Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          +cLOqWGHVt/YIZ+IExeU7w/H37j5wfsRWfHDk/ZxuIg=
Subject key identifier:   A5:CB:63:24:B5:9A:36:34:DB:E4:7E:C7:6E:66:D8:B5:38:1F:08:E0
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019E322A3AB6AAFF4DF7B3E69C7E0F20E4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          B5
Signing time:             Sat 16 May 2026 19:01:28 +0000
Manifest this update:     Sat 16 May 2026 19:01:28 +0000
Manifest next update:     Sun 17 May 2026 19:01:28 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: MOdy5c3R+7JAUVOWx5vCPyOuqoZhRb8rBVzuYLzhzOE=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:3a:b6:aa:ff:4d:f7:b3:e6:9c:7e:0f:20:e4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: May 16 19:01:28 2026 GMT
            Not After : May 17 19:01:28 2026 GMT
        Subject: CN=a5cb6324b59a3634dbe47ec76e66d8b5381f08e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:29:7d:f8:09:25:99:dc:37:26:fc:13:1d:
                    18:07:e3:04:c7:84:69:e0:5f:d1:a8:95:62:29:d1:
                    b3:48:8b:6c:f9:27:cb:9c:b0:be:db:a8:b9:0a:f5:
                    7e:a1:23:df:d6:ed:64:97:b4:20:3f:80:dd:d3:17:
                    ab:5c:71:a1:50:d6:5a:f8:0b:86:f1:bf:8c:f9:3e:
                    88:38:b1:e2:50:11:a9:69:42:7c:4d:6d:b6:f0:18:
                    44:4c:26:3e:bb:9c:6f:d5:0b:8d:8a:a1:87:89:4d:
                    2e:ad:e2:17:23:05:3e:4d:79:a4:1e:0e:fa:1a:21:
                    99:ca:40:b3:22:8e:2e:e4:d0:47:6b:4e:85:36:76:
                    cc:95:5a:6a:4f:d2:58:2e:0e:91:fa:f3:f8:c5:53:
                    0c:de:a3:1b:7d:45:7b:78:36:35:df:62:41:22:1c:
                    43:f7:f2:f2:f3:cf:9f:9f:6c:64:f8:45:62:24:5d:
                    9c:1e:34:db:38:52:e0:a6:16:b7:b9:b2:29:8c:03:
                    d6:9e:f9:c6:70:5b:6d:b8:d9:23:a7:3c:ab:3b:62:
                    72:19:82:9f:cb:0b:2d:38:a4:2f:c6:53:1a:6d:9f:
                    3f:f9:a1:4c:89:a0:56:77:87:e8:48:3c:2c:4e:79:
                    35:74:eb:29:a6:14:cc:0d:4d:8a:76:8f:6e:22:12:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:63:24:B5:9A:36:34:DB:E4:7E:C7:6E:66:D8:B5:38:1F:08:E0
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:d8:de:3b:13:99:09:2e:21:1b:05:1b:a8:c2:5c:93:8d:
         dc:98:55:c5:1c:9f:94:28:45:80:4e:4b:e6:94:2b:a2:9b:de:
         da:98:6e:07:c4:91:b5:18:17:f8:6c:b9:6b:bb:27:1d:2d:51:
         9a:c2:44:d4:2a:ec:23:3f:ab:da:80:f1:96:71:04:2d:24:22:
         c6:85:1c:70:37:93:39:e1:d6:0c:70:0d:14:01:8d:07:14:47:
         d5:84:51:bc:af:28:13:e5:a2:11:4c:50:72:bb:84:f1:cf:49:
         2d:90:8a:d1:c4:2e:4a:12:51:05:44:bc:f4:72:51:99:95:7f:
         8d:44:20:6c:a0:31:b4:d0:38:10:54:58:1f:9b:36:ab:3f:f5:
         e5:2c:a7:4b:2a:9b:65:ce:fa:e5:2b:c7:77:4c:4e:8e:17:e1:
         25:04:67:80:48:30:19:db:81:3f:48:4d:fa:63:04:5d:43:e4:
         b7:ff:ce:fd:0d:01:6d:95:17:ce:15:3b:f0:15:54:40:1c:4a:
         c9:58:3f:7d:ac:e1:1e:9c:1d:3a:73:34:ab:37:93:61:52:90:
         1b:ec:0f:2d:7d:59:71:ee:aa:b6:08:df:c9:4f:ec:9f:e3:4b:
         42:6c:a7:57:5c:14:32:94:e5:4f:04:3b:e9:f0:ae:06:75:db:
         65:6d:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:12:35 2026 by rpki-client