Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File:                     l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier:          3kHoD8nk5RCI9nD4bnKdy95GcvXnxsZfoWhAS3JBTlQ=
Subject key identifier:   E8:5C:57:9F:18:35:0A:CE:05:51:9F:4C:30:5C:1C:75:8B:C3:4F:58
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer:       /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial:       019E8D5B7B216DC4C2A89017071C4567A2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number:          05BD
Signing time:             Wed 03 Jun 2026 12:00:43 +0000
Manifest this update:     Wed 03 Jun 2026 12:00:43 +0000
Manifest next update:     Thu 04 Jun 2026 12:00:43 +0000
Files and hashes:         1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
                          2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: 9bHhirTOV1OpNNAV+HY0KQGxpT6yxHx+LYhxh12Jpec=)
                          3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:5b:7b:21:6d:c4:c2:a8:90:17:07:1c:45:67:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
        Validity
            Not Before: Jun  3 12:00:43 2026 GMT
            Not After : Jun  4 12:00:43 2026 GMT
        Subject: CN=e85c579f18350ace05519f4c305c1c758bc34f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:bf:93:cb:6b:61:81:39:de:d1:14:22:5c:
                    99:41:60:1d:63:74:bb:ca:57:8e:9b:9a:f8:e7:fa:
                    03:dc:51:f0:5e:3d:f1:ea:b9:01:bf:35:90:d5:ef:
                    6a:8d:90:49:5c:53:a4:79:37:cf:d6:ae:1b:6d:93:
                    09:c7:ae:01:52:f2:96:a8:04:27:27:81:ae:cf:5e:
                    f2:bd:9d:d6:c2:4b:36:b0:3a:01:e2:42:af:7c:24:
                    99:35:9e:eb:66:d2:fe:c4:d9:32:10:0a:0e:7c:d6:
                    db:f1:c7:11:51:ff:d5:42:59:d3:19:29:4a:59:74:
                    ba:53:8e:30:f5:ce:f4:6b:1d:89:14:46:1e:df:d0:
                    9c:17:fd:95:dc:f0:cd:71:68:b5:3b:ad:97:a2:b4:
                    1c:75:63:04:6f:d3:24:79:26:0c:d7:86:b6:df:fe:
                    2e:14:2c:39:4b:99:a0:50:05:f3:73:96:79:7c:91:
                    6b:9f:d5:6f:32:28:1b:8e:3a:4c:bf:78:b5:15:55:
                    41:a6:6a:27:b0:c0:ff:d4:6e:62:ea:13:bd:9f:43:
                    a8:b6:70:64:60:18:b7:18:de:51:70:25:dd:e5:11:
                    6d:f0:1e:88:3f:f5:65:2f:cd:45:87:e4:fe:ba:81:
                    79:21:e7:c9:19:dd:65:89:7d:c0:b3:d7:9c:45:56:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5C:57:9F:18:35:0A:CE:05:51:9F:4C:30:5C:1C:75:8B:C3:4F:58
            X509v3 Authority Key Identifier:
                keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:bf:5e:88:87:87:a0:a8:2c:6d:36:eb:ef:9a:22:40:80:
         c6:13:42:54:ae:d7:cb:44:6e:38:fd:01:30:35:38:30:72:cb:
         9f:9e:97:8b:28:7f:fa:0c:1f:38:d0:93:31:88:5d:00:a1:21:
         a3:76:22:e3:05:e9:9e:e3:21:31:87:e5:fb:ea:a9:de:b0:b2:
         08:78:7f:7a:1e:00:ae:9d:ac:79:e2:f8:89:fa:84:c9:17:73:
         6b:78:21:fb:5d:bf:45:33:a4:52:a7:54:8e:0b:34:ae:f6:d0:
         5f:e8:6f:ab:d5:a1:aa:44:2c:4c:14:bf:29:ff:c2:a9:f3:e1:
         e3:08:2b:59:d9:a2:93:ce:0b:d2:6b:9e:af:9d:04:ab:24:18:
         fe:60:2b:fb:db:2f:d3:fa:23:72:d2:9f:a7:1f:0d:47:20:be:
         58:63:7a:20:04:e4:16:fa:17:4e:17:6f:26:4a:a6:90:2d:a2:
         08:8d:f3:07:eb:f3:95:77:4a:8a:75:93:55:dd:39:54:8f:32:
         86:22:24:63:61:87:b2:98:1e:14:c0:27:ce:9d:67:01:97:52:
         0e:57:50:4e:02:3a:9e:bb:e2:79:47:81:e8:ca:1c:ff:f5:c2:
         37:3c:e5:ca:72:46:66:ef:29:0a:3f:b6:df:44:65:1a:98:99:
         f5:15:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:51 2026 by rpki-client