Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File:                     5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier:          LeylZrJqfjLxjXxdtksPFoiRlgkWBIanfCu6RG0hCaU=
Subject key identifier:   41:B2:CD:9A:CF:79:4D:8B:A1:15:A4:99:17:0D:4A:74:28:36:DD:F1
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer:       /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial:       019E292714458A8737D9872FA32A7BBBCA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number:          0144
Signing time:             Fri 15 May 2026 01:01:27 +0000
Manifest this update:     Fri 15 May 2026 01:01:27 +0000
Manifest next update:     Sat 16 May 2026 01:01:27 +0000
Files and hashes:         1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: eFlUGVluTmYKlJt+oziBddQSVqaNm36iCWJ+neMq80Y=)
                          2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:14:45:8a:87:37:d9:87:2f:a3:2a:7b:bb:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
        Validity
            Not Before: May 15 01:01:27 2026 GMT
            Not After : May 16 01:01:27 2026 GMT
        Subject: CN=41b2cd9acf794d8ba115a499170d4a742836ddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:ce:55:05:42:67:2e:b0:af:11:a6:68:bf:
                    c0:7d:1d:53:29:3b:ac:0f:bd:21:a7:99:e9:2a:ab:
                    55:a7:3c:09:bf:74:12:ac:50:b4:fa:64:c5:79:e2:
                    96:49:89:84:a9:81:1a:85:ee:b3:71:eb:ea:e1:6f:
                    7a:d1:9d:4a:80:b7:39:fc:fa:f0:65:81:60:f7:dc:
                    4f:87:1a:f0:39:ee:9b:21:b7:aa:8e:57:70:3a:22:
                    e3:9f:0d:eb:a5:71:0a:d1:56:61:13:d3:c4:72:50:
                    09:de:9c:e1:21:a7:55:43:f2:eb:c8:e1:d5:a7:03:
                    b1:44:ef:77:41:24:76:f5:2d:cd:ac:83:70:30:4f:
                    dc:68:a2:73:c5:7f:cf:47:cd:3e:43:e7:db:fb:e7:
                    a8:71:fa:08:1b:e3:c1:63:41:c6:b7:fd:95:63:aa:
                    eb:f0:11:9d:78:bc:b6:9d:c3:d6:31:e5:9c:26:73:
                    4f:d7:5d:74:b3:5c:de:ec:25:83:ca:55:52:67:cc:
                    b6:b1:96:bb:ba:28:31:a9:b0:9b:21:6e:21:87:45:
                    b8:8b:b2:fd:55:8c:d3:b1:39:51:94:10:ec:e3:fc:
                    1f:97:48:45:4d:95:48:b4:2d:e9:35:fa:bd:c6:43:
                    e4:58:22:97:85:91:d9:9c:af:8b:14:fc:3f:f5:cb:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B2:CD:9A:CF:79:4D:8B:A1:15:A4:99:17:0D:4A:74:28:36:DD:F1
            X509v3 Authority Key Identifier:
                keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:d3:0a:7d:14:5c:56:64:1c:63:5a:b3:0e:c7:ad:1a:be:
         af:66:99:7b:d0:e6:6c:0d:c4:24:91:66:03:42:5e:2e:ec:9c:
         8d:b2:da:ae:9d:0d:f6:bd:f0:fd:5b:e0:11:e5:1d:0e:54:3c:
         f2:64:a9:73:2e:0b:2e:c9:8f:5f:a1:1a:67:25:eb:29:91:ba:
         93:50:a8:dc:4f:d7:dc:d5:09:4a:ba:33:a8:c3:d6:e1:20:14:
         7f:ef:13:73:e8:ff:74:c8:5b:f4:c7:1f:9e:b1:a7:20:81:4a:
         e6:82:27:95:60:ee:78:f7:4d:ad:d5:60:c0:37:09:78:59:84:
         43:7e:60:75:60:d5:e3:0d:a8:cb:41:4b:08:cc:ca:82:ad:97:
         a8:d4:13:1a:b2:b6:a5:73:2b:c1:5c:04:96:28:87:95:c7:c9:
         03:04:75:cd:74:9a:dd:e9:70:4b:36:d0:3f:67:53:9d:43:7f:
         1d:2d:be:e5:06:23:aa:05:73:67:b9:46:e6:1d:96:56:7a:a6:
         c9:62:65:49:70:ce:f5:a6:3e:ce:5d:b1:ea:4a:ba:ae:2c:e8:
         58:35:e2:e6:ba:6c:05:43:1d:d2:09:b2:ee:68:e0:82:07:29:
         7d:b3:57:d2:ec:0e:ba:73:fd:67:e7:2d:81:b2:69:38:37:95:
         98:ad:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:23:15 2026 by rpki-client