Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          95mFjQSpbnA7usKmp1n5C8mWpavHEGKfzm90eqbzqLE=
Subject key identifier:   8F:FF:8F:E0:77:0F:D9:23:C4:3D:34:9D:3E:B4:22:BA:28:19:DE:12
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       019E30E0C64FD922A185473181266A277048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 13:01:37 +0000
Manifest this update:     Sat 16 May 2026 13:01:37 +0000
Manifest next update:     Sun 17 May 2026 13:01:37 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: wbuTuIDKfgWdwJPGZnDS1w6mfe73SbbXjqf5Wp6nVxQ=)
                          2: IcEfPnhAjewSEEO3LOP7u-TcVC4.roa (hash: BRMvl9t5zukkJheawmCAi6lNUM26ZBTh/KTKt1g+rZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:c6:4f:d9:22:a1:85:47:31:81:26:6a:27:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: May 16 13:01:37 2026 GMT
            Not After : May 17 13:01:37 2026 GMT
        Subject: CN=8fff8fe0770fd923c43d349d3eb422ba2819de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:24:b8:23:7f:8b:66:ac:38:97:94:83:73:
                    0a:d0:09:5c:4c:1e:c3:f0:1c:fb:b3:5a:b1:71:64:
                    4d:69:1d:37:f7:81:a3:da:b6:55:19:34:01:e2:61:
                    7c:29:8f:a6:36:ed:d7:b6:4c:9c:2e:a8:ea:58:c2:
                    f2:fc:51:4d:37:5c:53:91:dc:df:18:1d:c1:a1:71:
                    55:2c:32:75:a3:e6:ab:54:75:75:aa:b5:e6:59:b0:
                    19:84:5f:3a:ea:34:13:dd:b4:a4:cc:f8:13:89:d4:
                    66:c1:06:35:a7:8f:01:d4:c8:91:fe:96:22:b1:91:
                    a4:a8:75:12:6d:09:04:77:51:bf:4e:b0:eb:8a:0c:
                    dc:83:ac:7d:7d:03:88:8e:5b:b5:53:6d:19:30:e3:
                    fb:6c:bd:0b:48:be:24:4e:78:c4:b3:d3:69:e2:e7:
                    7e:b3:16:5e:dd:f5:bb:46:e4:a2:1b:b6:88:4e:ca:
                    fc:0d:fc:b4:d2:96:5e:b6:9a:5b:32:56:34:2f:e5:
                    85:24:da:30:1b:7c:06:e2:bd:38:12:f4:eb:57:19:
                    11:6b:52:29:38:49:fd:ab:25:bd:84:cd:6a:36:eb:
                    e9:ff:bf:0a:9a:ca:85:a4:aa:88:03:5a:fc:58:32:
                    81:b8:2e:23:a6:c7:26:75:d0:34:f4:4d:5e:ee:11:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:8F:E0:77:0F:D9:23:C4:3D:34:9D:3E:B4:22:BA:28:19:DE:12
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:92:c8:e4:a2:52:fa:21:41:1d:5a:42:02:84:aa:ed:af:4c:
         8f:d8:0c:c2:83:b9:57:d6:4e:61:e5:f0:2b:3d:17:ee:d7:11:
         01:7c:ac:46:2e:f0:f6:4e:08:1e:ba:a2:dc:90:2e:fe:ac:04:
         cb:a3:1b:77:7d:fd:a9:01:e5:29:00:09:2e:54:4f:6a:e3:67:
         80:37:8c:e6:7a:7c:d9:94:41:10:cf:56:71:95:35:8b:c5:04:
         0a:46:9e:19:b0:9f:d6:23:1c:22:37:bf:c3:82:14:b7:df:b3:
         f3:cc:c0:5e:0e:b2:c7:0e:99:d8:02:30:e1:71:90:86:59:10:
         f9:0b:31:27:1b:1a:9a:ef:97:37:99:e1:85:4b:f0:31:c4:f4:
         87:b7:1d:b2:64:a4:32:26:a7:f6:ed:b5:bb:31:ba:43:2b:a9:
         b4:9c:2a:8d:8d:b2:a5:74:4a:aa:b1:d2:74:a9:90:b2:d5:25:
         83:7b:c9:76:7b:60:3e:d9:b0:4b:4b:c6:8a:76:e5:02:0e:41:
         e8:03:0b:a7:56:ab:d7:69:bf:bd:21:08:fc:30:6a:59:ed:14:
         41:e6:81:4c:11:f6:6f:ff:6c:cc:5d:9c:6e:b2:e4:05:7f:ed:
         c4:18:62:4b:c3:93:29:23:35:c7:fd:c7:01:ce:0e:27:af:dc:
         72:4f:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:22 2026 by rpki-client