Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File:                     8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier:          c56oQqGkVTfKVVvk6hL6KFZVoJzqRgFsFVS7f7t3w/U=
Subject key identifier:   5E:64:59:6D:E2:C0:FF:03:F2:8E:15:FE:1A:98:7B:81:2B:BD:3E:11
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer:       /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial:       019E2FCD8DF51D0976E993514BA9391B726E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number:          0915
Signing time:             Sat 16 May 2026 08:01:00 +0000
Manifest this update:     Sat 16 May 2026 08:01:00 +0000
Manifest next update:     Sun 17 May 2026 08:01:00 +0000
Files and hashes:         1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
                          2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
                          3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
                          4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: 9V6XsowoILqXWRcrBhRpK5d3RGOA5PbjckvGZ8njrPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:8d:f5:1d:09:76:e9:93:51:4b:a9:39:1b:72:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
        Validity
            Not Before: May 16 08:01:00 2026 GMT
            Not After : May 17 08:01:00 2026 GMT
        Subject: CN=5e64596de2c0ff03f28e15fe1a987b812bbd3e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:27:c7:5a:9a:f3:84:c9:d9:ce:cf:61:49:
                    e1:71:b2:7a:e1:83:93:8c:d2:d0:70:93:e1:32:4b:
                    70:2e:a6:c4:9b:21:1f:51:2c:2d:e7:f7:01:aa:37:
                    33:5c:b2:18:38:8c:4e:47:bb:56:4a:95:d6:b8:c1:
                    47:b3:68:6c:a0:56:2f:bb:7a:ae:5c:11:00:9e:35:
                    05:2a:54:76:ac:66:07:82:ec:06:2c:54:0d:d7:00:
                    c5:59:03:d7:94:6d:e8:2b:2e:87:cf:61:a6:dd:31:
                    7d:62:24:ea:c1:86:bf:d8:60:f4:ad:ee:47:6e:40:
                    8d:6d:66:c9:ab:56:5f:9e:6f:8d:b1:88:83:c7:5d:
                    c0:6e:7b:47:cb:dc:36:29:61:eb:e2:d7:b7:15:07:
                    b2:84:dc:56:58:bc:1c:a5:d9:a0:d2:63:c7:14:e2:
                    e4:8c:2a:37:84:eb:96:3d:98:e3:e6:7a:7a:5d:6f:
                    e5:26:97:45:ca:a0:ab:0e:4a:96:35:1a:ba:62:3c:
                    8b:6a:fe:01:db:80:57:a1:d9:f7:52:c4:80:db:83:
                    63:4a:af:74:c6:3a:f0:27:b4:c6:1a:f5:d9:9e:fc:
                    21:a9:11:b7:b6:41:5e:ee:cb:b5:6e:65:92:86:3d:
                    75:5c:a5:81:14:e4:d2:8b:f6:75:53:55:0c:e2:2e:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:64:59:6D:E2:C0:FF:03:F2:8E:15:FE:1A:98:7B:81:2B:BD:3E:11
            X509v3 Authority Key Identifier:
                keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:30:23:f9:05:86:0c:c4:f1:20:c7:d3:3c:41:cd:71:d3:
         bd:cf:9c:43:34:16:2d:48:49:2a:d9:a9:5d:aa:88:8f:9a:73:
         8b:7c:7c:2f:a7:ea:0b:fa:b6:ac:6e:75:bc:e1:e8:a9:fa:2b:
         9c:72:b8:5b:c6:f9:62:fa:40:03:40:b2:65:e9:58:64:e0:9d:
         8a:ce:f4:df:7c:92:b1:63:95:ed:1c:34:2d:a5:b4:c8:52:40:
         09:27:47:f5:46:c8:03:ee:c6:0f:3a:59:9f:25:59:5d:2e:6c:
         20:85:b0:21:cf:06:84:0d:af:1b:3b:c3:9a:08:12:5a:82:04:
         52:3f:a8:d2:31:1c:04:b2:3d:f6:3e:7a:81:fa:32:73:28:60:
         fb:0d:0b:4b:eb:00:1d:e9:38:83:4c:20:75:d6:62:d5:45:ad:
         0d:97:30:dd:6f:41:ea:c9:e5:cf:1d:fe:56:a5:23:42:db:2e:
         2d:6b:c5:14:cc:05:5d:35:1b:06:29:7d:49:fc:29:c6:74:21:
         b0:27:35:72:1a:13:ea:2c:16:98:32:92:fe:4b:41:8e:59:81:
         4e:96:cf:16:a0:38:61:18:4e:95:97:1a:a8:bc:b5:71:14:8b:
         a5:8e:32:cb:f7:41:4e:f2:e4:7c:59:c6:24:dd:8c:eb:4b:95:
         01:9d:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:54 2026 by rpki-client