Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File:                     5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier:          XqpheFde/pl/6j7EtILISdLPbBg1SlfLQwvzC8KIchU=
Subject key identifier:   6D:96:1E:90:E6:B2:A8:76:35:BD:33:74:96:1B:2A:F2:8C:98:36:D1
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer:       /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial:       019E8EA5A7EDAE4B1BFE40E2F93E8694479B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number:          0387
Signing time:             Wed 03 Jun 2026 18:01:21 +0000
Manifest this update:     Wed 03 Jun 2026 18:01:21 +0000
Manifest next update:     Thu 04 Jun 2026 18:01:21 +0000
Files and hashes:         1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: O7b+5i0HpuLbaSJCUeaJ59sRZuKu1QumoD/dZmMunME=)
                          2: v2rVsh0dCI0ULQlOGc8HMoLg5uo.roa (hash: 6uedt+3d7jJXVdMAyo0QQWrH7s27rp7WpYCrWtYVZzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:a5:a7:ed:ae:4b:1b:fe:40:e2:f9:3e:86:94:47:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
        Validity
            Not Before: Jun  3 18:01:21 2026 GMT
            Not After : Jun  4 18:01:21 2026 GMT
        Subject: CN=6d961e90e6b2a87635bd3374961b2af28c9836d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:b6:ca:90:44:f9:fa:39:61:92:14:7e:64:
                    f8:32:fd:d6:aa:71:4e:0d:b6:a3:55:e0:4c:c7:49:
                    ee:f5:4b:4d:5e:0d:cb:19:f4:58:f5:3e:e8:d0:ee:
                    b1:c5:54:85:4e:12:a0:77:6e:88:07:cb:64:19:e4:
                    60:6f:c0:9f:3e:cf:92:8d:28:ae:19:5b:03:38:96:
                    06:95:26:24:19:c8:0b:27:e1:c6:57:6e:b3:09:41:
                    6e:ea:43:3c:86:f7:9a:18:f2:12:02:09:80:8b:70:
                    40:2b:eb:a3:36:c4:f3:1e:6a:f0:7c:48:09:f4:82:
                    3d:ba:e9:e5:fd:f1:dd:3c:d6:03:56:a1:fa:1c:ee:
                    52:1b:2a:1f:75:7b:ca:25:a7:06:bc:5b:e5:6b:c5:
                    af:01:3e:c0:95:ce:43:04:aa:6a:50:11:a2:9c:fa:
                    c3:9c:c7:fe:bd:ac:2f:91:0b:69:8e:c7:12:ed:e1:
                    9d:bf:87:42:f5:8d:1f:78:09:72:eb:9b:6a:47:13:
                    e3:15:2d:bb:67:0b:42:e1:93:8b:21:48:9e:c8:00:
                    ae:44:da:ec:24:62:40:2b:91:cf:a5:db:2e:ed:1c:
                    97:c2:92:7f:a6:f3:71:e7:70:0d:f2:97:3a:05:e1:
                    46:09:92:7f:0a:91:70:d6:8b:78:56:b3:d0:0f:07:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:1E:90:E6:B2:A8:76:35:BD:33:74:96:1B:2A:F2:8C:98:36:D1
            X509v3 Authority Key Identifier:
                keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:21:30:08:06:f5:a5:a9:2a:a8:7d:61:46:57:ef:bc:b8:e8:
         b6:27:de:54:11:bb:c6:6b:04:95:5a:ff:17:c0:20:95:88:5c:
         03:00:b3:45:72:31:f1:80:08:48:70:9f:c6:8c:3a:ba:3e:62:
         09:b4:af:94:e1:54:da:02:b3:c4:c2:c0:30:d5:eb:76:e5:26:
         11:05:39:11:22:5a:5d:da:ab:5e:af:9f:8d:c8:ad:26:61:70:
         22:5b:11:23:91:e4:b0:9f:f6:fc:8b:e4:a7:96:5b:72:2c:85:
         1f:a1:66:b7:37:b2:6d:d0:ec:6b:8b:c3:6f:ae:73:a3:3f:e2:
         10:e1:1f:4b:3e:c1:e3:1f:be:42:6c:a9:9b:06:0f:5e:6e:fb:
         c5:34:c0:0a:04:a6:df:da:55:fd:49:09:3a:33:9d:f8:08:74:
         df:a0:3f:35:c5:81:93:83:0e:57:5e:4d:46:b7:de:67:63:f7:
         ad:00:b0:32:e8:e5:2a:2f:a0:31:ea:c3:ce:b6:74:15:54:3f:
         d6:5d:23:ad:b1:41:02:4c:08:2f:df:82:49:7f:cd:9a:99:87:
         c4:f4:82:bd:a6:d1:93:38:08:f5:19:50:8f:7e:ee:6c:51:20:
         c5:18:87:30:9f:dd:14:96:99:13:db:19:66:f4:70:0d:0e:7d:
         30:4c:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:11:45 2026 by rpki-client