5:9d:98:bd:2d:54:09:7c:6e:49:
                    3b:3f:d1:47:7e:8b:71:35:1b:aa:d8:b1:8e:45:59:
                    11:03:a0:2c:67:79:fc:d9:06:3a:42:ea:b7:d0:6b:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D8:9A:C6:E5:65:90:29:BD:E5:C5:32:DD:5B:85:C8:F1:97:E0:C5
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:f2:61:98:d0:bd:09:23:63:90:56:88:01:4c:a7:7b:48:
         15:aa:44:9d:d6:b9:53:ff:b2:f8:48:2d:e2:2f:76:f4:49:3e:
         cf:e9:06:93:55:1e:6a:cb:4d:cd:ff:3a:9e:bf:d8:53:b8:16:
         95:2e:f9:33:c3:09:81:98:4b:6d:6c:0c:81:c0:2a:b6:64:c0:
         5d:66:f9:42:22:20:93:7d:93:4b:0f:05:18:99:20:c0:cf:c4:
         7d:fd:94:36:15:42:3d:7a:16:03:32:dc:d5:cc:0a:76:f6:77:
         d8:26:f9:14:4f:24:27:65:0c:b1:6a:9f:ae:5c:24:8c:5a:e9:
         82:6d:e5:55:68:44:d8:6b:54:8e:55:f4:b7:42:33:67:ac:26:
         2f:a8:15:d0:21:02:d4:b0:d4:af:c9:5d:76:ec:24:34:0b:a8:
         ba:75:df:01:bc:89:39:bf:3e:32:92:2c:0d:dd:4f:f9:ec:78:
         73:32:fe:3a:91:d6:18:4e:2e:00:c4:5e:7f:44:5d:9f:77:11:
         12:37:ff:9a:78:ea:c5:46:ff:c8:96:0c:47:c6:d9:7c:9a:0d:
         c8:d4:f3:f8:9d:1e:3b:99:1c:8e:48:69:4b:e0:8a:52:54:1e:
         5e:9c:ca:40:97:35:62:cc:a8:45:61:b4:3b:1b:42:fc:b0:c1:
         95:68:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:59 2026 by rpki-client