Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          vE4UYhwf/uzQbjQxJd5dd409WkJ0LMy2Wo7vN3f19mU=
Subject key identifier:   09:37:70:DC:9D:49:C2:40:8D:FF:67:BB:FA:B6:53:1E:A8:09:1D:37
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       019E2F9674695045FFDE15B5D335E2474272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          106F
Signing time:             Sat 16 May 2026 07:00:49 +0000
Manifest this update:     Sat 16 May 2026 07:00:49 +0000
Manifest next update:     Sun 17 May 2026 07:00:49 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: aXDFqZ5tP3tjZh+4LUci320e9EUyH8nFp86i8nN13d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:74:69:50:45:ff:de:15:b5:d3:35:e2:47:42:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: May 16 07:00:49 2026 GMT
            Not After : May 17 07:00:49 2026 GMT
        Subject: CN=093770dc9d49c2408dff67bbfab6531ea8091d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:cd:16:28:85:53:24:c7:9a:3d:d7:ea:99:
                    24:32:f4:6c:40:8f:fa:78:ca:40:47:07:ae:9f:8a:
                    ae:d3:ef:5a:76:66:44:b7:df:16:ae:19:aa:10:93:
                    2c:ae:bf:92:96:e7:27:3c:e7:6f:16:33:68:69:13:
                    fd:6b:cb:c1:04:b4:2e:4e:d9:72:8f:c7:1b:52:85:
                    ed:89:67:7f:92:1a:63:6e:7a:6c:3e:e8:a5:6b:f6:
                    53:ff:6a:b1:fe:e4:70:63:0a:83:c3:f0:41:1d:c2:
                    35:25:59:48:39:a7:4b:fa:cf:7c:59:1c:6d:d8:3f:
                    2b:97:b4:b7:5a:31:b8:21:ee:b2:ae:be:5b:14:c4:
                    2a:6c:f6:52:ec:62:b3:aa:b2:fe:19:b7:ef:2c:b8:
                    ac:06:01:60:35:71:dd:43:13:fd:03:5f:42:e4:32:
                    8c:16:b0:51:bf:f0:d4:64:88:4c:fd:dc:ce:c1:c5:
                    be:b0:6c:7c:fb:0b:59:30:94:5f:b2:8f:55:6a:ee:
                    2e:c7:a5:b2:ec:98:cf:b2:65:69:b8:75:58:eb:44:
                    a2:28:c9:24:f5:48:39:9a:76:45:d3:f7:39:0a:09:
                    8e:8d:b4:66:68:66:f8:a6:79:50:9a:ff:35:c8:56:
                    9d:10:43:f2:db:2e:eb:af:f2:43:0d:5a:87:bf:87:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:70:DC:9D:49:C2:40:8D:FF:67:BB:FA:B6:53:1E:A8:09:1D:37
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ad:dc:1c:5b:2c:9b:ac:7a:6d:41:05:08:cf:fa:61:04:c6:
         64:13:94:ee:14:55:79:64:29:a9:44:4e:e6:c1:2d:81:a1:f9:
         15:9e:4f:98:fc:56:fa:8f:9d:2a:4e:4b:04:9b:78:8d:c4:96:
         6f:7b:d3:0e:81:64:66:fb:bf:43:2e:a8:97:38:33:57:60:97:
         84:d0:d2:8e:ed:52:83:ff:9a:9f:d8:a0:2f:c7:ca:68:f0:79:
         2e:96:e0:e4:26:42:b4:78:cc:2d:7b:ac:6b:ff:f8:7f:d5:04:
         74:35:63:74:cd:db:82:7f:e8:db:be:18:6b:32:73:c2:52:b7:
         42:80:1c:17:7e:ce:a1:74:5f:ab:29:89:c0:cc:47:e0:d3:c1:
         c8:fa:7c:a3:a3:2a:0f:72:86:20:c1:7b:82:48:49:ef:9e:6c:
         75:ec:37:d1:a1:98:ea:59:c0:03:03:55:f7:33:8b:e8:ac:96:
         11:e6:03:d7:82:ab:50:1d:a5:f5:9b:57:c4:e6:0b:29:19:f6:
         6e:0e:c5:70:36:1e:77:d4:a6:09:b5:a0:ae:ca:3c:b4:4f:bb:
         b4:a4:04:8b:bb:d4:9c:a2:91:94:21:e3:6f:00:29:af:39:1b:
         1c:e7:ce:ca:5c:97:d4:46:ad:d8:7c:68:e5:ad:52:5a:69:78:
         16:1c:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:25 2026 by rpki-client