Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File:                     5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier:          oWPRa4q7+8h+/3/l2vAPAZEZTCSP1/ptJPvHIYRkuaw=
Subject key identifier:   21:E6:C9:1F:9D:0D:08:6F:0C:A1:B5:BB:A5:D8:63:92:BF:D8:82:FA
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer:       /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial:       019E3004918D17B2CAEE84E3149147DCFF99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 09:01:06 +0000
Manifest this update:     Sat 16 May 2026 09:01:06 +0000
Manifest next update:     Sun 17 May 2026 09:01:06 +0000
Files and hashes:         1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: GQHpchXzzAU1Lrt2U94gGhJnr/2YbYZjTv3vwzAhvKY=)
                          2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:91:8d:17:b2:ca:ee:84:e3:14:91:47:dc:ff:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
        Validity
            Not Before: May 16 09:01:06 2026 GMT
            Not After : May 17 09:01:06 2026 GMT
        Subject: CN=21e6c91f9d0d086f0ca1b5bba5d86392bfd882fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:c4:a7:18:b9:60:32:a0:01:b3:21:94:43:
                    d0:ed:33:da:fc:38:75:7f:09:f2:bd:b3:49:14:77:
                    47:22:db:ca:39:03:a5:a8:a9:72:85:f1:08:fc:60:
                    fb:fb:61:e2:ba:67:39:17:30:33:9b:10:df:6d:e1:
                    4e:f1:c4:56:b7:cd:82:54:56:96:be:3b:4f:31:f4:
                    6b:d4:31:18:2a:0a:cc:c8:2b:3e:fb:a4:ed:9e:c3:
                    42:0c:df:8e:c6:30:a3:ff:f0:33:e7:39:8c:1c:0c:
                    84:34:38:60:99:a2:e2:ab:8e:0e:06:6b:83:45:ed:
                    6e:86:d7:ec:56:5a:1b:ba:2e:c3:ef:56:d2:2d:38:
                    66:a4:59:65:e4:12:05:eb:ac:3a:1c:93:ec:ec:8f:
                    c7:37:65:6c:fe:3d:ed:61:f1:29:3f:6c:ce:1b:20:
                    3f:59:6c:ae:41:d7:20:4e:d8:d9:d8:35:0b:e1:19:
                    58:ce:ce:cb:21:42:9f:0e:c3:a1:df:9d:a4:fb:53:
                    98:0a:c1:50:1d:1d:c0:e4:ab:2b:b9:b9:17:3c:3e:
                    88:62:e8:d4:a7:5d:53:47:e2:44:9c:56:2d:d1:60:
                    52:05:e5:14:ac:e6:8a:e5:d4:21:84:6a:32:f8:4a:
                    cf:b6:89:f1:3a:df:43:ef:08:e2:0c:dd:30:6d:1a:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E6:C9:1F:9D:0D:08:6F:0C:A1:B5:BB:A5:D8:63:92:BF:D8:82:FA
            X509v3 Authority Key Identifier:
                keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:48:bb:31:10:12:e3:cd:a1:f6:89:30:f1:31:b2:85:02:
         9e:25:3b:6a:80:d1:7c:19:2f:1d:30:b5:91:f9:1b:15:43:23:
         a3:48:10:52:41:bf:6c:36:19:a7:c3:c2:24:6c:cc:63:88:6a:
         fb:78:98:79:38:a7:d0:2a:7e:be:11:9c:b4:7b:cd:30:56:3e:
         c3:42:79:48:b1:c9:90:37:fe:9a:48:c7:fe:d7:7d:41:38:9c:
         53:e5:a9:14:7a:14:f6:67:bf:cf:95:07:41:f5:af:fa:15:95:
         49:0a:81:57:80:dd:31:48:de:2b:6d:28:1c:69:88:31:24:43:
         4a:c8:87:63:d0:1f:f1:2d:6e:46:83:e0:f2:a7:f4:a4:bc:42:
         44:bf:41:7b:9c:3e:dc:e2:52:af:43:5b:c1:2f:ad:fb:5a:9c:
         01:82:2b:05:b9:6f:54:4e:3e:a3:18:a0:86:bb:6b:cc:34:43:
         c8:7f:5c:43:1c:26:68:2b:ad:25:0e:9d:36:8c:37:d9:4d:c2:
         81:5b:cd:2e:00:f4:84:22:4d:ae:06:63:87:c9:5b:f6:e0:bd:
         92:cc:01:90:77:91:ff:56:da:0d:37:bf:78:f2:a5:e0:53:32:
         4c:35:10:82:da:ae:01:18:30:cd:93:b6:e3:61:5e:9a:b0:33:
         03:ff:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client