Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File:                     4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier:          GF1hDl/DkiEGhMukkmHJ3G135eY46BIm4TMAiZTQe9E=
Subject key identifier:   52:84:98:D2:A1:6C:E8:C0:CA:9F:76:23:C7:01:F3:AF:71:53:BC:0A
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer:       /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial:       019E3072FCD55E912AE46C23F7F860F047BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number:          0870
Signing time:             Sat 16 May 2026 11:01:42 +0000
Manifest this update:     Sat 16 May 2026 11:01:42 +0000
Manifest next update:     Sun 17 May 2026 11:01:42 +0000
Files and hashes:         1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: GUsYFpGHaZr0Ce9MTOZiFxIpIfcpPIEHDP+Q2+MW3ao=)
                          2: xeT78wcPTTpFTx_ZDSn-jPOj960.roa (hash: YEu+TOkba5EcfR4vL4O+vAIH2BMk3hjKJVmwS8XvNmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:fc:d5:5e:91:2a:e4:6c:23:f7:f8:60:f0:47:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
        Validity
            Not Before: May 16 11:01:42 2026 GMT
            Not After : May 17 11:01:42 2026 GMT
        Subject: CN=528498d2a16ce8c0ca9f7623c701f3af7153bc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:87:a1:e8:c3:24:ec:f4:d2:5e:23:e1:fb:
                    f5:9a:02:2a:c0:4f:d9:53:4a:33:6b:18:02:53:d0:
                    f3:69:1f:8d:41:16:06:1e:d2:44:ac:f1:00:f8:76:
                    b8:aa:4c:f9:f5:39:01:fc:9b:9b:69:90:cf:1c:c1:
                    35:2b:33:53:9c:4f:c6:f0:6e:cf:7d:d3:68:39:32:
                    b2:03:e5:54:9e:e7:5e:4b:f8:b7:cc:9e:8d:ac:40:
                    8d:9e:17:df:4b:af:2d:69:45:af:18:88:b5:c1:18:
                    7c:c7:24:0b:e0:8a:15:68:75:4a:35:04:1a:19:06:
                    c4:c3:ca:4a:17:a8:e2:fc:36:e0:6a:48:c1:da:cf:
                    6a:29:0f:92:ec:df:0f:9a:19:22:30:e7:71:d0:8e:
                    a8:56:c3:2c:ce:ed:02:fe:0c:04:c4:66:29:57:4d:
                    6f:9b:0e:59:a0:ff:18:3a:0f:a3:dc:95:70:ad:ff:
                    12:38:4c:eb:82:87:d0:1b:b4:26:a5:05:27:15:28:
                    88:3d:23:24:15:ff:f5:83:13:86:e5:78:6d:eb:d5:
                    18:03:95:7b:10:10:3c:33:c8:2a:1e:a7:9a:b6:12:
                    cf:98:87:fe:44:46:ba:9f:1a:72:51:35:b7:27:fc:
                    0a:dc:aa:64:a4:fc:92:76:55:58:7b:de:b3:92:42:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:98:D2:A1:6C:E8:C0:CA:9F:76:23:C7:01:F3:AF:71:53:BC:0A
            X509v3 Authority Key Identifier:
                keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:01:05:b5:b7:e3:94:75:53:f7:33:88:d8:53:91:ff:54:ca:
         b7:dd:2f:62:c6:9c:55:e8:6b:6a:3c:b1:52:a2:8c:b1:cb:2a:
         a4:9b:b6:13:5d:41:b1:66:5b:f6:51:fe:7f:64:96:36:5b:ab:
         6c:fb:d4:0b:55:a3:da:ea:29:9b:87:81:e9:7f:0c:ea:d4:f2:
         f9:2d:8e:58:5d:6b:9e:9c:a4:00:fd:bc:e5:f6:42:63:9b:60:
         4a:9a:70:f1:e1:15:31:cc:93:54:e3:ae:7d:95:a1:8c:29:7f:
         ed:bd:06:cc:15:57:e6:2f:c6:9f:2a:f3:27:8f:8c:16:1e:2f:
         c6:d2:a0:d6:52:03:27:6a:6c:fa:5b:44:59:ac:e9:18:39:5f:
         88:86:47:b4:88:91:36:04:75:a1:50:5a:ca:2a:9c:ff:97:e0:
         74:1e:d0:bf:89:03:80:4b:cb:6c:89:91:48:f0:5f:c2:5a:c2:
         28:6e:ae:8e:f5:a5:0f:fe:59:78:43:c7:8a:43:93:6a:4a:29:
         94:49:d0:eb:fe:11:a8:0d:70:ce:f0:41:e0:88:75:f9:95:79:
         f7:8a:e3:33:55:d4:2a:7d:93:11:24:63:c2:78:d2:e0:39:77:
         fa:7d:bd:a9:50:cd:fd:c2:8f:51:5f:45:2a:02:9f:7b:ce:85:
         9e:d1:52:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcvzVXpEq5Gwj9/hg8Ee7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1
YzBjMGYwHhcNMjYwNTE2MTEwMTQyWhcNMjYwNTE3MTEwMTQyWjAzMTEwLwYDVQQD
Eyg1Mjg0OThkMmExNmNlOGMwY2E5Zjc2MjNjNzAxZjNhZjcxNTNiYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzayHoejDJOz00l4j4fv1mgIqwE/Z
U0ozaxgCU9DzaR+NQRYGHtJErPEA+Ha4qkz59TkB/JubaZDPHME1KzNTnE/G8G7P
fdNoOTKyA+VUnudeS/i3zJ6NrECNnhffS68taUWvGIi1wRh8xyQL4IoVaHVKNQQa
GQbEw8pKF6ji/DbgakjB2s9qKQ+S7N8PmhkiMOdx0I6oVsMszu0C/gwExGYpV01v
mw5ZoP8YOg+j3JVwrf8SOEzrgofQG7QmpQUnFSiIPSMkFf/1gxOG5Xht69UYA5V7
EBA8M8gqHqeathLPmIf+REa6nxpyUTW3J/wK3KpkpPySdlVYe96zkkK9VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKEmNKhbOjAyp92I8cB869xU7wKMB8GA1UdIwQY
MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt
NmU2ZTc2ZjM3OTQ2LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2
LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAEFtbfj
lHVT9zOI2FOR/1TKt90vYsacVehrajyxUqKMscsqpJu2E11BsWZb9lH+f2SWNlur
bPvUC1Wj2uopm4eB6X8M6tTy+S2OWF1rnpykAP285fZCY5tgSppw8eEVMcyTVOOu
fZWhjCl/7b0GzBVX5i/GnyrzJ4+MFh4vxtKg1lIDJ2ps+ltEWazpGDlfiIZHtIiR
NgR1oVBayiqc/5fgdB7Qv4kDgEvLbImRSPBfwlrCKG6ujvWlD/5ZeEPHikOTakop
lEnQ6/4RqA1wzvBB4Ih1+ZV594rjM1XUKn2TESRjwnjS4Dl3+n29qVDN/cKPUV9F
KgKfe86FntFSkw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:04 2026 by rpki-client