Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          hEsQTb3OMK7ucPqVlPQM3BC2lyHtimClNt3RVZc/93M=
Subject key identifier:   24:6C:43:8A:75:02:A5:FA:B9:19:AE:64:8F:DF:B6:76:85:57:64:F3
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       019E32619311505240F104168C1EE0AB4CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          1918
Signing time:             Sat 16 May 2026 20:01:55 +0000
Manifest this update:     Sat 16 May 2026 20:01:55 +0000
Manifest next update:     Sun 17 May 2026 20:01:55 +0000
Files and hashes:         1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
                          2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: c+Ukzj7PYg8NwDOl9FwTxuOu73v6DSuwKzY2I2J4XWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 20:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:93:11:50:52:40:f1:04:16:8c:1e:e0:ab:4c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: May 16 20:01:55 2026 GMT
            Not After : May 17 20:01:55 2026 GMT
        Subject: CN=246c438a7502a5fab919ae648fdfb676855764f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:06:7c:9d:7b:7d:99:12:35:41:39:5f:da:
                    39:06:7f:4e:90:c7:7f:f1:e1:a0:9b:13:8d:3a:67:
                    00:6b:0d:2d:8d:90:77:39:2e:14:b3:33:83:ea:d6:
                    f1:ae:62:da:40:db:64:63:82:15:d1:6f:38:bc:81:
                    a5:9d:42:b8:52:be:39:25:36:bf:f8:90:08:b2:b6:
                    ca:17:8e:3d:9a:f9:fd:14:76:64:5b:c3:2a:1f:0e:
                    85:27:b2:05:a4:7b:95:82:18:10:4b:ed:8c:e3:f7:
                    7e:69:92:92:a1:e2:45:7a:20:18:22:df:89:47:4b:
                    71:77:69:2b:00:09:d2:9c:87:79:b2:de:0d:97:06:
                    e0:b6:ef:b8:e1:9f:bc:3c:2d:5a:0e:7b:0e:4b:c8:
                    49:c8:1e:b2:16:60:9d:31:ca:72:29:08:af:2a:ff:
                    31:01:88:22:db:ac:37:5a:9d:16:a2:a4:da:dc:17:
                    f1:71:73:72:b8:aa:23:b9:28:a0:ca:04:22:66:84:
                    20:41:3d:d9:2f:bb:f1:1e:bb:05:57:5a:02:a6:87:
                    d7:28:6c:6b:86:9a:8b:13:52:12:60:8d:92:db:b9:
                    33:05:6b:88:8c:68:fd:bb:75:24:e3:46:e8:e6:86:
                    7f:b0:9e:e1:17:55:75:aa:fd:cf:f8:82:7d:ef:62:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6C:43:8A:75:02:A5:FA:B9:19:AE:64:8F:DF:B6:76:85:57:64:F3
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:d8:1a:ce:6e:0b:2e:c3:35:54:3a:58:27:dd:7c:2b:42:
         28:38:d2:64:58:7f:7c:a5:cc:ba:52:c0:40:2d:a7:75:a8:71:
         2f:4e:ce:3c:e9:df:40:0f:c7:d0:95:37:07:37:27:b5:91:d7:
         b9:41:0c:30:a5:5d:87:c2:f6:ef:79:d2:d3:a7:29:46:d6:f2:
         89:32:a0:99:a7:c2:3c:08:9e:b1:4a:2f:17:cf:be:c2:4e:84:
         4c:67:56:09:f9:81:10:3c:b2:4e:84:a4:f5:d6:89:7b:18:9d:
         d6:b6:6c:47:99:66:ce:d1:5b:82:90:5d:e2:c0:8a:a6:fd:db:
         54:63:73:97:ec:2c:94:20:1a:4a:bd:0f:74:2b:fd:71:4d:58:
         ac:5f:c3:92:38:8a:35:3e:e1:1a:9d:3b:34:8f:0d:c0:be:69:
         e1:3c:7c:72:14:f6:d0:97:ed:d2:09:55:e7:6a:4d:20:77:3b:
         27:a3:c2:29:b2:44:f5:0e:48:db:c9:ac:b2:ef:a2:a8:f6:89:
         e6:80:13:fc:0d:b9:ed:83:8f:9b:0f:bf:65:33:da:a2:52:52:
         bc:03:83:df:be:7f:db:e4:10:4a:b4:53:74:60:90:41:d3:af:
         e2:3f:8b:8d:b5:7f:5f:e4:8f:b6:0a:54:a0:89:9d:45:73:2b:
         a4:28:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:15:22 2026 by rpki-client