Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          Su6c9KIbtiwU53BJrRl2/4OLKHV8X4IoGU7jCboDtoU=
Subject key identifier:   34:9C:2C:49:5E:50:55:19:99:A5:B0:E7:E2:D3:54:07:4F:DA:C8:E4
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       019E3005203512E302E6801BDFCAAD29D049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          18A0
Signing time:             Sat 16 May 2026 09:01:42 +0000
Manifest this update:     Sat 16 May 2026 09:01:42 +0000
Manifest next update:     Sun 17 May 2026 09:01:42 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: 9Y0bHHK3YEpH2C2KJDslaNnfanjjvRE6v/2ZnHSqrbA=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:20:35:12:e3:02:e6:80:1b:df:ca:ad:29:d0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: May 16 09:01:42 2026 GMT
            Not After : May 17 09:01:42 2026 GMT
        Subject: CN=349c2c495e50551999a5b0e7e2d354074fdac8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a8:4a:89:0f:1e:9f:dd:0d:2f:d6:8a:0f:f5:
                    89:77:e7:78:af:f0:d4:e7:04:d1:d5:82:99:64:b4:
                    c5:7a:cc:6a:97:d5:36:dc:56:50:11:18:0c:85:08:
                    15:1d:8a:3d:aa:84:3d:59:dc:06:97:f7:a1:bc:67:
                    9c:28:9d:e5:24:72:d3:8c:1c:95:41:dd:51:19:73:
                    b9:c7:7c:bd:9a:08:f9:71:60:0d:f3:d0:d9:a0:26:
                    16:ba:81:29:dd:a9:f3:9f:1f:24:cb:98:ce:cc:a3:
                    3c:fd:81:7b:39:a1:42:b5:f7:3b:6e:7c:77:a5:65:
                    cb:39:93:b5:6c:c7:00:4a:c5:26:9b:a9:5d:0f:dc:
                    b3:c4:20:96:aa:40:95:55:44:28:44:80:50:fd:ac:
                    44:0c:93:08:be:c0:52:73:27:ef:4b:50:6f:5f:81:
                    a6:5a:41:72:e6:d0:5e:43:ff:d8:2e:0c:7a:12:13:
                    a7:de:5c:f8:34:da:7f:bd:81:b0:36:6b:a5:c6:db:
                    29:bf:68:bf:f4:af:0d:ac:29:de:a7:d0:22:2d:3c:
                    1f:8c:0b:97:1d:13:cc:d4:2f:b7:2b:7d:ec:a4:8e:
                    c5:4c:56:ac:9e:27:a6:1b:48:02:f1:25:48:8b:3f:
                    48:95:d2:c6:61:d2:17:7c:43:75:c8:33:4b:28:b6:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:2C:49:5E:50:55:19:99:A5:B0:E7:E2:D3:54:07:4F:DA:C8:E4
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:71:4b:f2:1a:5a:41:56:84:fa:2b:58:22:a8:c7:79:6c:67:
         79:ca:64:0c:b9:b2:46:3f:f7:ce:21:fd:ad:27:ce:ea:1a:fb:
         ac:0b:99:21:4c:d8:1c:96:cf:dc:66:c7:3a:0c:32:c0:b7:98:
         7b:ed:bc:84:7e:71:14:78:31:37:d8:16:26:50:c0:80:4f:5d:
         d9:eb:85:6a:f1:80:58:5a:1f:2e:f0:5d:b4:b9:2c:60:09:85:
         f1:34:f3:08:7f:80:ea:01:6c:f2:0e:35:9d:9a:63:54:f2:f8:
         67:4f:89:7c:69:6d:d9:f6:66:04:1b:48:5b:a1:e9:32:ed:a3:
         4d:2b:41:0f:60:18:71:d6:5e:d4:7b:cb:72:6a:6c:bc:65:ce:
         83:06:6f:1a:4f:4b:f0:34:e6:e6:84:21:5c:dc:e3:8a:c0:02:
         bc:02:ab:34:2d:4f:ad:5c:54:42:62:4c:0c:3d:3f:33:a2:7f:
         83:c5:53:88:87:61:24:4c:8a:28:13:1a:82:53:9b:6e:60:8d:
         1a:6f:18:7b:ee:c4:f4:06:67:8f:15:1d:31:60:26:26:da:a7:
         47:c0:f6:4c:6b:ba:3d:ab:48:70:47:f5:15:94:16:03:17:dc:
         e8:d0:0f:09:9b:b5:4e:22:cb:df:0a:17:9b:b7:c5:cd:a3:65:
         79:ce:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:53 2026 by rpki-client