Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File:                     5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier:          DXXwZr7H0+2cf5J3eGGg0wSrgN1uwXtD6tKS5kiYdOo=
Subject key identifier:   AB:5E:51:BF:92:A5:5C:0D:84:BB:CC:74:CD:9B:6D:61:C8:51:FB:D1
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer:       /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial:       019E2A026FB61FF0EE358305DCE007610594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number:          18A0
Signing time:             Fri 15 May 2026 05:01:03 +0000
Manifest this update:     Fri 15 May 2026 05:01:03 +0000
Manifest next update:     Sat 16 May 2026 05:01:03 +0000
Files and hashes:         1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: 2Lg+ovlKsXCEBQsbKGsavF2ET+7RWRqTVRbOwzDQw3g=)
                          2: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (hash: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:6f:b6:1f:f0:ee:35:83:05:dc:e0:07:61:05:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
        Validity
            Not Before: May 15 05:01:03 2026 GMT
            Not After : May 16 05:01:03 2026 GMT
        Subject: CN=ab5e51bf92a55c0d84bbcc74cd9b6d61c851fbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:97:d5:cd:2f:b4:54:46:25:d1:e3:e7:18:
                    fa:d1:f0:f9:3b:05:a4:af:ec:c4:92:47:12:2a:76:
                    ad:85:9f:9c:11:bb:a0:7a:db:99:9b:0a:f0:e7:3f:
                    31:10:2b:89:6f:73:61:52:4c:64:18:7f:9c:cc:1c:
                    93:ae:1f:7b:fd:68:bd:21:c7:9a:34:5c:ed:54:05:
                    78:05:9e:05:ec:58:4e:01:62:ff:af:e9:f3:25:b3:
                    49:25:0d:2f:b1:00:76:bb:39:d2:80:d2:13:13:b5:
                    ea:8a:cb:82:84:19:18:10:93:85:d0:3a:c6:86:24:
                    94:b5:c2:59:2b:22:d1:fe:fc:67:4a:f4:4e:4a:3c:
                    36:81:6d:32:26:87:d8:69:64:02:51:e6:1c:ff:bd:
                    93:8b:26:bf:bf:51:cc:a3:c1:fa:aa:d8:4d:30:85:
                    08:0b:09:ea:07:88:86:ca:f1:09:65:38:c8:18:83:
                    5b:f6:fc:1f:6b:af:04:33:e9:46:d5:d5:7d:0c:41:
                    35:60:aa:60:21:1e:aa:2a:5a:2f:73:67:fa:0c:8c:
                    21:68:57:04:42:7b:18:df:ee:c2:cb:ab:ba:d7:61:
                    1b:8d:18:db:23:08:92:8a:8a:57:ed:fe:3f:4c:d9:
                    64:3a:ef:91:ae:82:fb:a2:0a:3a:75:03:86:f7:9a:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5E:51:BF:92:A5:5C:0D:84:BB:CC:74:CD:9B:6D:61:C8:51:FB:D1
            X509v3 Authority Key Identifier:
                keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:70:3b:59:62:13:f5:68:ff:f2:ed:12:c4:ee:29:5b:0f:8b:
         e5:af:ba:6e:29:8d:21:90:c1:04:40:54:fd:ea:20:f4:66:f8:
         ae:77:7a:ad:34:cb:d5:05:54:0f:40:9b:64:e0:08:db:8d:4e:
         ac:68:2b:28:fa:ef:58:28:d1:1f:46:57:2a:f9:d2:98:cf:78:
         a3:55:9b:dd:18:6d:27:eb:c1:8f:4b:57:59:d4:ab:c2:75:98:
         fa:0f:e1:0b:9a:7e:f5:16:00:4f:23:1c:3f:2c:6e:48:ad:14:
         6c:16:af:5a:12:f1:64:1d:0c:2d:0c:9d:fa:b3:cc:5b:0d:4a:
         6e:b2:32:99:9c:b4:e3:a0:3d:b9:b7:a9:c9:c8:52:ad:ed:e0:
         df:d2:c2:ba:54:1a:48:9f:7b:09:0d:2f:1e:35:d9:45:ff:1d:
         3f:f1:c1:fd:d2:a2:94:8f:cd:d8:6f:a0:7c:e1:d5:4e:66:76:
         1b:af:5c:46:de:31:9e:75:de:c0:20:fd:5f:b8:ef:25:1c:37:
         7d:3e:11:c1:ca:c9:89:85:d3:31:f3:95:e6:e0:d6:1b:f5:47:
         6b:5b:5e:0c:27:8c:71:f6:5d:e3:17:cb:c9:f0:c2:4d:53:9e:
         07:49:80:46:55:98:e6:5a:7c:ce:0d:2e:7f:f4:3b:81:aa:e2:
         e3:27:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:11 2026 by rpki-client