Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          ouD/yNND/eq6vpbTssnGayUCfaO0SjqavPho0EN/V38=
Subject key identifier:   39:2F:C7:F8:6F:71:F1:F7:19:90:0C:1F:BD:D9:86:80:CF:00:7B:54
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       019E303B3B892B01892239004DFDDC1346E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          191B
Signing time:             Sat 16 May 2026 10:00:48 +0000
Manifest this update:     Sat 16 May 2026 10:00:48 +0000
Manifest next update:     Sun 17 May 2026 10:00:48 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: YH9rJNaqMLtpPgSWvk2B5SDPz65NUh93fEzHa4+eBuQ=)
                          2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
                          3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
                          4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
                          5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
                          6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
                          7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
                          8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:3b:89:2b:01:89:22:39:00:4d:fd:dc:13:46:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: May 16 10:00:48 2026 GMT
            Not After : May 17 10:00:48 2026 GMT
        Subject: CN=392fc7f86f71f1f719900c1fbdd98680cf007b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:ab:97:44:e3:72:5a:78:64:7c:f5:77:d5:
                    c5:df:1b:bb:68:bc:0b:5c:f6:c7:51:c4:2d:74:c5:
                    f2:7b:d9:a6:0c:29:03:fa:d0:57:90:d1:1a:8a:36:
                    19:5d:06:7a:24:55:87:96:64:5b:bc:46:fa:f6:84:
                    29:08:49:c9:a0:2c:78:0e:cf:a2:b2:1b:27:d3:b3:
                    a9:58:06:9c:f4:e5:1e:59:cf:e0:70:bd:20:8f:2a:
                    17:7e:39:12:b4:46:53:f6:ca:eb:c2:b3:31:55:c4:
                    2c:0a:1b:11:7f:13:71:0e:73:04:02:4a:46:da:75:
                    51:88:d7:ee:bb:9b:bc:c3:14:b2:74:5a:d6:48:d3:
                    ca:e9:25:6d:da:ba:7a:28:d0:ba:4b:36:a0:5b:ba:
                    0e:c0:2f:09:4a:40:49:71:49:91:f7:80:a4:04:7c:
                    af:25:c4:54:cf:7f:0b:94:79:ce:d4:a3:2d:c4:b1:
                    c0:e8:63:4b:61:aa:59:56:b1:c9:75:8f:97:22:0f:
                    ef:7c:ed:d5:fc:f1:17:39:b4:44:bf:fd:02:ba:67:
                    3f:53:7d:79:3f:b5:0b:94:2e:2b:25:29:93:be:5c:
                    cb:a4:11:02:09:e7:25:9b:6f:30:9d:79:de:52:b9:
                    44:21:45:49:0e:71:a4:9d:db:7b:ae:9d:01:eb:c8:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2F:C7:F8:6F:71:F1:F7:19:90:0C:1F:BD:D9:86:80:CF:00:7B:54
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:c2:a7:33:e0:b5:6d:25:88:15:d3:cf:85:66:28:21:54:
         68:11:7d:9c:9e:66:02:6b:34:a3:84:60:70:40:b1:79:3a:7e:
         a9:91:c4:69:5a:10:3f:4c:75:93:b7:e0:e4:fe:c1:c2:f2:f0:
         fa:21:75:d8:06:bd:0d:5f:4d:7d:f0:53:04:44:aa:33:4e:61:
         61:9a:04:02:8e:c6:48:aa:1a:72:c9:5a:6c:b8:49:e7:6d:80:
         f5:34:fe:df:f7:2e:f0:d4:ff:12:9c:25:b5:62:b9:bf:4f:a3:
         df:0b:0c:d4:c4:fe:a5:e6:30:2d:b8:05:7b:96:6f:e0:ff:6b:
         bf:06:93:f2:c9:24:47:11:bf:e4:ec:d0:b1:cf:f4:08:dd:bd:
         49:db:17:2c:b3:7c:87:f9:dc:a0:8a:40:8e:91:1c:6a:39:bf:
         47:c9:9a:26:07:09:86:16:a8:51:de:21:bd:2a:18:80:af:9a:
         01:19:69:86:9a:db:ed:98:9d:dc:a3:c2:88:e5:80:fe:6c:69:
         4a:38:93:7b:aa:64:f1:7b:9d:c9:1f:b4:47:fb:66:7d:83:f8:
         d2:27:64:31:86:60:c0:86:e3:58:c0:c2:74:10:f5:a4:41:6c:
         36:92:b0:9c:17:9f:40:ac:06:24:f1:06:85:d7:f6:95:d8:15:
         66:bc:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:27 2026 by rpki-client