Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          Kx+bpi1jMmZVJU63cz1j1NN3rA8pnlSpuBukIj1+gUI=
Subject key identifier:   01:5E:63:89:94:69:52:F3:0B:C1:9C:1E:0E:AB:34:48:73:80:67:86
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       019E30DFEA6CE46E2C4998418BCFB4FB7DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 13:00:41 +0000
Manifest this update:     Sat 16 May 2026 13:00:41 +0000
Manifest next update:     Sun 17 May 2026 13:00:41 +0000
Files and hashes:         1: 1EN7TRD-aLVl5lkSCjm_nVcC3UU.roa (hash: MtswjThVcbS9+sptcfq3+1p1Rfy1WmBysgNNW6G/HTs=)
                          2: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: fik1rA+/7r8R4Q0N9f10gLacDeqDv7GXXeZbcga/IXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:ea:6c:e4:6e:2c:49:98:41:8b:cf:b4:fb:7d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: May 16 13:00:41 2026 GMT
            Not After : May 17 13:00:41 2026 GMT
        Subject: CN=015e6389946952f30bc19c1e0eab344873806786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:fe:bd:23:83:f6:b5:d0:e8:c7:a1:95:82:
                    a1:fc:6c:48:6b:1c:0a:7d:b4:22:62:95:6b:b4:0e:
                    68:da:97:21:62:2e:0e:55:4b:45:c6:59:ff:d9:79:
                    a0:15:ee:4e:b8:7b:de:7c:10:93:27:02:6d:1b:bd:
                    d9:13:08:99:9b:79:92:32:45:4f:94:2d:ba:3f:d6:
                    cc:f5:af:2a:8a:23:fa:71:a9:b3:6a:7d:b5:ed:23:
                    af:02:20:b7:e4:a4:da:f2:da:55:d0:1a:98:f7:ce:
                    7d:c2:26:83:84:2d:26:e4:0f:4a:88:21:6b:18:e1:
                    ab:e1:a2:d1:1f:30:1d:ec:33:39:46:17:7e:53:fe:
                    cf:45:5f:45:ab:1b:30:a1:41:79:39:22:8d:22:1e:
                    7f:11:ae:23:4d:8a:8a:51:bb:91:c1:f3:a0:b0:c6:
                    6a:22:34:70:4c:b9:98:9d:98:51:b6:8f:27:01:98:
                    dd:80:23:56:ea:56:ce:fe:4b:80:e7:07:04:2d:f1:
                    b1:95:d0:e0:76:63:da:50:f4:40:01:cc:3f:5d:08:
                    0c:ce:09:15:8b:71:cd:db:3b:cc:ea:2c:b5:15:a5:
                    e0:a4:63:79:41:68:8d:59:e9:17:c4:dd:b8:1d:6b:
                    74:28:54:99:90:43:42:d3:5b:f9:83:1a:44:07:4c:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:63:89:94:69:52:F3:0B:C1:9C:1E:0E:AB:34:48:73:80:67:86
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:95:13:32:e0:0d:12:96:87:01:2d:db:90:b6:c6:4d:c1:ac:
         d8:74:42:a8:dd:9d:72:cb:26:1e:8a:d7:14:b8:10:92:79:79:
         ff:27:6f:81:9f:21:36:47:01:6c:61:16:af:19:c3:67:94:8d:
         65:67:52:0c:83:c5:9b:3c:bb:9f:d1:0f:1a:80:81:af:1b:35:
         ec:b5:85:3a:91:24:7d:25:4f:5d:c8:1a:32:79:61:a7:59:30:
         c2:06:13:2d:60:a1:97:f3:ee:27:e6:d1:76:d6:55:95:13:70:
         28:ac:89:9f:65:5a:6b:58:71:22:6e:58:90:3b:c8:da:19:5a:
         c9:40:27:33:00:d5:57:d8:92:41:e4:e9:4b:74:07:59:50:d5:
         b3:1f:28:c3:89:eb:c2:59:3c:67:fd:d1:de:e2:01:5c:2c:37:
         f5:8d:46:10:89:66:1f:01:c2:34:d5:ab:e2:80:85:f0:96:32:
         40:d3:41:1c:9d:17:72:42:c2:3a:ae:51:20:69:0e:19:19:99:
         99:5f:fa:5c:67:97:77:0f:c9:a8:cc:ae:7a:98:5c:3e:68:f3:
         76:9c:39:43:f2:7c:7c:bb:1c:22:32:1a:01:ea:9c:ae:b7:26:
         0f:d5:4a:e1:85:3b:8e:51:45:dd:b2:65:30:40:e6:9b:06:a9:
         f4:92:a1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:40 2026 by rpki-client