Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File:                     r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier:          Wj0WKNbKYSJeKs5jJgMbIOPK9R3qylsU4MTbP7vPCbs=
Subject key identifier:   7C:0A:8E:BD:44:77:B3:6F:B6:B5:69:05:0C:2C:BA:71:24:D5:BC:7D
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer:       /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial:       019E32982590AE9A9B9B22635950D3E2299A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number:          05EE
Signing time:             Sat 16 May 2026 21:01:32 +0000
Manifest this update:     Sat 16 May 2026 21:01:32 +0000
Manifest next update:     Sun 17 May 2026 21:01:32 +0000
Files and hashes:         1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
                          2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: O3W3hzW7H66DIvBGABSdau+OKDrLjdvDq3lEbcJnWWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:98:25:90:ae:9a:9b:9b:22:63:59:50:d3:e2:29:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
        Validity
            Not Before: May 16 21:01:32 2026 GMT
            Not After : May 17 21:01:32 2026 GMT
        Subject: CN=7c0a8ebd4477b36fb6b569050c2cba7124d5bc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:e6:de:7a:3b:63:86:ac:bc:10:c5:05:cc:
                    f7:1f:f3:66:72:26:2b:ea:70:d5:8a:87:9e:56:28:
                    43:fd:20:10:45:88:4e:23:c0:e9:cf:3d:e3:20:b9:
                    26:ba:10:59:e8:95:bd:0e:fa:5f:ad:8c:8b:95:c5:
                    fb:c2:b2:bc:24:d3:3d:a2:68:c2:2c:5a:af:60:22:
                    6c:b3:bd:4c:f5:42:a2:58:af:45:9c:98:f0:f3:1e:
                    aa:ee:5c:41:70:07:06:b5:f9:01:41:8c:5b:2c:20:
                    57:2a:db:a8:50:07:ad:04:f3:19:6c:52:59:9c:e0:
                    03:40:da:f6:ba:bb:82:04:bb:01:0e:d8:b7:c5:f1:
                    a2:96:72:51:1f:f9:07:ff:df:e8:ba:9a:7b:b6:89:
                    5b:e6:b4:81:24:5b:b1:cc:f4:89:ff:37:3e:ad:78:
                    6c:7d:e2:20:e2:29:bc:6c:7a:66:22:ab:55:72:be:
                    25:6c:9e:69:66:f9:d7:86:c1:c3:d4:ce:4d:10:ad:
                    eb:ec:10:ec:2b:3e:6d:ad:96:9a:50:fb:68:22:72:
                    e7:b8:3e:30:46:e6:ef:f3:3c:c1:85:aa:20:c3:2b:
                    44:8c:6a:4f:6e:a2:9c:3a:53:a0:dd:a4:90:9f:cc:
                    bb:23:26:97:49:a0:7e:7f:89:9a:4a:9b:26:72:b1:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:8E:BD:44:77:B3:6F:B6:B5:69:05:0C:2C:BA:71:24:D5:BC:7D
            X509v3 Authority Key Identifier:
                keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:ba:1b:83:51:5d:e3:34:16:86:16:b4:ae:b3:9a:3d:34:
         ee:cf:2f:48:70:65:c8:4d:57:25:9c:d1:2a:68:b3:81:67:6f:
         70:10:a0:df:fb:25:a3:83:1d:d5:5f:43:1c:bb:2c:65:97:8c:
         05:01:0b:45:00:27:bf:b6:68:29:d8:76:ee:40:ce:ed:51:07:
         ec:7d:ea:4c:0e:ad:c5:d3:3e:06:0a:9d:0f:fc:ca:b3:70:77:
         cf:18:2f:d8:9c:85:0a:51:f9:c4:52:67:08:6d:7e:00:ae:ec:
         1a:33:6d:bb:ce:3d:f1:38:d4:17:bf:05:1b:dd:4e:5b:d8:1f:
         db:7b:da:4a:6f:5e:86:cb:5f:75:1d:89:55:d9:f9:76:99:1a:
         65:1c:49:10:0c:df:41:24:82:d0:e7:28:fd:75:5c:dd:76:5c:
         de:87:53:04:72:2f:a8:41:eb:fe:52:c5:1b:31:b1:b4:c4:1d:
         78:f8:92:00:a4:1e:1a:13:e8:c7:ae:18:1e:e5:c9:7f:60:0e:
         12:36:74:ba:cd:54:2f:4d:2e:c4:49:8c:56:64:ed:e1:1b:41:
         8a:9c:dc:8f:fe:06:5d:fd:0e:27:ad:27:dc:42:95:04:c7:b3:
         10:ea:02:15:12:e7:46:f8:78:5d:4d:f0:f7:97:7e:d8:80:d6:
         93:e7:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:55 2026 by rpki-client