Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          g6CmWPYDu3s76HYAmjGezgOmaLd9UWoAvzvV7Z5dpuQ=
Subject key identifier:   E3:67:42:24:F0:94:72:2D:CF:66:46:90:FB:D2:4F:F2:4E:7E:9C:E9
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       019E30E026A2BE0F2D67E3C1AE656EF5AFBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          0C32
Signing time:             Sat 16 May 2026 13:00:56 +0000
Manifest this update:     Sat 16 May 2026 13:00:56 +0000
Manifest next update:     Sun 17 May 2026 13:00:56 +0000
Files and hashes:         1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: TBOW3yEYw3v7WceMHVRl0CQRAflhpOze1YpaklSWG0k=)
                          2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:26:a2:be:0f:2d:67:e3:c1:ae:65:6e:f5:af:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: May 16 13:00:56 2026 GMT
            Not After : May 17 13:00:56 2026 GMT
        Subject: CN=e3674224f094722dcf664690fbd24ff24e7e9ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1d:10:03:9d:73:ec:e7:a4:a3:5c:4e:16:a7:
                    00:bf:ff:dc:08:59:64:b9:47:97:e5:09:df:6a:b3:
                    e1:85:80:f4:27:e5:85:98:a2:54:a6:cf:24:16:1d:
                    42:36:3c:9b:d7:f3:75:c4:4c:df:b8:3f:8c:d4:89:
                    a1:94:c7:ac:63:62:8f:d9:c0:e9:43:06:69:40:c1:
                    86:9c:81:3b:21:b3:02:54:dc:3f:d2:ba:00:d8:7e:
                    5b:3b:f1:df:3f:08:9c:cb:4c:92:6b:f1:58:72:3e:
                    c4:fa:43:d3:f8:69:2a:6f:34:15:ca:3a:1a:08:84:
                    cb:75:1b:f2:92:2e:b2:d6:53:24:26:53:1f:f9:1f:
                    4c:b7:58:d4:de:eb:83:8f:5f:58:f4:d7:72:da:c5:
                    2b:85:b3:75:53:29:fe:c5:e8:6c:06:3d:96:49:7a:
                    45:83:77:85:5c:54:fa:d8:07:e6:74:41:77:3b:13:
                    c8:d3:f6:71:de:b7:b7:48:84:63:93:86:15:dd:3b:
                    88:8a:d7:a0:66:ed:76:65:49:9f:34:f9:c9:ac:ef:
                    84:6f:b9:5e:a9:b9:56:0c:f5:cc:a9:b2:ed:fc:b1:
                    d5:e2:43:c7:52:26:c8:85:23:92:38:bf:14:5b:5e:
                    4e:39:a8:89:48:e5:ba:e6:3c:d3:15:e2:7e:c9:f3:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:42:24:F0:94:72:2D:CF:66:46:90:FB:D2:4F:F2:4E:7E:9C:E9
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:dd:65:96:fa:6c:92:73:69:f8:7d:51:04:b6:75:42:b6:
         5e:37:49:2d:7b:d4:d7:57:4a:ff:19:f7:0b:59:56:50:f6:c5:
         89:e1:9c:25:fc:5e:16:2b:53:24:da:80:5d:f7:1b:7f:4c:fe:
         dc:90:5d:df:28:4d:59:8e:9e:c7:45:8f:5c:f8:78:86:cf:5f:
         c6:3e:fb:48:40:38:52:2e:db:13:72:d2:87:b7:93:90:8b:22:
         70:4a:1f:9a:2f:36:3f:d4:aa:4d:0c:73:ed:55:ca:d1:b7:a0:
         2c:4c:76:a1:8c:bf:3d:e8:ba:09:25:6f:21:ae:a3:fc:3c:35:
         df:f3:6b:56:00:34:ee:11:9a:d8:1b:93:17:12:1d:47:ed:e1:
         a3:88:e3:c8:d5:07:98:e2:08:ad:0c:64:e5:bf:d6:91:91:bc:
         15:2f:d9:a8:08:ca:c2:3a:4f:6d:28:e5:30:0f:c6:00:4f:00:
         5c:02:a3:11:a0:0c:b8:a1:7f:ec:e0:d0:5c:aa:84:02:01:7c:
         4a:5b:99:68:d4:00:9f:1e:3e:78:12:21:f0:82:fb:36:72:47:
         17:11:a4:bb:ea:c3:fe:56:f2:ac:1a:f7:04:8b:98:dc:b4:6e:
         43:24:2e:38:82:17:ed:f4:d4:bf:fe:27:95:19:fe:14:9c:82:
         09:a7:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:52 2026 by rpki-client