Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File:                     5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier:          ljeKQT5rHqFyUps9V3QjxsJciFGAq8nXp4PpX33aFg8=
Subject key identifier:   70:51:E2:93:89:D3:7B:8D:C8:B3:F0:A3:3D:95:A2:B6:0D:70:F9:FE
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer:       /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial:       019E3004DA7BAAD1F8E33AB1A78A04A73D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number:          1850
Signing time:             Sat 16 May 2026 09:01:24 +0000
Manifest this update:     Sat 16 May 2026 09:01:24 +0000
Manifest next update:     Sun 17 May 2026 09:01:24 +0000
Files and hashes:         1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: 6uVPFLtuCWJInKoU/uC370jljM1yuV+ho3+4nQcxByM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:da:7b:aa:d1:f8:e3:3a:b1:a7:8a:04:a7:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
        Validity
            Not Before: May 16 09:01:24 2026 GMT
            Not After : May 17 09:01:24 2026 GMT
        Subject: CN=7051e29389d37b8dc8b3f0a33d95a2b60d70f9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:4b:87:55:7a:f5:ac:3d:74:4e:b4:f9:34:
                    ee:21:3a:02:85:7c:57:92:ba:c1:47:c4:56:9e:63:
                    d5:17:0c:3f:e5:4c:d0:30:09:9e:a9:e0:96:09:16:
                    ef:8c:7a:53:95:de:5a:6f:d1:cc:15:7e:39:da:35:
                    a3:6b:78:f2:e2:67:66:dd:ea:a3:3a:11:09:b7:0c:
                    11:5d:a9:a4:7b:73:11:99:57:36:40:64:2f:5a:cc:
                    23:55:cb:91:a2:f8:07:20:e5:66:81:41:bc:c9:ca:
                    c8:27:42:c3:88:b5:35:6e:90:bc:8a:61:d6:73:2d:
                    33:91:ee:5c:6c:f1:ef:ca:58:d6:ae:0c:df:d1:92:
                    9a:e2:3f:dd:a6:5b:da:5d:3c:e8:ca:cc:f8:aa:c5:
                    ad:9c:fc:ae:cb:84:a5:9d:6f:a4:5a:c8:d4:2c:75:
                    ee:88:db:ae:66:aa:0e:9b:cd:48:a4:e6:de:b7:f0:
                    18:61:ed:dd:a4:13:43:1a:53:4e:97:32:86:66:6b:
                    e3:67:d3:14:fc:49:98:04:b0:61:54:24:99:cd:da:
                    07:c3:48:81:5a:d4:16:a5:d1:67:87:d2:70:6e:57:
                    dc:5a:48:b1:b6:56:67:d0:3b:8d:f1:f6:69:c7:1d:
                    96:18:80:c3:f9:8b:58:ca:6d:44:6c:3b:fd:c5:02:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:E2:93:89:D3:7B:8D:C8:B3:F0:A3:3D:95:A2:B6:0D:70:F9:FE
            X509v3 Authority Key Identifier:
                keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:3f:17:8c:2c:47:8e:72:bb:c1:f5:96:31:ea:fb:21:4c:
         c2:75:94:bd:08:57:2c:28:54:5f:14:2c:fa:0c:26:e4:27:09:
         a1:db:ca:9e:07:af:42:b3:db:f9:14:0a:ce:bf:aa:8d:0e:23:
         af:fc:12:2b:fa:71:55:5d:25:e6:0b:c3:eb:d2:e4:59:e4:84:
         62:1b:8b:79:8b:9b:b2:3b:0b:d4:a2:9f:bc:75:b1:b6:f4:61:
         20:c1:86:e0:dd:e1:ce:ea:ac:cc:9a:67:a0:00:a1:4f:5b:3a:
         7e:9a:f2:9b:89:b0:41:53:a6:ac:e1:7b:a8:30:a7:83:46:2e:
         05:f1:0a:76:fd:1f:7b:1b:8f:3a:a4:eb:16:3c:e4:27:2f:c1:
         83:90:35:fb:f1:60:de:77:f3:cf:f5:89:a4:c4:c4:42:ca:a1:
         07:e2:05:f1:46:aa:0a:94:42:8e:ab:ac:5f:ba:32:59:e8:80:
         f1:9b:7a:a7:89:23:85:74:a1:0e:a1:56:1b:61:d4:9d:52:8c:
         43:9e:ba:0c:d7:b2:79:96:25:e6:39:8a:9c:1f:d1:8c:32:20:
         2a:70:db:20:ca:dc:96:3a:06:c9:a3:f4:53:5e:88:84:38:09:
         07:6e:a5:75:bc:ba:54:f8:78:7b:3e:c9:77:c2:74:ce:82:10:
         3a:6f:09:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBNp7qtH44zqxp4oEpz0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDA5ZThlZjE3MWU5YWUyMTYyN2NjYTc2ZWQ2NGZkMTdl
NmVlZDIwHhcNMjYwNTE2MDkwMTI0WhcNMjYwNTE3MDkwMTI0WjAzMTEwLwYDVQQD
Eyg3MDUxZTI5Mzg5ZDM3YjhkYzhiM2YwYTMzZDk1YTJiNjBkNzBmOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXtLh1V69aw9dE60+TTuIToChXxX
krrBR8RWnmPVFww/5UzQMAmeqeCWCRbvjHpTld5ab9HMFX452jWja3jy4mdm3eqj
OhEJtwwRXamke3MRmVc2QGQvWswjVcuRovgHIOVmgUG8ycrIJ0LDiLU1bpC8imHW
cy0zke5cbPHvyljWrgzf0ZKa4j/dplvaXTzoysz4qsWtnPyuy4SlnW+kWsjULHXu
iNuuZqoOm81IpObet/AYYe3dpBNDGlNOlzKGZmvjZ9MU/EmYBLBhVCSZzdoHw0iB
WtQWpdFnh9JwblfcWkixtlZn0DuN8fZpxx2WGIDD+YtYym1EbDv9xQI4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBR4pOJ03uNyLPwoz2VorYNcPn+MB8GA1UdIwQY
MBaAFOTQno7xcemuIWJ8ynbtZP0X5u7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84Yzg4MTEtMDFjNi00N2MyLWI1ZjAt
M2MxNjI0MTAwNzUyLzEvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84Yzg4MTEtMDFjNi00N2MyLWI1ZjAtM2MxNjI0MTAwNzUy
LzEvNU5DZWp2Rng2YTRoWW56S2R1MWtfUmZtN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl4/F4ws
R45yu8H1ljHq+yFMwnWUvQhXLChUXxQs+gwm5CcJodvKngevQrPb+RQKzr+qjQ4j
r/wSK/pxVV0l5gvD69LkWeSEYhuLeYubsjsL1KKfvHWxtvRhIMGG4N3hzuqszJpn
oAChT1s6fprym4mwQVOmrOF7qDCng0YuBfEKdv0fexuPOqTrFjzkJy/Bg5A1+/Fg
3nfzz/WJpMTEQsqhB+IF8UaqCpRCjqusX7oyWeiA8Zt6p4kjhXShDqFWG2HUnVKM
Q566DNeyeZYl5jmKnB/RjDIgKnDbIMrcljoGyaP0U16IhDgJB26ldby6VPh4ez7J
d8J0zoIQOm8JDg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:29 2026 by rpki-client