Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          O/iHhq8D7cjb3LeCzKWFUSL7KU2EVR35MuHQ6ZZeZEU=
Subject key identifier:   31:55:F4:C0:B1:B0:F0:BF:B8:8A:B6:61:44:00:35:1F:05:34:43:9D
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       019E30DFEA5118A2E1E1C5FDFCA8716AACEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          136B
Signing time:             Sat 16 May 2026 13:00:41 +0000
Manifest this update:     Sat 16 May 2026 13:00:41 +0000
Manifest next update:     Sun 17 May 2026 13:00:41 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: fYdL11LZ441x2g5E78/g25fDwElQ9UIJj/G9xydR2nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:ea:51:18:a2:e1:e1:c5:fd:fc:a8:71:6a:ac:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: May 16 13:00:41 2026 GMT
            Not After : May 17 13:00:41 2026 GMT
        Subject: CN=3155f4c0b1b0f0bfb88ab6614400351f0534439d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:9f:97:2a:43:d4:ab:da:2d:28:00:98:c8:
                    56:74:c3:c3:26:9b:19:07:e4:76:e3:e3:64:c0:b9:
                    76:ee:6d:35:5a:fa:f0:33:fd:91:b4:f6:1e:28:d6:
                    4a:eb:2f:b9:3b:49:42:46:ff:2d:78:29:0a:cb:05:
                    46:2e:d2:3a:e6:b5:df:78:b7:dd:5e:aa:29:6a:6f:
                    55:25:60:c9:3f:ae:98:a0:8b:fe:54:8a:88:6c:7c:
                    4f:ce:3e:33:bf:d2:18:86:ca:5a:ec:0b:5b:19:3d:
                    10:2d:3e:45:6c:0d:10:43:24:a8:51:ae:d8:93:59:
                    98:4e:aa:a5:b0:dd:cd:be:78:c0:10:2a:2c:31:81:
                    0a:97:da:4a:76:21:03:e6:20:20:91:d5:f4:95:91:
                    ba:2d:2d:81:4e:e6:41:c8:37:26:c0:b8:63:19:16:
                    4f:17:56:65:28:bc:72:aa:eb:b2:17:2b:a7:c4:5c:
                    f7:89:f8:da:1f:44:93:ff:c7:ff:a1:32:b6:de:e6:
                    15:6a:c2:37:ba:ea:56:9b:31:08:d6:84:07:61:34:
                    33:93:f5:d0:10:28:00:ea:2c:fd:2f:d9:72:d0:54:
                    41:c4:d4:07:d1:a9:42:cd:d7:ad:3a:8f:a7:98:17:
                    74:40:dc:32:8d:b8:c9:2a:a1:e7:1e:0a:e5:f9:03:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:F4:C0:B1:B0:F0:BF:B8:8A:B6:61:44:00:35:1F:05:34:43:9D
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:a0:95:0c:74:05:bf:34:2c:08:dd:14:cd:21:a3:a8:76:
         0f:6a:c1:53:97:49:47:27:8f:d1:f1:02:90:44:78:44:d6:67:
         86:66:f7:58:b2:a3:93:02:ef:31:c2:53:95:bd:03:04:e6:83:
         ac:13:95:8e:d6:e5:cb:94:16:e7:45:ec:c5:b9:58:05:9f:73:
         b0:0d:a2:53:5d:07:d3:44:bd:ca:fe:b2:58:bd:e8:2a:2a:04:
         45:13:fa:5d:34:e9:bd:44:be:bc:4c:5b:6f:45:9b:0e:ca:48:
         66:a1:96:8d:25:89:0e:e5:3d:d5:a7:c7:4d:25:76:bf:a2:bf:
         a8:8d:45:74:ed:d3:d6:f7:aa:c3:b9:e4:2a:bc:19:bd:ef:1b:
         7e:dc:96:e7:d8:c5:a4:1a:b9:1d:a0:33:66:1d:41:71:7b:39:
         c0:cf:f0:cb:07:e4:29:01:01:a4:b6:60:0c:96:a0:b2:27:e6:
         94:0c:d5:91:13:7a:df:0e:c7:ca:67:6c:df:e2:3c:b9:97:ad:
         58:9d:e8:be:9c:5f:58:31:74:a8:b9:02:03:9e:11:3e:34:16:
         f5:30:be:21:0e:ef:33:50:ac:65:4d:78:24:f1:7b:85:a9:57:
         16:81:21:77:ce:d7:b6:8b:29:c2:fe:b3:10:da:79:f5:69:af:
         54:c8:c5:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w3+pRGKLh4cX9/KhxaqzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTcwZmI5NDZkYWY5YjllZmUzYjYwOWYyODljYWUwMTlm
YzYxOGMwHhcNMjYwNTE2MTMwMDQxWhcNMjYwNTE3MTMwMDQxWjAzMTEwLwYDVQQD
EygzMTU1ZjRjMGIxYjBmMGJmYjg4YWI2NjE0NDAwMzUxZjA1MzQ0MzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoqflypD1KvaLSgAmMhWdMPDJpsZ
B+R24+NkwLl27m01WvrwM/2RtPYeKNZK6y+5O0lCRv8teCkKywVGLtI65rXfeLfd
Xqopam9VJWDJP66YoIv+VIqIbHxPzj4zv9IYhspa7AtbGT0QLT5FbA0QQySoUa7Y
k1mYTqqlsN3NvnjAECosMYEKl9pKdiED5iAgkdX0lZG6LS2BTuZByDcmwLhjGRZP
F1ZlKLxyquuyFyunxFz3ifjaH0ST/8f/oTK23uYVasI3uupWmzEI1oQHYTQzk/XQ
ECgA6iz9L9ly0FRBxNQH0alCzdetOo+nmBd0QNwyjbjJKqHnHgrl+QPG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFV9MCxsPC/uIq2YUQANR8FNEOdMB8GA1UdIwQY
MBaAFBOXD7lG2vm57+O2CfKJyuAZ/GGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMt
MzdiNjFlYzJjMGQ1LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMtMzdiNjFlYzJjMGQ1
LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8iglQx0
Bb80LAjdFM0ho6h2D2rBU5dJRyeP0fECkER4RNZnhmb3WLKjkwLvMcJTlb0DBOaD
rBOVjtbly5QW50XsxblYBZ9zsA2iU10H00S9yv6yWL3oKioERRP6XTTpvUS+vExb
b0WbDspIZqGWjSWJDuU91afHTSV2v6K/qI1FdO3T1veqw7nkKrwZve8bftyW59jF
pBq5HaAzZh1BcXs5wM/wywfkKQEBpLZgDJagsifmlAzVkRN63w7Hymds3+I8uZet
WJ3ovpxfWDF0qLkCA54RPjQW9TC+IQ7vM1CsZU14JPF7halXFoEhd87Xtospwv6z
ENp59WmvVMjFxA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:18 2026 by rpki-client