Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          xN6eZZLNEywY7jdQLJMIU4tAHIX1W00aEiAuScOJTx8=
Subject key identifier:   57:D3:D1:42:C0:CE:88:15:6A:95:42:35:12:CC:22:3E:18:87:E7:E5
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019EB7339517AF3DF4D5D12126B1932123AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          016E
Signing time:             Thu 11 Jun 2026 15:01:11 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:11 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:11 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: Q/2WVUMjieExMUpQWhJP/R1V1UYC9MHVSH/ovljXJMI=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:95:17:af:3d:f4:d5:d1:21:26:b1:93:21:23:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Jun 11 15:01:11 2026 GMT
            Not After : Jun 12 15:01:11 2026 GMT
        Subject: CN=57d3d142c0ce88156a95423512cc223e1887e7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:66:ee:61:9f:49:0e:43:0c:17:5d:f1:e1:
                    59:8d:42:7f:3d:5d:79:ab:28:ee:41:01:3a:39:a8:
                    64:c6:06:7a:65:ce:79:b7:6d:07:a0:16:7c:b6:4d:
                    2c:f4:d0:6d:10:56:10:3b:b0:27:7b:1c:31:27:32:
                    6c:5f:a4:0f:c5:55:cd:fb:82:6a:74:29:9a:ba:48:
                    c5:9f:e7:a0:02:ee:23:33:01:8e:9a:35:c1:60:b3:
                    54:b5:18:9c:b0:07:aa:ca:87:6b:3a:41:5a:55:4a:
                    ee:33:aa:73:24:21:34:ad:22:0f:aa:e0:b6:fe:b7:
                    b3:bb:98:16:34:4e:65:c5:86:63:74:23:08:3c:cf:
                    4b:8a:44:16:93:ba:05:f4:42:36:3d:a3:12:f9:cc:
                    68:ae:47:af:1f:08:d7:d2:da:d6:1a:3f:8c:5d:21:
                    9f:52:e8:f4:3c:00:79:17:34:90:02:1c:65:9b:0a:
                    e4:0d:82:57:1e:63:29:97:57:91:fe:4e:41:a5:85:
                    de:1c:1d:8a:d1:a0:58:32:43:aa:0b:ee:27:da:5b:
                    5d:2d:36:0c:c7:6f:87:d0:c3:e0:8b:d2:ed:79:9e:
                    bf:b1:61:3f:17:4b:a8:15:1b:71:9f:93:78:e4:24:
                    b4:b8:13:0a:93:e5:d7:69:c3:a7:96:a7:71:9e:df:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:D1:42:C0:CE:88:15:6A:95:42:35:12:CC:22:3E:18:87:E7:E5
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:bc:a1:02:33:23:ad:d3:7f:e8:c6:9e:ab:e8:2a:a1:da:
         b6:63:e5:0c:b3:22:02:80:ce:29:e9:ca:ef:bf:40:2c:05:05:
         f3:67:fe:87:9e:71:2f:19:84:09:e4:9d:ca:11:55:a5:7d:4c:
         97:11:2f:fe:ae:86:a7:34:aa:03:b9:d1:92:68:28:c6:73:1f:
         c3:5f:e6:19:1b:e5:4b:a2:6a:65:72:9d:3c:a7:cf:c6:35:5a:
         50:9b:5d:64:23:d4:bb:4b:37:ec:7c:8b:2a:2a:10:05:85:7f:
         52:bc:a8:c9:5a:ee:c3:64:06:80:54:8a:a0:71:f4:b8:c3:83:
         de:3f:66:8f:ac:5b:cb:65:ec:af:87:9f:c7:eb:f6:5e:92:25:
         35:a9:2c:72:67:f9:36:cb:c4:57:49:13:f7:f5:8b:4e:44:21:
         94:8e:82:f9:23:a9:dc:61:9d:44:da:85:8b:a1:d2:57:c5:76:
         af:98:42:28:d8:6e:49:b8:29:53:ea:c2:bc:7a:28:23:82:79:
         0c:b2:19:95:9b:64:5a:41:3a:b0:66:e7:18:9c:e7:bc:8f:02:
         9c:5e:64:0e:1a:10:f1:11:02:6b:95:9c:e1:dd:da:04:98:e5:
         3c:37:40:44:0c:70:00:47:ae:56:3d:64:80:96:e0:58:1c:ac:
         85:6a:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:16 2026 by rpki-client