Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          CMqwHQcS9cybOx0c3S5xl9iDn6r+nZwvfY5uMtMCxUk=
Subject key identifier:   E0:A4:95:15:70:AB:8F:73:7F:F5:38:C8:E9:1C:D0:55:DE:96:44:CE
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       019E30721A10A26B4010DD74771814446D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          16DE
Signing time:             Sat 16 May 2026 11:00:44 +0000
Manifest this update:     Sat 16 May 2026 11:00:44 +0000
Manifest next update:     Sun 17 May 2026 11:00:44 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: 8ynmI8H0MQ1tuHyp05Ynlrwx8/DO6CPCrVaTM/OSgWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:1a:10:a2:6b:40:10:dd:74:77:18:14:44:6d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: May 16 11:00:44 2026 GMT
            Not After : May 17 11:00:44 2026 GMT
        Subject: CN=e0a4951570ab8f737ff538c8e91cd055de9644ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:16:6f:cb:9b:15:76:37:54:cc:7b:1f:51:
                    6e:c3:9b:37:ee:20:92:18:e0:d1:70:70:40:1e:12:
                    3c:67:87:d5:9b:cb:0b:c1:31:a4:02:35:4f:5b:15:
                    13:be:22:03:a4:62:08:d6:75:22:76:7a:e8:97:b9:
                    55:3a:55:ea:d5:87:b4:b8:2a:2a:4e:fd:c7:ec:cd:
                    24:77:cb:3d:01:55:67:0d:7a:8f:fb:b9:10:d8:fa:
                    eb:63:db:2e:bc:3f:08:65:ec:83:06:1d:65:68:20:
                    76:e3:9a:81:8a:37:58:4e:09:48:6c:be:b3:34:29:
                    d2:c7:91:db:63:50:7a:4c:4f:2b:47:d5:51:a2:9d:
                    af:7d:3e:45:29:df:82:77:df:2e:63:dc:3d:8e:88:
                    3d:9a:12:d3:0d:c2:ef:5a:71:57:cd:2b:95:03:58:
                    0b:ef:b8:27:bc:4e:d1:2a:f1:05:e0:ba:1e:bf:9c:
                    b4:d9:05:22:28:15:4a:cf:5f:5b:5f:38:b9:7d:d0:
                    ea:2b:46:aa:7c:8c:18:d0:19:1a:45:08:3c:ae:82:
                    07:3b:34:1a:14:7a:a5:fa:a7:7a:e0:fa:43:53:de:
                    e6:d2:14:c1:44:49:74:44:66:e0:11:76:15:bd:15:
                    bb:a3:6d:22:f8:a7:e6:b5:53:9d:c5:ee:1d:d4:16:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:95:15:70:AB:8F:73:7F:F5:38:C8:E9:1C:D0:55:DE:96:44:CE
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:e6:e2:c1:26:2b:e6:cd:00:c5:71:9e:0a:fe:c4:ac:c8:
         fd:65:9f:1b:39:fc:a8:99:fb:17:01:45:6f:e4:2e:c3:c9:a8:
         31:fe:00:9e:35:a2:e7:2d:5d:1c:33:fb:05:ae:87:f7:87:91:
         78:ab:e0:00:3c:2c:87:72:e3:4a:d5:1c:50:fd:9b:09:6c:0e:
         5c:43:cb:45:c8:00:ae:50:32:a3:96:4b:47:fc:9e:a7:cf:af:
         57:02:c7:b3:96:8e:da:80:cb:4a:d6:89:56:2c:88:83:a7:c3:
         52:ec:90:0a:4c:42:df:f6:fe:a3:c8:f4:59:22:2f:34:38:ac:
         20:84:16:fd:5d:ea:e1:7a:79:a9:58:2a:06:b7:d3:6b:c2:d2:
         96:6e:fc:85:cc:a7:13:ec:02:fc:48:2a:35:b8:15:19:cf:7b:
         4d:26:cc:ff:65:59:9d:c7:e3:d4:cb:96:7e:4f:c0:65:87:5e:
         cf:ef:40:4b:ac:66:aa:1c:ba:25:43:bc:98:95:7a:62:97:5b:
         3c:6e:cf:51:d7:65:3a:64:7e:03:0d:56:b7:6f:ec:7e:69:82:
         7e:24:d2:0d:3c:a4:72:34:22:08:8c:a6:49:2a:b7:ec:62:fb:
         1b:22:d1:d8:f4:1b:08:96:23:b9:8c:8f:76:9e:7d:09:ff:89:
         c2:64:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:05 2026 by rpki-client