Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          2JQrm/fwfaiwB1oDHf4u+XZXhG37MdMQ0vyFWjgZBhM=
Subject key identifier:   B0:4A:EC:F4:AD:B0:90:69:F4:4D:EC:23:D9:EB:03:B0:83:96:61:D2
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       019E8E00350A1D822D2A1282BC2C2E447577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          0A52
Signing time:             Wed 03 Jun 2026 15:00:38 +0000
Manifest this update:     Wed 03 Jun 2026 15:00:38 +0000
Manifest next update:     Thu 04 Jun 2026 15:00:38 +0000
Files and hashes:         1: O3jJqwByUIEUnhHlOFee0Yzt6gg.roa (hash: TX2mHbMp/LUKoxPthyOcmH+FA50JbLoahkLETRZ/Uwg=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: mwGPqPyyPCgkjCigoHnV5vX3PWmSixEiNMTmt8zH9RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:00:35:0a:1d:82:2d:2a:12:82:bc:2c:2e:44:75:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: Jun  3 15:00:38 2026 GMT
            Not After : Jun  4 15:00:38 2026 GMT
        Subject: CN=b04aecf4adb09069f44dec23d9eb03b0839661d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:b5:5b:27:ac:4a:12:22:61:eb:7f:05:81:
                    f0:96:c6:9d:f9:b9:5f:13:43:74:5b:93:8a:0f:f9:
                    4b:96:3f:76:f4:f5:bb:ec:11:7d:df:59:47:a7:f3:
                    53:9f:1e:28:e0:e9:a6:a3:c9:8b:9d:84:7d:26:b1:
                    2b:ee:6e:15:66:b5:8d:c3:1b:a5:a2:73:25:fa:44:
                    1f:3a:d8:97:cd:7b:f9:f0:d4:d0:b8:26:04:83:8d:
                    14:5d:af:d6:7b:b1:45:d2:cc:39:2a:73:82:76:3c:
                    dc:48:2b:17:b4:9e:6b:84:cf:da:d5:bf:fd:75:af:
                    e3:57:d1:52:45:0b:de:4e:12:49:69:89:26:19:ab:
                    d2:9e:7e:fe:7a:9c:fd:bd:6c:3e:55:d1:da:a1:8a:
                    c8:8f:e4:e0:b2:26:d6:ff:66:51:db:bd:6f:96:95:
                    e8:d5:f3:44:90:3f:5f:a1:e0:e4:d8:aa:dd:e8:4d:
                    78:06:f1:43:86:0b:da:59:ed:94:b1:13:37:54:93:
                    b3:00:96:ec:b2:27:11:27:db:b7:93:a5:51:8f:fe:
                    9a:4e:5e:ad:9e:35:69:d5:ae:58:59:20:95:c6:2e:
                    5d:12:0a:6d:b9:e2:83:1c:95:48:26:69:12:3a:d8:
                    b1:52:0e:5e:6e:7f:41:e4:9c:b7:6e:39:25:fd:35:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:EC:F4:AD:B0:90:69:F4:4D:EC:23:D9:EB:03:B0:83:96:61:D2
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:51:70:5a:37:bf:ba:00:af:58:18:e5:de:f6:a9:5f:17:
         77:ec:c5:fc:ea:71:3f:06:b3:97:5e:a2:e6:60:0d:88:7f:a7:
         6a:1f:e0:3b:a8:e9:88:5f:c1:02:55:92:04:e4:ae:19:f0:a4:
         f9:1a:7f:b8:0c:e9:81:de:98:b7:aa:cb:b1:10:70:60:08:cb:
         03:db:98:9f:38:27:19:f5:f8:80:4d:d9:6a:57:f5:cc:a6:75:
         4c:f8:f5:3d:f2:10:a1:00:21:2e:6c:e0:8a:5d:5e:d8:a3:9e:
         d7:30:2a:62:f6:42:f1:99:54:8f:85:65:83:c3:c6:90:9c:da:
         d0:75:a4:45:99:f0:3d:9e:89:ad:ab:7a:03:b5:79:2a:f8:a7:
         ff:22:e5:23:7b:5b:a8:d3:2f:49:f7:3b:ea:c2:ea:86:10:a4:
         df:05:35:82:1d:42:56:cf:34:55:32:b6:71:dd:6c:63:92:12:
         4a:85:92:45:ea:8d:27:48:53:78:f3:7b:c4:1b:75:d3:94:30:
         54:be:04:06:2b:cd:5e:5f:0e:5b:62:eb:56:f9:7b:0f:c4:f3:
         2a:df:db:03:4e:8f:33:ec:f4:20:e0:6e:f2:b6:6f:5c:de:ed:
         e1:ab:b1:f8:b8:16:9d:14:f6:5d:6d:c1:65:39:41:d5:2a:93:
         c2:3d:7b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6OADUKHYItKhKCvCwuRHV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWMyZGUzZWIzMDkxODBmNGY1YTVhZjJkNTZmZTQyNTg3
ODQ2NDgwHhcNMjYwNjAzMTUwMDM4WhcNMjYwNjA0MTUwMDM4WjAzMTEwLwYDVQQD
EyhiMDRhZWNmNGFkYjA5MDY5ZjQ0ZGVjMjNkOWViMDNiMDgzOTY2MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzK1WyesShIiYet/BYHwlsad+blf
E0N0W5OKD/lLlj929PW77BF931lHp/NTnx4o4Ommo8mLnYR9JrEr7m4VZrWNwxul
onMl+kQfOtiXzXv58NTQuCYEg40UXa/We7FF0sw5KnOCdjzcSCsXtJ5rhM/a1b/9
da/jV9FSRQveThJJaYkmGavSnn7+epz9vWw+VdHaoYrIj+TgsibW/2ZR271vlpXo
1fNEkD9foeDk2Krd6E14BvFDhgvaWe2UsRM3VJOzAJbssicRJ9u3k6VRj/6aTl6t
njVp1a5YWSCVxi5dEgptueKDHJVIJmkSOtixUg5ebn9B5Jy3bjkl/TV9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBK7PStsJBp9E3sI9nrA7CDlmHSMB8GA1UdIwQY
MBaAFLecLePrMJGA9PWlry1W/kJYeEZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt
MGJiNmE4M2Y5ZjQwLzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw
LzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzxRcFo3
v7oAr1gY5d72qV8Xd+zF/OpxPwazl16i5mANiH+nah/gO6jpiF/BAlWSBOSuGfCk
+Rp/uAzpgd6Yt6rLsRBwYAjLA9uYnzgnGfX4gE3Zalf1zKZ1TPj1PfIQoQAhLmzg
il1e2KOe1zAqYvZC8ZlUj4Vlg8PGkJza0HWkRZnwPZ6Jrat6A7V5Kvin/yLlI3tb
qNMvSfc76sLqhhCk3wU1gh1CVs80VTK2cd1sY5ISSoWSReqNJ0hTePN7xBt105Qw
VL4EBivNXl8OW2LrVvl7D8TzKt/bA06PM+z0IOBu8rZvXN7t4aux+LgWnRT2XW3B
ZTlB1SqTwj17yA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:01:52 2026 by rpki-client