Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          il7TBUxZAIsullZLYLn6BFHkHm63YMlKrm5QHnALMio=
Subject key identifier:   00:72:FC:54:7A:30:36:EA:D9:90:27:EA:3C:88:A7:11:28:15:40:1F
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019E3004C9C4F9BD35436512683FA113126C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          16CD
Signing time:             Sat 16 May 2026 09:01:20 +0000
Manifest this update:     Sat 16 May 2026 09:01:20 +0000
Manifest next update:     Sun 17 May 2026 09:01:20 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: JUgT5jO4ysnppQDE4rMPXwtfV+AsLWPxlh3SkaowNNE=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:c9:c4:f9:bd:35:43:65:12:68:3f:a1:13:12:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: May 16 09:01:20 2026 GMT
            Not After : May 17 09:01:20 2026 GMT
        Subject: CN=0072fc547a3036ead99027ea3c88a7112815401f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:ec:3b:a5:c8:fd:26:36:57:63:a4:a6:c5:
                    e9:45:5f:91:a6:84:fd:aa:18:a4:5d:96:ff:d8:5c:
                    c9:b2:d8:3e:a8:93:16:c1:79:0c:f3:73:b1:69:2c:
                    09:d7:62:66:ce:e5:e1:c7:fd:b4:8b:aa:ed:79:cb:
                    3d:54:a9:b7:b4:d9:c7:de:80:e7:6b:6b:12:49:4a:
                    46:73:6b:78:53:f9:b9:77:11:42:57:b5:7a:fa:eb:
                    1b:05:9d:ca:42:7e:2b:a1:fa:8c:d4:0a:eb:b4:0e:
                    ea:e1:33:ef:04:57:17:dd:9d:bf:c5:61:a5:ad:a0:
                    7b:c3:b8:23:b0:65:67:3d:3f:e8:5d:90:07:f4:27:
                    07:4a:d3:ce:66:76:c8:42:df:6e:d1:fb:dc:5e:bc:
                    fd:d6:6f:60:a2:00:6c:99:65:5b:20:32:2f:21:a4:
                    f3:0e:d2:45:e2:22:97:c2:fe:73:07:f0:6a:ea:d8:
                    2e:58:1f:8d:88:21:7b:93:9a:d6:32:a6:42:60:ba:
                    31:5c:f0:09:1e:0c:24:a3:4a:2b:61:a1:a0:36:f8:
                    97:53:72:d3:78:4f:11:6c:6b:b0:a2:32:ae:fb:66:
                    10:1f:16:2d:2f:e5:6c:08:27:82:d4:0d:13:ed:dd:
                    fd:c4:ce:96:f6:ae:00:4c:95:52:04:9e:7e:85:47:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:72:FC:54:7A:30:36:EA:D9:90:27:EA:3C:88:A7:11:28:15:40:1F
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:af:ce:fd:84:c6:44:d2:f2:ce:5e:ee:69:a1:00:0c:2b:
         dc:56:61:48:63:56:72:77:97:aa:68:05:2c:b6:96:04:85:06:
         66:a1:77:41:14:5d:8d:6b:49:04:ec:b2:67:fd:0f:9d:48:ca:
         4a:3b:0d:e4:a6:55:be:d0:0d:4a:a3:28:39:5c:03:9c:3a:35:
         5e:da:31:a4:15:d6:3f:dd:9f:22:a5:19:2a:6b:84:c9:12:a8:
         cb:87:64:6a:be:52:5b:4e:c2:56:ae:28:15:7a:b1:ef:e7:39:
         a3:90:4b:8a:45:43:8d:a7:c9:9b:07:2f:6b:eb:09:c6:d5:ea:
         c3:b0:cf:91:73:8d:70:dd:96:b6:d7:e9:33:63:9c:e0:ea:0a:
         40:d8:a6:90:a5:66:f5:e9:d6:a6:64:3e:6f:eb:b4:7a:f9:0e:
         e2:b0:18:8d:83:5b:f8:e3:d6:7c:91:83:0f:38:9c:52:54:71:
         b2:b4:3e:9b:74:4b:0f:f2:3c:a5:83:d4:3e:60:45:e0:cb:82:
         67:90:ac:c3:9b:55:33:1c:14:da:25:55:c0:26:dc:62:c5:7c:
         9a:cb:37:2a:40:99:0c:00:6b:6a:d9:7d:00:ec:e7:cb:0f:83:
         f6:88:16:17:c7:de:e8:88:e0:22:0e:3e:73:53:aa:39:9e:db:
         57:2b:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:21 2026 by rpki-client