Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File:                     5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier:          3GowQLP8mu5M3qK3zuKP+1C34fVs7zbCHJFcJhtOhgU=
Subject key identifier:   11:67:69:F3:BE:93:03:CF:48:A3:1B:E9:50:BC:6A:04:67:81:6D:B0
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer:       /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial:       019E2F96FCA11B468BA475207908BC03FF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number:          172E
Signing time:             Sat 16 May 2026 07:01:24 +0000
Manifest this update:     Sat 16 May 2026 07:01:24 +0000
Manifest next update:     Sun 17 May 2026 07:01:24 +0000
Files and hashes:         1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: oKt9YKpbqYPNjE5IPVoy3ecz3K+lmU9bBsssfxb09No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:fc:a1:1b:46:8b:a4:75:20:79:08:bc:03:ff:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
        Validity
            Not Before: May 16 07:01:24 2026 GMT
            Not After : May 17 07:01:24 2026 GMT
        Subject: CN=116769f3be9303cf48a31be950bc6a0467816db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:ad:b2:52:f2:1e:10:52:92:d1:93:2e:69:
                    1f:c5:f7:d6:ab:38:e0:b9:33:20:11:34:77:8c:1a:
                    57:2c:6c:2f:45:3a:1f:b9:e9:55:a4:fb:ee:44:9c:
                    3f:fb:9e:15:8a:20:b5:0a:5d:48:7b:e3:1b:8f:21:
                    47:36:8f:6b:be:54:bf:e0:fa:d2:83:03:a9:0a:0f:
                    cc:f0:0d:7f:f2:49:33:4a:3c:6e:cc:42:77:24:a3:
                    cd:db:12:f8:60:5f:d6:00:e6:0a:4a:34:13:a7:ac:
                    f0:b9:3d:57:4f:c8:94:de:04:3f:04:58:c2:7d:d4:
                    2f:ca:f7:36:13:12:80:f8:8c:89:f2:b7:2d:c6:c4:
                    37:f1:70:be:d6:9e:19:31:11:07:c9:4d:12:9d:36:
                    32:56:84:e5:87:93:f7:1b:e5:66:c5:f2:ec:bf:f2:
                    cb:46:e0:6a:3c:31:cc:cd:15:bf:bd:0e:68:0b:bb:
                    28:75:4a:55:9c:fe:bb:b1:41:fb:4b:73:3a:61:b2:
                    90:cf:be:d3:2a:4f:33:74:81:2d:6d:6d:f1:ae:94:
                    d6:3a:49:cc:64:5a:4d:f0:3e:96:98:50:0e:7d:0e:
                    ef:17:70:43:13:df:a2:f0:ef:42:32:2a:e9:8d:09:
                    84:49:71:50:ac:55:cf:d9:3d:fb:ae:17:2a:a7:ff:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:69:F3:BE:93:03:CF:48:A3:1B:E9:50:BC:6A:04:67:81:6D:B0
            X509v3 Authority Key Identifier:
                keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:84:df:72:33:af:2f:f8:67:2c:43:fa:72:e4:ee:f0:f2:39:
         fb:6f:9a:4a:8a:f2:13:d9:60:72:33:81:bf:77:8d:ed:c4:63:
         e8:2d:71:d9:84:3d:27:bd:ca:ac:4b:90:4d:39:3d:f9:ac:7f:
         0c:6b:fb:0b:6b:53:21:22:e7:23:76:9d:4e:6e:32:f6:56:6d:
         0c:74:89:8b:94:6d:c4:63:ad:d7:17:eb:82:54:09:74:97:7b:
         52:e0:f1:e3:b0:d8:e6:0d:22:94:06:bd:95:3d:cd:81:1e:00:
         92:cd:c4:6d:e8:e6:12:7a:ce:9e:22:93:67:6b:40:6c:d4:26:
         fe:b9:2f:85:7c:6d:ae:fd:04:4a:f0:8f:f8:a1:5d:96:84:fa:
         1c:70:42:6d:87:16:bc:68:2f:97:b2:e3:04:05:c6:9f:63:f0:
         b8:8b:44:f1:cd:f0:e3:4c:aa:0c:91:3d:38:47:ec:b9:c8:63:
         56:15:bf:3b:22:5f:ed:c3:cf:ec:6e:6d:b7:87:f5:14:a0:92:
         db:53:1a:f4:7a:10:46:1e:f1:e0:84:ee:c2:91:eb:79:b7:8d:
         68:96:74:7e:41:b3:85:b5:93:89:06:59:1b:4d:cc:28:f9:12:
         39:53:7f:59:71:53:48:35:cd:e4:b8:60:d8:ab:7e:9b:5a:23:
         8a:ae:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:58 2026 by rpki-client