Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File:                     5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier:          Y0XQaTVZ88JtNdsSRqrmv5we7UZn1b+maVaxQA/dbE4=
Subject key identifier:   54:5F:85:22:07:88:41:08:31:E2:B5:59:E7:76:98:B3:62:59:DF:73
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer:       /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial:       019E30059998FB505A648A927860E891EECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number:          0EFE
Signing time:             Sat 16 May 2026 09:02:13 +0000
Manifest this update:     Sat 16 May 2026 09:02:13 +0000
Manifest next update:     Sun 17 May 2026 09:02:13 +0000
Files and hashes:         1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: sIEVdMUf8/Jq6J9xIoS4kpdqSap+dqAr2fh2rSo+Rr0=)
                          2: mFHqDso79bnSGrudnucQz5R41Oo.roa (hash: xaP9Kn1Lx08lI3zRt9f0iOZYpubw0vPg4T0MZuTFXEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:99:98:fb:50:5a:64:8a:92:78:60:e8:91:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
        Validity
            Not Before: May 16 09:02:13 2026 GMT
            Not After : May 17 09:02:13 2026 GMT
        Subject: CN=545f85220788410831e2b559e77698b36259df73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1b:96:83:ed:de:13:92:06:89:54:3b:8e:9f:
                    1c:42:8c:bb:7a:a5:0e:70:22:3f:ce:3c:7b:42:a4:
                    7a:c8:14:e0:50:fd:72:0a:93:dd:f8:96:c2:b3:23:
                    29:2b:a7:07:e0:88:72:32:e6:6e:52:aa:c4:6e:1f:
                    28:39:36:f4:ff:5c:2d:28:cd:93:0b:5a:f6:94:d7:
                    08:3f:d1:0a:6f:e1:ee:49:de:ef:1f:c6:0e:0e:a6:
                    41:71:9f:8e:e8:12:1a:ac:fd:c5:6c:0d:af:d5:e3:
                    bc:72:ed:a5:a7:ca:d7:2c:f2:13:7c:34:b8:3d:5f:
                    48:1b:e1:ff:cc:41:a7:64:85:d8:d2:61:2b:21:20:
                    8c:ca:45:2a:05:0f:ba:db:42:2c:5d:93:4c:3b:e9:
                    43:6d:19:28:ff:a6:cd:ab:6f:53:0d:5a:9d:e8:ab:
                    bf:e9:77:4e:b1:b9:7e:8d:b1:3a:b6:9b:be:a6:9a:
                    20:dc:0d:27:8b:b1:9e:8a:5e:e0:97:54:97:40:f1:
                    7a:0e:83:fb:43:29:41:c0:0d:fd:1a:50:f7:2f:31:
                    f8:12:c2:89:3f:40:9d:49:d0:9c:7e:2e:fe:ab:10:
                    c9:dc:9f:6f:c3:0d:fe:13:ab:79:bd:0d:ad:0e:56:
                    30:c9:e1:90:47:bc:72:6d:80:fa:08:f9:33:29:85:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:85:22:07:88:41:08:31:E2:B5:59:E7:76:98:B3:62:59:DF:73
            X509v3 Authority Key Identifier:
                keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:d4:c7:e5:9d:ad:e3:73:5d:3b:b0:c3:6f:02:28:24:01:
         ad:02:a4:0d:f1:ca:2a:2e:65:d2:ca:f0:69:7f:0e:c8:3e:af:
         ce:09:b6:6c:13:6f:9e:2e:f4:b0:b8:ed:74:cf:73:71:33:a6:
         cc:3c:f6:27:83:41:f7:a3:41:6b:8a:6c:8d:c0:9a:3b:ff:01:
         2b:64:e4:3e:f8:45:88:35:72:14:da:0e:6c:52:cb:ad:33:ce:
         98:9a:74:a6:a5:f4:4f:4e:8f:40:82:2a:1d:95:36:07:9a:39:
         90:f7:fa:d4:a1:89:9f:32:7f:b9:05:bd:f6:30:95:d6:00:64:
         f9:a7:13:7f:0e:47:a7:77:7f:cb:71:24:30:6c:00:54:76:1b:
         cf:16:ee:32:8e:97:8e:18:4d:b9:8e:1f:96:52:e1:e6:e7:5e:
         d5:88:71:f0:44:9b:8f:2f:c4:f7:1c:7a:5e:c4:4f:a8:69:35:
         b0:f8:28:5a:66:bc:50:51:cb:55:ad:5a:9f:bf:b9:01:48:ac:
         b3:97:cf:f9:3d:c4:02:cf:e0:13:b0:01:c3:84:a6:23:ac:0c:
         6b:3c:18:e4:76:0f:ab:fe:92:8c:fd:48:19:9f:14:9c:54:13:
         40:9a:0a:a2:1d:c5:79:04:37:7a:de:84:23:26:30:6e:a2:df:
         a6:41:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:00 2026 by rpki-client