Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File:                     5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier:          wml1F5P1gBjS08GTElo1d78m6O+/UXG1RRHiMSzXk1E=
Subject key identifier:   2E:69:1A:49:92:8C:0B:14:91:F8:1C:B9:64:BB:A8:C9:9A:BC:42:40
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer:       /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial:       019E3004934C9EAB74B7C12A515EE8954C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number:          09D0
Signing time:             Sat 16 May 2026 09:01:06 +0000
Manifest this update:     Sat 16 May 2026 09:01:06 +0000
Manifest next update:     Sun 17 May 2026 09:01:06 +0000
Files and hashes:         1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: NDB8o3HF+Orj4x8DEgWba9Nyrn6xuAq0JNTGbmbxnWY=)
                          2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:93:4c:9e:ab:74:b7:c1:2a:51:5e:e8:95:4c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
        Validity
            Not Before: May 16 09:01:06 2026 GMT
            Not After : May 17 09:01:06 2026 GMT
        Subject: CN=2e691a49928c0b1491f81cb964bba8c99abc4240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:59:17:ef:64:4e:ad:f4:82:4d:97:6f:4d:
                    78:3b:bb:3a:f6:5e:fb:8b:87:92:7f:2e:db:5c:17:
                    bd:8b:88:fb:dc:bd:fe:2a:f7:f3:92:7a:c1:7c:1e:
                    99:fe:d4:e1:49:9a:75:74:a2:93:ac:ba:3f:16:22:
                    13:f6:2b:b9:47:ce:64:73:5a:b3:aa:57:d7:fb:73:
                    36:b0:4c:c9:e3:9c:5a:c8:da:b5:26:74:e5:c0:fa:
                    b0:c5:4c:72:09:a6:6d:b7:1a:bc:c4:a9:2c:1b:cf:
                    1f:d4:08:ff:1c:ca:b5:0b:3e:35:77:12:7f:6b:81:
                    37:2e:48:05:f0:56:9d:2a:a1:14:e4:69:06:91:40:
                    9a:8a:2f:6f:2c:a0:4a:b7:81:10:dd:82:5b:bf:b9:
                    65:5a:db:8b:0f:04:e3:77:ec:b3:b5:a3:06:70:28:
                    7e:d7:62:e6:ac:ac:aa:9c:7c:2a:32:8d:14:44:5d:
                    c8:a7:3e:cd:a5:7c:a0:5f:82:91:d8:c8:9f:fd:cb:
                    2b:4b:5e:51:1f:0e:d8:a2:dd:97:17:1b:cd:2f:ac:
                    c3:c9:74:73:a6:c9:79:8c:63:aa:82:dd:1e:fd:f4:
                    6b:68:84:ca:4d:79:37:d6:1c:eb:8d:76:45:ca:b1:
                    6a:29:72:ac:e9:1f:44:bc:1e:86:bd:15:95:86:19:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:1A:49:92:8C:0B:14:91:F8:1C:B9:64:BB:A8:C9:9A:BC:42:40
            X509v3 Authority Key Identifier:
                keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1b:d3:4f:24:4d:79:14:16:94:6b:bb:a9:76:1d:16:dc:ac:
         ab:56:a6:6b:a0:48:7b:1f:b8:70:3a:33:60:88:16:bd:f2:0e:
         8a:6d:50:cf:63:51:e6:94:ee:9a:3f:14:8a:e6:9a:27:79:0d:
         b8:e2:ed:03:20:44:9c:d4:05:c2:76:1b:c6:62:c7:85:6a:8e:
         0a:a2:b6:c0:d1:4f:91:b4:4c:85:67:5f:87:b2:b0:77:22:9b:
         b3:9d:5a:1c:85:41:f0:30:c4:a1:7c:74:e5:a7:37:02:b9:e0:
         5c:ee:30:ad:69:7a:34:6e:57:c3:d1:75:4b:64:74:81:61:ec:
         9d:c3:73:39:da:c2:70:fd:23:d8:0a:57:11:74:07:55:21:7c:
         22:61:95:73:70:41:79:b7:68:bc:76:ef:7d:d5:5e:c7:35:0e:
         c6:ac:c8:84:2f:ab:de:b5:df:cd:34:c3:d4:7b:18:60:cc:bb:
         05:b4:bb:e3:f0:db:81:96:65:29:02:95:df:99:e7:23:8c:de:
         a8:9a:2c:3e:fd:71:7e:94:86:67:4b:7a:6e:9a:db:5b:59:e3:
         23:7d:18:87:2f:0c:38:e8:f3:88:a3:4d:f3:b5:88:ae:c0:01:
         2b:10:71:47:8e:f3:1a:f9:5c:c5:a3:7c:aa:2c:0a:2e:f9:6b:
         be:b2:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:47 2026 by rpki-client