Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          /vXhYP5TYYDaaROykiMQt0P9bZrJZc2jwGtAZbVOaog=
Subject key identifier:   EA:2C:5D:F8:AB:30:7C:D0:E5:96:54:6E:18:CE:20:EF:3F:1C:7D:FF
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       019E303B563FDD1A92CEDA470F579F066E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          1461
Signing time:             Sat 16 May 2026 10:00:55 +0000
Manifest this update:     Sat 16 May 2026 10:00:55 +0000
Manifest next update:     Sun 17 May 2026 10:00:55 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: UoaAysQ26DjwPN15Trb706XTvdELDJun+jSPV4XUDI8=)
                          2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:56:3f:dd:1a:92:ce:da:47:0f:57:9f:06:6e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: May 16 10:00:55 2026 GMT
            Not After : May 17 10:00:55 2026 GMT
        Subject: CN=ea2c5df8ab307cd0e596546e18ce20ef3f1c7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:79:50:d5:4f:aa:f9:e8:18:c5:93:1a:c6:
                    27:98:01:70:c5:67:8b:09:72:9e:91:0b:02:7e:90:
                    e7:6e:e9:4a:87:28:9a:19:64:0f:45:40:e5:cd:55:
                    3e:de:e1:0c:df:79:19:49:ce:0d:fd:b4:ee:48:5d:
                    92:72:55:75:02:b2:00:15:68:5d:85:ec:38:14:17:
                    d5:7c:c1:14:72:03:80:1c:e1:05:24:6f:26:f6:7d:
                    6d:f3:6f:e2:83:4d:35:cc:c3:8f:cf:b5:ee:6f:0e:
                    2f:63:ed:c4:14:a3:7e:dd:fa:e8:e4:52:49:51:cb:
                    20:d3:d1:26:8d:15:4f:b7:ec:84:3d:34:43:72:33:
                    49:ca:49:c3:05:23:c6:2e:83:67:65:4f:1c:78:10:
                    9d:58:79:41:bd:3b:d3:8d:80:1b:c3:9b:0e:75:ba:
                    29:d7:e3:46:1f:f0:f9:2e:6d:df:0d:6b:4a:97:f5:
                    f1:6b:16:77:52:b1:73:4d:de:ea:46:77:ba:8c:25:
                    6e:f1:9b:90:be:c6:55:35:0f:53:1d:ff:60:71:d0:
                    d0:60:3d:d7:15:39:d6:d7:26:84:f3:7b:b4:b6:0c:
                    63:5b:6e:53:07:75:4f:76:3b:24:2b:0e:35:d9:27:
                    05:d0:93:fb:ba:36:ab:42:78:f4:78:3d:dc:c2:92:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:5D:F8:AB:30:7C:D0:E5:96:54:6E:18:CE:20:EF:3F:1C:7D:FF
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:da:ce:d0:97:2c:6a:a8:88:db:49:39:52:73:00:1d:60:05:
         7b:38:35:d7:41:c2:00:7b:9f:cc:f3:d3:35:fc:f7:9a:26:50:
         63:56:b1:56:a7:2b:29:33:ac:49:98:ae:29:74:54:89:a4:1c:
         88:4d:b7:a4:5a:5e:d4:d9:1e:a4:60:93:7d:ae:2e:aa:61:2f:
         e6:de:d2:c0:c1:95:e8:64:f6:80:32:37:bd:50:8c:1e:72:fe:
         86:43:1f:e4:93:3a:8f:8b:e8:92:61:2e:dd:a1:b2:3c:5b:7e:
         80:dd:b9:25:9d:bf:25:e0:f5:f8:e4:c1:7b:30:c5:37:93:7d:
         96:2e:b3:06:a7:a5:36:a6:2d:ee:34:07:3f:90:77:f5:99:00:
         22:d8:5c:ed:e6:ce:28:b4:16:0c:2a:52:77:38:9f:e9:63:4e:
         e2:1e:a7:c4:d4:b8:c7:85:be:94:1e:fe:1b:c6:a4:37:58:c7:
         af:61:88:46:bb:82:7c:61:86:14:14:49:a6:de:f6:49:ee:ee:
         39:03:77:03:c4:d1:c0:44:a4:15:e1:7d:1b:e9:59:a7:8f:a0:
         66:7e:60:ce:dd:79:3f:14:af:b5:e9:4f:7d:98:3c:c1:a4:5f:
         bc:36:5e:74:eb:66:93:b7:9f:d7:f1:da:cd:47:d1:16:35:91:
         40:da:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:06 2026 by rpki-client