Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File:                     5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier:          NcIRWuKh+RnXwJTiex7gLQFE3pXvWrg97TnIp/sgOco=
Subject key identifier:   78:8B:DD:CD:53:E8:0D:6A:70:F7:61:14:B6:59:D7:01:50:D6:C4:31
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       019E30E09341753BF1D3FA32913397AF842F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:01:24 +0000
Manifest this update:     Sat 16 May 2026 13:01:24 +0000
Manifest next update:     Sun 17 May 2026 13:01:24 +0000
Files and hashes:         1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: XTw1/11y6OH8HCrRTSFgZPffXf8QltG5GIwqJ7YSRzg=)
                          2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:93:41:75:3b:f1:d3:fa:32:91:33:97:af:84:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: May 16 13:01:24 2026 GMT
            Not After : May 17 13:01:24 2026 GMT
        Subject: CN=788bddcd53e80d6a70f76114b659d70150d6c431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:92:0d:ff:59:0f:f7:20:12:5c:09:b6:9d:
                    fd:f0:9f:0b:f5:3c:44:e1:7f:52:5f:48:4f:c7:67:
                    29:5a:27:bf:56:3f:87:eb:31:07:e9:ba:17:0e:5a:
                    cb:b9:df:0e:66:fb:62:57:77:5f:eb:d2:d9:a0:e2:
                    d7:03:97:80:44:e4:68:b6:c3:97:e7:a2:36:b9:84:
                    1d:6e:b2:b7:42:26:08:78:ef:4e:90:42:f4:ef:8a:
                    0d:2a:b5:6d:2e:4f:1c:66:ca:67:63:44:5c:92:0d:
                    de:50:08:53:ff:00:c2:da:4d:8a:86:23:f8:37:ee:
                    50:71:4a:ee:16:b4:5d:c5:83:a8:19:02:6b:7d:de:
                    b6:03:84:ec:62:c3:8b:db:6b:97:25:93:9a:07:97:
                    dc:94:74:b1:a2:de:3a:a3:dc:4f:a1:b0:26:86:b4:
                    cc:93:c6:ce:d5:99:51:2a:1a:2a:a1:a3:6c:ef:e0:
                    ba:9a:5c:4b:f7:ea:29:32:c1:b5:f7:df:90:a3:9f:
                    e0:9d:96:38:be:3b:f2:51:a5:6c:47:37:b3:3f:11:
                    a1:1a:0e:8e:b3:b8:57:46:fc:21:a4:26:bb:cd:ca:
                    f7:49:1e:48:9d:33:48:67:d7:4e:3a:78:7c:ca:0f:
                    1c:73:a9:13:fd:69:6d:ae:f0:01:48:01:5b:af:5a:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:DD:CD:53:E8:0D:6A:70:F7:61:14:B6:59:D7:01:50:D6:C4:31
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:53:ee:aa:10:0e:b3:58:71:67:c6:2b:b5:13:b9:1c:f2:
         06:a7:d4:d5:76:12:7f:22:b2:2b:54:40:19:ff:94:25:d6:47:
         64:73:5f:a3:e4:e2:c6:37:7c:46:ec:12:4a:dc:c1:71:18:34:
         0c:c4:3a:fd:3b:bc:b0:ec:0f:7f:ad:89:92:fd:db:9e:76:5c:
         29:44:1e:f9:14:e8:c9:98:6f:73:6d:d4:66:2e:30:8b:43:bd:
         c2:c1:10:35:e7:8e:b2:4d:3f:1e:44:51:de:1c:82:64:1c:97:
         41:4a:59:e4:39:0b:5f:ec:40:25:94:28:eb:b5:76:25:2c:56:
         5a:b2:2f:b5:10:52:16:71:57:2b:d6:2e:66:77:5e:67:e3:c9:
         97:1c:90:c2:8c:c6:d8:52:cf:c5:82:5c:f8:46:8b:97:6d:94:
         6e:8f:6e:32:bd:4f:0d:30:1c:bf:95:04:94:95:ba:e1:d2:18:
         6a:d5:a4:4d:ca:c8:7c:ef:fd:40:9e:79:3a:86:15:29:83:40:
         ec:97:b4:8b:59:c7:09:08:d3:2a:03:aa:49:04:b2:85:eb:f4:
         29:d5:90:84:98:41:d3:3e:86:32:09:99:f9:74:25:ff:8f:ea:
         34:2b:2d:92:cb:eb:cd:e8:6a:71:7c:91:03:ee:f9:73:12:46:
         7f:33:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:44 2026 by rpki-client