Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File:                     Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier:          dJ+znGQP/Jc020sVbv7wmKA7THzBVx5cCBJGn4obv/8=
Subject key identifier:   42:D3:5E:88:39:96:7B:4C:12:7C:04:D7:F4:7D:0C:0D:5D:3A:A4:92
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer:       /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial:       019EB98EF67B829B9B392DC8B19067AFFEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number:          11DD
Signing time:             Fri 12 Jun 2026 02:00:14 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:14 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:14 +0000
Files and hashes:         1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: 2M0vzyxKyzomLI8C2qRF7TSVAdmXerh+WDQ55PzabDg=)
                          2: T9G0EsB9xNpRRqACBtjCNxlrY58.roa (hash: O8JhPnTVM6Wx6QaGCJoBS17fGqbeozAvQWWzsMQhij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8e:f6:7b:82:9b:9b:39:2d:c8:b1:90:67:af:fe:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
        Validity
            Not Before: Jun 12 02:00:14 2026 GMT
            Not After : Jun 13 02:00:14 2026 GMT
        Subject: CN=42d35e8839967b4c127c04d7f47d0c0d5d3aa492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:7d:e4:5b:3f:68:7d:6f:a7:a7:d1:b9:dc:
                    0b:fb:56:18:0e:01:ed:6b:9f:76:f8:94:58:cf:b6:
                    55:10:03:82:0f:35:78:1e:b5:eb:9f:cb:12:c0:ed:
                    1a:d1:11:85:8c:80:29:9f:76:f5:fc:49:64:62:3d:
                    6b:f2:0b:5f:bb:7c:f3:00:0c:9c:06:e0:6c:01:fc:
                    4d:2c:2f:0c:78:c6:56:9c:10:94:00:34:65:8d:4f:
                    e0:87:5f:41:40:03:5e:70:a6:ca:dc:70:e1:d1:81:
                    ed:10:d3:c9:10:26:39:ea:a9:28:a2:69:50:96:0a:
                    70:b8:a8:2e:e2:8d:e5:0e:9e:46:4a:25:48:40:63:
                    36:cf:9c:07:b8:e6:5b:00:79:aa:93:d9:33:52:7b:
                    c6:f5:d9:ca:a5:2f:22:8b:83:51:72:28:4b:79:5b:
                    33:2d:22:2d:1e:06:70:ec:1b:ec:5e:73:80:7f:4b:
                    1b:88:93:ac:aa:87:a1:0c:de:9e:61:ff:a2:25:55:
                    be:36:2c:7b:9a:0b:e0:fe:34:14:e3:05:91:37:c3:
                    8d:36:5d:80:65:ae:6d:e9:e0:a2:62:7a:6a:87:40:
                    09:9a:06:6e:e9:08:0c:a5:02:f2:07:94:d6:c5:45:
                    c8:7d:1b:13:0a:9a:95:cd:1d:fa:c5:67:f6:65:50:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:5E:88:39:96:7B:4C:12:7C:04:D7:F4:7D:0C:0D:5D:3A:A4:92
            X509v3 Authority Key Identifier:
                keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:78:76:58:63:2f:75:a6:c6:c5:d4:63:60:58:c7:44:06:
         1e:99:b0:a0:6e:ae:9e:f4:7a:66:bc:b6:14:15:c2:e8:1a:60:
         ab:be:f1:cd:04:bb:6b:3a:6f:d1:e9:c3:07:d7:d0:27:a1:20:
         80:6f:fc:11:f1:c0:1a:70:72:4b:e8:3b:18:f4:a9:13:d6:fa:
         3f:53:79:17:35:28:c0:ba:d7:b9:b4:76:a7:81:b7:04:91:bb:
         f0:9d:d3:7f:86:4a:06:9d:f9:7a:11:6f:5c:bd:1b:c7:bb:45:
         ff:89:86:57:ea:4b:52:e4:0e:3f:94:95:24:de:c5:3e:d3:ff:
         91:42:9c:73:d5:4e:25:77:dd:fa:5c:a1:97:f8:3a:77:dc:db:
         9d:ea:51:cf:e0:4d:8e:63:7d:91:13:bd:f6:f5:cb:ee:1e:2f:
         88:ec:8d:9f:0a:2c:1d:87:85:44:0f:0b:db:81:f4:75:b7:75:
         cd:35:d1:ff:7c:a2:d8:4f:b3:60:15:11:9d:ae:92:87:27:fa:
         4d:9e:8a:15:a0:e2:23:d0:3b:74:11:5a:b7:d8:41:f2:ef:d6:
         51:b3:d0:57:aa:f1:a1:a5:24:f7:cf:38:4f:0e:37:47:ff:06:
         39:64:46:af:af:c1:29:e2:9a:a4:b8:cb:35:2a:65:7b:f3:3c:
         16:99:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:28:28 2026 by rpki-client