Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File:                     5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier:          O6fNcWHkkJtApux7hwwBTkq8O3/gb5pszQspf28RrqM=
Subject key identifier:   B0:48:A6:EB:9B:F7:23:9D:62:A4:A2:20:1E:8A:1B:87:2B:D1:F4:40
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer:       /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial:       019E314E1BF098998C74FC881BC6D77D5EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number:          15A1
Signing time:             Sat 16 May 2026 15:01:02 +0000
Manifest this update:     Sat 16 May 2026 15:01:02 +0000
Manifest next update:     Sun 17 May 2026 15:01:02 +0000
Files and hashes:         1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: 1vZzx+ledzAoM5oO441SFIhPpr2uR4mQAIqWvnGUawU=)
                          2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:1b:f0:98:99:8c:74:fc:88:1b:c6:d7:7d:5e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
        Validity
            Not Before: May 16 15:01:02 2026 GMT
            Not After : May 17 15:01:02 2026 GMT
        Subject: CN=b048a6eb9bf7239d62a4a2201e8a1b872bd1f440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:71:db:8d:28:49:73:51:97:b9:5a:8e:a3:
                    4b:1b:31:eb:ce:6d:34:19:38:02:da:5f:5d:54:91:
                    a9:fd:6e:67:7a:90:30:f5:38:d5:df:2a:e5:0c:e1:
                    0b:4d:32:2a:7d:4d:fe:cb:94:fd:0b:bb:2a:93:77:
                    82:bf:ba:8f:1f:cc:55:e9:ec:ed:91:01:22:c9:4d:
                    fb:1f:70:3b:e3:e1:39:7d:fd:af:6a:7d:a8:55:fd:
                    7c:4e:99:07:ba:3a:2e:7a:c4:11:1c:c1:02:11:80:
                    ee:cb:2c:d6:8b:50:59:87:82:74:35:a8:a5:c4:52:
                    79:3c:87:bc:ae:bc:44:a8:0f:6f:40:55:bc:74:00:
                    ed:4b:e6:9a:95:85:2a:c7:ec:a2:8e:f2:c5:35:e8:
                    37:6b:a1:14:30:d6:f6:cf:bf:50:e6:d9:01:c2:16:
                    6a:a5:74:b9:1b:c6:e6:57:35:e6:99:e3:8b:90:dd:
                    cf:f0:37:7e:69:ef:a8:da:1b:d0:64:88:ee:d8:8e:
                    81:b5:29:d7:9f:62:5f:30:15:be:26:90:18:2c:ce:
                    f5:46:89:ef:f9:05:44:d3:12:cf:4d:d5:14:c8:8f:
                    6f:4b:95:4b:5b:86:87:a2:48:e8:f6:81:ea:11:e5:
                    83:9d:be:4f:d8:dd:6a:9f:1a:7d:b8:c7:0c:aa:ca:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:A6:EB:9B:F7:23:9D:62:A4:A2:20:1E:8A:1B:87:2B:D1:F4:40
            X509v3 Authority Key Identifier:
                keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:ab:89:b0:7d:f6:79:cc:cc:9a:6a:f6:96:de:31:bc:34:
         4f:9a:8a:52:7f:ad:94:4b:5b:b0:b4:c4:53:be:ee:99:f1:6d:
         d5:95:ea:9a:2a:d7:27:1d:64:1d:14:a5:54:61:bf:bb:a2:8d:
         59:69:d6:95:6b:f7:36:32:33:4c:4c:cf:fa:12:fc:b9:14:7e:
         ec:88:4c:1c:ff:e1:ab:7d:80:73:77:f5:16:2f:64:e1:ca:7d:
         80:38:5f:7c:a1:6b:a3:fe:e8:e0:35:cf:75:ff:5f:6b:c7:d4:
         4a:a9:1c:97:ff:87:9b:84:e8:ef:27:e6:4d:95:aa:35:6b:72:
         37:7e:75:4b:f5:67:e7:9b:a0:77:44:9a:a0:88:9c:7b:2e:34:
         c1:87:c5:8c:be:73:9e:24:0c:9a:9c:36:4f:62:d5:00:be:e3:
         ef:a0:f5:5f:a9:dc:f7:70:a4:2d:a0:0f:b4:13:75:f5:0d:af:
         c8:46:f8:83:14:a9:fb:b5:46:4b:04:d7:84:11:ed:71:88:b9:
         3b:a9:88:73:76:8d:43:2b:1e:ff:92:20:53:c2:b8:02:18:70:
         ad:e6:05:c9:8f:bd:07:09:cc:c1:28:69:d5:58:ac:34:55:78:
         10:6d:16:3d:df:de:31:cc:2b:7a:8a:e9:7e:34:a7:07:7a:31:
         71:17:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:58 2026 by rpki-client