Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          q159Gl1IzSRiGKqNubKqICVC5ff5A4CXpXTiO2E/bP4=
Subject key identifier:   99:27:06:8B:68:8C:28:27:6C:1A:A5:DA:A1:4C:4E:9F:EB:A7:40:0B
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       019E30E08EF82FC5F6B0BC0C18379749B4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0A6B
Signing time:             Sat 16 May 2026 13:01:23 +0000
Manifest this update:     Sat 16 May 2026 13:01:23 +0000
Manifest next update:     Sun 17 May 2026 13:01:23 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: GuhfOvlKlM5/oKqsWOVA59ltz/PWNlYxyqm42z8pXc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:8e:f8:2f:c5:f6:b0:bc:0c:18:37:97:49:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: May 16 13:01:23 2026 GMT
            Not After : May 17 13:01:23 2026 GMT
        Subject: CN=9927068b688c28276c1aa5daa14c4e9feba7400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:60:6e:ac:fd:bc:30:3e:c8:9b:52:fe:0f:
                    9f:f4:93:8e:7f:7b:2b:08:8b:54:60:7d:8b:f4:bf:
                    62:df:b3:b9:58:5f:25:6a:05:a6:49:77:f7:aa:6d:
                    fd:8a:c3:2b:16:1f:a9:2a:37:81:4c:48:09:69:5d:
                    66:4d:c9:b4:dd:30:0c:04:04:ab:db:f2:22:c3:aa:
                    3a:c2:13:a8:28:d8:cd:b2:6d:f2:c8:4f:4a:f4:aa:
                    78:42:94:be:bb:7a:c3:e1:8f:66:10:31:29:87:6b:
                    d1:78:47:8c:5c:d9:cd:85:38:e1:7f:76:d5:eb:88:
                    bc:a6:ca:eb:72:38:30:d5:bf:42:86:f6:e3:a5:9b:
                    3a:d8:eb:cb:6e:c8:70:15:14:81:63:22:7d:5d:07:
                    c5:3b:93:7b:19:b4:c1:54:b3:b9:7a:4c:01:8f:c5:
                    65:49:66:b7:86:9d:72:f8:bc:5a:d1:1a:c6:a6:51:
                    61:47:fa:22:b4:2f:a0:c8:2d:15:59:fc:f9:b1:85:
                    ec:54:f7:4e:be:57:9f:ba:83:36:50:c1:89:d7:6b:
                    83:9d:67:6b:88:39:75:8a:d9:d9:f5:ed:53:1d:cc:
                    8b:fc:6f:53:63:d5:96:cb:29:b6:13:bf:20:31:69:
                    eb:b2:36:93:fe:83:67:79:51:d3:9b:90:18:0c:6c:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:27:06:8B:68:8C:28:27:6C:1A:A5:DA:A1:4C:4E:9F:EB:A7:40:0B
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:99:20:a2:ab:39:84:b7:ae:b8:d2:59:bd:53:6f:cb:a4:
         12:e3:88:c2:65:a2:1f:f7:83:eb:46:59:3f:6d:45:24:37:03:
         bf:44:86:f4:49:d0:a6:d8:ef:74:17:57:28:75:da:e1:a9:b5:
         aa:18:98:e1:93:fa:b8:fa:66:e9:ac:48:69:59:fa:85:3f:5d:
         b4:53:a5:d2:fe:95:8e:f5:77:20:ed:e8:0f:88:37:75:62:cc:
         ab:e2:64:fd:ca:cc:3f:c2:63:96:61:03:51:87:94:44:3e:9c:
         ba:7e:4c:10:79:67:e7:4e:a7:38:2d:b3:3b:88:05:ea:a8:ab:
         08:cb:5f:bf:7f:9d:41:fa:e6:c8:03:ea:a9:75:39:7e:5f:4a:
         12:4f:04:6a:b7:79:67:b2:12:92:43:7f:80:3a:e3:cc:cb:23:
         ff:ed:24:13:3d:7a:eb:b9:67:05:ad:93:65:a9:f9:5e:31:34:
         6d:34:ab:22:90:98:31:c1:aa:09:e0:d2:64:81:ac:f7:4f:fd:
         59:99:3b:c8:3a:a2:47:8a:1f:05:5d:3f:46:23:5f:ed:9e:9f:
         c8:14:d0:23:c1:5c:e6:1f:5f:03:3a:0f:ed:a0:3d:1b:89:e0:
         81:f7:1e:b1:54:59:b0:d3:a8:d0:6e:73:52:00:2d:54:c2:cd:
         6e:88:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:54 2026 by rpki-client