Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File:                     5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier:          4vgjhOw1ZXHFpO+skrD/C9h+/FfwZl4SNKROTqjcB+A=
Subject key identifier:   1C:C5:96:BE:3A:B9:61:BF:F3:D3:82:52:0B:5B:43:3D:5F:A6:4D:CC
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer:       /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial:       019DFD2973BB700973FAEF43EC4A6BB82085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number:          18F6
Signing time:             Wed 06 May 2026 12:00:45 +0000
Manifest this update:     Wed 06 May 2026 12:00:45 +0000
Manifest next update:     Thu 07 May 2026 12:00:45 +0000
Files and hashes:         1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: ct5nmjGAJ3EyIG14QnAR0nJjbPW7ns/WMO7yRfo07c0=)
                          2: Ce4JyywtGautS3Mm-3lISrYaav8.roa (hash: DFy+SIFzF79vZYLgz25dFA2syP1C5Krxgn24PEVhiiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fd:29:73:bb:70:09:73:fa:ef:43:ec:4a:6b:b8:20:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
        Validity
            Not Before: May  6 12:00:45 2026 GMT
            Not After : May  7 12:00:45 2026 GMT
        Subject: CN=1cc596be3ab961bff3d382520b5b433d5fa64dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:c2:39:94:41:6b:33:89:9d:05:f1:69:58:
                    71:bc:67:35:d0:17:c0:f6:e5:83:4e:ab:b6:67:4d:
                    b9:fd:b1:0d:fd:d6:d9:e8:17:60:eb:be:8a:5a:75:
                    74:a7:c2:28:e5:1f:95:9b:9c:8d:17:42:2e:bc:80:
                    6e:de:bb:0a:b8:30:52:3a:76:2a:69:e9:7e:86:1b:
                    f1:2f:d1:b5:81:32:59:06:8e:f0:8d:6c:60:b1:6b:
                    4a:92:94:9a:87:5d:01:2e:40:bd:2d:78:b6:4c:95:
                    e5:16:a4:3b:37:28:e8:46:df:63:29:14:2c:b0:17:
                    62:0c:2e:39:f8:23:80:8a:0b:e5:cf:7f:a6:71:59:
                    00:5f:c8:10:75:90:f2:89:e6:78:0f:25:bf:78:0f:
                    66:e4:89:04:72:86:7a:a0:0d:cc:de:21:a5:0a:95:
                    e8:11:76:92:d8:f3:e5:e4:9b:f2:b5:6a:a0:a6:68:
                    6e:b8:73:bb:6e:b0:6f:6b:4f:8d:91:d8:12:26:41:
                    a8:20:34:91:13:51:14:a2:a8:ee:2f:c5:23:cc:05:
                    b0:50:bd:5f:12:dc:06:be:bb:79:ad:f5:e9:af:85:
                    3d:b0:75:84:3b:21:af:38:65:73:12:12:a7:b4:68:
                    7d:63:13:f3:d1:31:f0:ab:01:b1:ba:15:8e:95:fe:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:96:BE:3A:B9:61:BF:F3:D3:82:52:0B:5B:43:3D:5F:A6:4D:CC
            X509v3 Authority Key Identifier:
                keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:04:7d:a7:f9:63:23:e5:d3:c2:2c:7c:b6:5f:49:6a:8c:2f:
         22:4a:ad:8c:fa:03:b4:83:c1:fa:86:83:b4:59:d4:ac:bb:09:
         22:63:53:32:4f:38:4c:03:7d:e5:25:59:49:a6:a6:70:39:41:
         d3:3f:38:76:4f:fb:3b:48:02:3d:4f:cb:bf:e1:25:c2:c6:53:
         93:0b:c1:a0:b4:bb:6f:26:7c:82:4c:ce:ef:48:1b:d6:9a:af:
         e2:f1:ec:83:52:b7:22:3b:1a:d9:d2:2c:db:e0:ea:af:71:e2:
         d3:32:49:0f:e4:81:b3:52:21:8c:ae:45:81:10:73:5d:5e:90:
         1a:06:fd:1d:7d:79:a3:3f:dc:fb:ca:c9:0c:ae:f4:fb:fd:4f:
         e5:0c:7a:59:a4:17:6a:7f:5d:c0:bb:e4:68:24:d2:4a:6c:de:
         bb:a4:c5:c4:04:97:c4:2e:55:d4:f2:c2:bb:ea:58:4d:8d:a2:
         47:d9:10:97:42:25:e6:3c:b7:ef:2b:ce:59:31:78:a9:40:d6:
         9e:74:55:65:47:9d:2f:42:c4:38:3f:e9:c4:59:e0:85:da:a5:
         ce:f9:ca:17:3c:c4:79:5c:b8:d4:8f:8b:5f:73:ac:15:a9:a9:
         8b:d4:a5:34:07:da:1a:41:1c:32:5e:d0:49:97:db:47:6d:fd:
         3c:8c:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 15:03:45 2026 by rpki-client