Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File:                     H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier:          v4rcfnw+4Mrdw3RNpVgeCM3pQxTCY/c5i1YLpB9yuVE=
Subject key identifier:   6C:37:A1:84:BE:E9:D3:2C:49:15:69:DD:7E:DC:83:ED:CC:C8:8F:C5
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer:       /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial:       019E9C60D61C37215EDA2280A1C8FD7B35BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number:          1051
Signing time:             Sat 06 Jun 2026 10:00:52 +0000
Manifest this update:     Sat 06 Jun 2026 10:00:52 +0000
Manifest next update:     Sun 07 Jun 2026 10:00:52 +0000
Files and hashes:         1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 7NrnSw9ano42cV6f4U7vrcbi84iT4BYQexJ5xvDwb1Y=)
                          2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:60:d6:1c:37:21:5e:da:22:80:a1:c8:fd:7b:35:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
        Validity
            Not Before: Jun  6 10:00:52 2026 GMT
            Not After : Jun  7 10:00:52 2026 GMT
        Subject: CN=6c37a184bee9d32c491569dd7edc83edccc88fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:23:75:9b:9d:29:53:f2:63:54:01:40:53:
                    6b:2b:45:28:d4:bd:83:fe:97:4f:ca:92:a9:37:0d:
                    5c:00:47:ae:f4:d7:48:f9:e6:a3:bb:3c:f7:7e:04:
                    0a:af:45:f1:8b:21:ea:c3:4e:8c:e1:bb:24:f6:ab:
                    36:f2:83:57:26:e5:04:73:d0:70:ec:a8:b4:7c:0b:
                    9d:eb:a3:80:79:4e:89:78:22:95:c8:c2:58:51:01:
                    4d:e6:2e:a5:91:ee:08:93:75:dc:70:35:ed:84:86:
                    4f:be:4d:cc:8a:53:a2:7b:e0:79:c5:76:a6:90:4f:
                    a8:0e:0c:61:2b:20:a0:78:2e:c7:5a:5b:42:ae:cc:
                    0d:c8:4f:60:07:87:06:a7:e2:07:18:35:ab:ad:82:
                    af:91:d0:af:53:76:ce:27:6f:b9:98:f3:9c:ef:d6:
                    42:bf:68:f6:11:27:1e:35:96:18:d4:45:58:48:88:
                    e1:36:eb:3b:d8:66:5f:0c:16:8b:ed:ee:2d:ea:4b:
                    b3:36:4e:0a:14:c6:27:6b:ce:a8:fa:a9:97:63:20:
                    a7:88:b8:f4:68:e3:52:9a:9b:81:c9:94:11:4d:42:
                    1f:d7:fc:d3:1f:b8:85:9a:84:98:c8:1a:74:95:45:
                    c0:17:2f:01:53:79:74:eb:13:8b:41:bc:1a:98:97:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:37:A1:84:BE:E9:D3:2C:49:15:69:DD:7E:DC:83:ED:CC:C8:8F:C5
            X509v3 Authority Key Identifier:
                keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:8f:d6:48:04:fa:fc:fd:ab:e7:b7:80:8a:90:31:ae:a1:
         30:c4:de:6e:75:42:b7:1f:0d:94:4a:02:96:3e:e0:7e:62:4b:
         a0:4e:5a:da:17:36:28:0f:2f:e8:e3:b1:ed:c5:75:17:16:49:
         ba:a5:6b:50:e8:50:be:1d:37:25:49:f8:a0:42:a8:b8:6a:c9:
         26:4c:61:f4:03:41:4a:84:ab:06:3a:49:69:ff:a5:8a:02:8e:
         4b:c3:a8:47:7f:8b:50:60:d2:72:61:8f:b0:a5:fb:a4:43:9c:
         88:f3:e7:49:a3:4a:e4:23:ab:38:34:7c:84:07:82:d2:2b:5e:
         10:e1:24:da:07:ea:ef:6f:13:80:e5:3e:cc:fd:08:c1:7f:4e:
         f9:11:04:14:c0:2e:3b:d9:07:81:65:aa:d0:85:95:fc:62:48:
         16:57:0b:4f:f7:6f:2f:c8:c3:c2:fc:70:4b:ba:d2:57:18:10:
         44:1a:d4:02:63:2b:3c:b5:5a:c7:81:fd:ac:a6:36:fd:64:74:
         d8:4b:f7:35:28:ef:5a:db:fd:d2:7c:ae:38:eb:e8:cd:7c:a4:
         04:2e:9d:60:11:31:30:77:ea:b6:f9:98:ed:c3:0e:c1:06:1b:
         5a:0f:b0:49:c7:5b:2b:58:73:f3:84:91:23:97:7a:3b:83:c0:
         e8:de:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:25 2026 by rpki-client