Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          E93sHuj5l8PR9PpcahSbHeP+wR+oVaNMotfc+nfqATA=
Subject key identifier:   37:69:AF:1C:CA:70:FD:98:18:B4:61:AA:33:BF:E4:BD:70:10:14:32
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       019E303B552128939D0D5208CD25B887594E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          14F6
Signing time:             Sat 16 May 2026 10:00:55 +0000
Manifest this update:     Sat 16 May 2026 10:00:55 +0000
Manifest next update:     Sun 17 May 2026 10:00:55 +0000
Files and hashes:         1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
                          2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: 44b4Uxv2Klx88VayeGVQ1BTGaKs2lQsGnbZz/mtVw3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:55:21:28:93:9d:0d:52:08:cd:25:b8:87:59:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: May 16 10:00:55 2026 GMT
            Not After : May 17 10:00:55 2026 GMT
        Subject: CN=3769af1cca70fd9818b461aa33bfe4bd70101432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:31:f0:b7:ee:e3:ce:b4:a3:6e:bc:25:2f:
                    0e:c1:f7:25:56:71:ab:b5:a0:59:d3:44:44:a1:77:
                    5a:1d:e1:b7:24:56:c7:c9:0b:ea:e8:f0:cd:bb:55:
                    6d:99:24:65:a5:80:97:23:05:1b:5e:09:04:9b:65:
                    91:53:66:2e:af:27:c8:9b:e1:5f:01:50:89:ed:69:
                    52:69:7c:96:1d:4a:ac:14:b7:0c:93:61:b3:d0:8a:
                    1b:be:c5:fe:c6:95:f8:96:de:93:e5:4f:84:48:86:
                    53:74:5d:6a:2a:6c:68:d5:8f:8c:03:e9:4d:ac:78:
                    7d:25:06:d8:29:54:a5:aa:ec:ee:8f:d8:5a:73:3f:
                    fe:61:12:10:a4:97:8f:32:2e:aa:b6:b1:b1:cf:f2:
                    be:c3:f8:43:d6:5d:c2:c7:a2:5f:53:16:7c:b8:52:
                    74:67:2d:35:ea:11:0e:d8:6e:c1:14:5b:24:58:29:
                    53:0b:a6:4b:9a:9a:a9:5f:aa:d2:cf:c8:9b:af:30:
                    ca:aa:73:1c:61:8a:91:cd:b2:19:1c:7d:7a:f3:aa:
                    2c:4f:0a:cf:84:17:c3:62:fb:b7:04:e6:be:8f:ad:
                    31:a7:6b:88:47:89:15:7b:a5:19:5d:55:ac:ed:f6:
                    be:6d:2f:cd:ab:0a:9f:be:d0:00:f3:57:a5:c3:b7:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:69:AF:1C:CA:70:FD:98:18:B4:61:AA:33:BF:E4:BD:70:10:14:32
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:e5:62:3a:fa:c3:90:8b:a1:62:47:59:4e:82:cc:d9:22:
         80:f8:99:da:8c:70:58:f9:6e:7b:8b:9b:eb:09:9b:19:f1:6c:
         ae:84:c1:1d:06:89:47:7d:f3:a7:02:5c:db:af:21:9b:3b:1e:
         c7:07:ea:d6:ee:ec:c9:28:99:9d:2e:1a:74:cc:7d:ea:0c:c6:
         cd:b3:27:e1:49:d9:7f:18:fd:93:8e:35:40:f9:fa:92:19:07:
         96:5e:e9:c7:53:9c:e9:ec:bb:57:0b:5e:7b:83:26:2b:bf:1c:
         80:4a:b4:c3:6f:b8:fc:44:2d:bd:57:0c:8e:3e:d9:c6:75:95:
         2b:b8:37:52:1f:f0:e5:9f:4b:0e:36:4f:2e:0d:eb:8c:11:c6:
         fc:8c:73:da:da:c1:32:ee:ac:af:9f:e2:ae:8b:1e:13:4e:dc:
         d1:73:31:c5:f9:43:3a:23:d0:c2:da:bf:67:4b:5c:cc:b0:09:
         f2:df:b4:29:e5:8c:02:73:26:f9:2d:82:f5:45:b5:84:33:89:
         c1:53:7b:31:70:10:95:ea:ab:b1:b7:d7:50:3d:b8:40:d1:21:
         71:be:be:68:d3:6a:24:04:4b:66:bc:d2:aa:e6:ab:97:15:5d:
         99:0f:82:60:cf:e5:61:2a:3f:6f:a5:ff:5d:ba:bc:4b:3f:32:
         e8:52:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:57 2026 by rpki-client