Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          mIbjaYVzBhF2A4DnXjL3L2peuOwTqMojmpSFl4kiHio=
Subject key identifier:   87:EB:99:1E:6E:DA:C4:72:25:6B:0A:85:96:52:0C:40:99:94:C4:F0
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       019E30E06061E9A816B6BCF4AD88AA5BA6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          135D
Signing time:             Sat 16 May 2026 13:01:11 +0000
Manifest this update:     Sat 16 May 2026 13:01:11 +0000
Manifest next update:     Sun 17 May 2026 13:01:11 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: D2LE5iRLvf5b8KyKJw3ih1f3ftY3+o6pqUGoCA2+LK8=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:60:61:e9:a8:16:b6:bc:f4:ad:88:aa:5b:a6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: May 16 13:01:11 2026 GMT
            Not After : May 17 13:01:11 2026 GMT
        Subject: CN=87eb991e6edac472256b0a8596520c409994c4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:2a:1b:63:de:22:c3:ec:96:6e:48:84:53:
                    4d:18:1e:ad:ab:3c:9b:09:ec:3b:52:81:31:d9:bc:
                    4b:c3:a3:14:93:6c:44:f1:2c:cc:0f:e0:e8:1e:10:
                    46:3f:c7:b2:89:47:c0:97:7f:61:71:27:53:8b:07:
                    0b:6e:30:aa:be:48:d9:ac:df:e2:cb:da:c6:72:f8:
                    67:aa:1b:bd:45:6f:9c:eb:df:a0:c9:d2:bd:73:4f:
                    41:e7:38:11:55:28:75:02:13:39:63:62:cb:06:ed:
                    92:78:2e:8e:c2:ba:a3:67:d5:9f:71:90:06:25:68:
                    29:dc:dd:f0:1a:77:71:a9:aa:b5:d9:af:a9:07:d7:
                    05:cb:35:d4:76:ee:97:95:88:40:2d:1a:3b:6f:85:
                    c1:fb:6f:7b:d1:c0:41:33:92:7a:2c:fa:13:c8:85:
                    e1:ae:5a:34:f7:5d:fd:71:bc:3c:9e:2f:d0:1d:d7:
                    68:c1:b2:17:c0:3b:3c:46:0e:ca:a5:8b:5b:c8:bc:
                    74:9d:6a:65:2e:69:51:c0:fb:dd:bb:7c:de:68:ce:
                    d6:3c:db:85:44:a3:90:cc:ac:f9:70:e7:47:9f:d0:
                    e6:ab:99:9a:e9:c8:3a:01:d3:6c:9a:09:d9:96:99:
                    51:39:67:11:b8:da:99:f6:77:92:af:3a:a8:e7:8b:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EB:99:1E:6E:DA:C4:72:25:6B:0A:85:96:52:0C:40:99:94:C4:F0
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:ac:0e:ce:c6:eb:69:3a:83:eb:cb:8f:5a:60:7e:cf:fd:
         f2:3a:b2:71:de:8d:57:c3:d0:b6:ea:0a:f1:0e:3c:d0:4e:d4:
         af:16:a0:a7:cc:80:99:8a:a4:bf:41:91:ff:0e:89:44:30:c5:
         aa:de:77:25:72:bb:69:7a:5d:77:62:aa:42:c9:c9:7e:21:90:
         9b:70:c8:5a:ee:21:f6:86:9e:29:c1:f9:c6:b8:d1:08:03:02:
         26:b4:7f:c9:a4:58:f7:11:03:0a:f1:fa:40:89:df:03:6d:f7:
         0d:05:dc:df:05:ab:12:55:94:a1:11:09:18:ff:2f:69:6e:cd:
         2b:6d:03:be:c8:2a:14:d6:aa:42:4b:f5:36:3e:f7:e5:a9:cb:
         30:61:2f:de:b8:47:96:97:91:32:be:1e:e5:33:f1:d2:4f:ba:
         31:79:f8:c3:50:c0:8c:b6:58:8a:45:7c:b4:7c:39:d3:4f:3e:
         6c:9e:49:1c:c0:0b:ea:9f:7d:fb:54:98:63:61:96:18:7b:d0:
         b2:97:ce:a5:97:ed:03:e4:d8:d3:c9:28:25:4d:d3:71:ab:9a:
         d0:0a:58:2c:8c:69:25:9c:e9:40:5c:17:3c:0b:66:6a:65:3e:
         e8:a2:3f:6d:eb:56:67:d8:78:37:4f:fd:e7:04:e7:0c:e5:2b:
         af:27:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:50 2026 by rpki-client