Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          6PrJCnqib0e9VwVnjqRPDgmBqB3wOGjSzuLtrUByW2o=
Subject key identifier:   B6:78:53:B2:B7:74:B8:3A:B9:BA:AA:FB:89:BE:3B:F8:5F:54:CC:56
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       019E303B8F0E945256DE53398025FCBDFAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          0F51
Signing time:             Sat 16 May 2026 10:01:09 +0000
Manifest this update:     Sat 16 May 2026 10:01:09 +0000
Manifest next update:     Sun 17 May 2026 10:01:09 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: KoxNpoo1ks2ghJ5DJkscKGu1n96g5U65Iho0zqnXFvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:8f:0e:94:52:56:de:53:39:80:25:fc:bd:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: May 16 10:01:09 2026 GMT
            Not After : May 17 10:01:09 2026 GMT
        Subject: CN=b67853b2b774b83ab9baaafb89be3bf85f54cc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:b2:2f:27:7f:72:fe:fd:f6:24:03:99:60:
                    ee:56:00:1f:8d:d9:7e:85:b3:e4:a5:a7:da:8e:bc:
                    43:16:8e:25:fd:ce:6f:c8:94:98:93:b7:63:56:61:
                    aa:dc:e7:db:2e:6c:9e:39:8e:c1:0b:03:8a:13:7e:
                    e5:bc:a1:8c:7c:cd:55:07:0c:66:7c:c5:fe:14:b8:
                    44:77:c9:1b:13:af:f9:10:47:3a:18:58:1d:d0:24:
                    9e:3d:70:38:d8:e3:b3:a8:f2:9e:7b:e6:9e:ec:c4:
                    46:c0:4b:5c:0f:03:4c:76:e7:dd:7a:8f:3a:36:24:
                    30:fd:e1:31:34:69:3c:01:1b:30:a8:7b:91:9f:15:
                    bf:fe:ae:51:1a:81:db:27:f4:48:61:b2:19:c0:a4:
                    9c:04:b8:5b:1f:8f:6a:94:b1:33:5d:2d:67:01:8f:
                    28:9a:55:38:4d:d4:ed:b9:26:81:de:17:26:10:d6:
                    23:f1:83:0b:52:33:8c:bf:b4:26:0f:ba:98:4e:d7:
                    17:77:5d:55:34:9d:97:33:d0:75:29:4a:a0:61:2d:
                    3f:c2:f2:25:ba:02:0a:9f:fb:e5:99:e4:8a:0d:ff:
                    d3:54:91:59:74:55:b8:9e:97:43:05:eb:73:5a:db:
                    3e:42:0e:0a:a5:c7:12:14:2a:ea:83:10:f9:9b:42:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:53:B2:B7:74:B8:3A:B9:BA:AA:FB:89:BE:3B:F8:5F:54:CC:56
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:03:15:6c:46:44:28:bc:2b:c6:79:71:ef:d8:be:cd:cf:4a:
         f3:f2:ec:6e:c0:8c:5e:c0:f7:93:e7:f8:ec:57:1b:bc:3e:3d:
         5f:c5:3a:78:d7:61:62:78:4b:c3:3a:45:39:4a:f6:57:55:09:
         3f:c9:09:15:04:a2:57:6c:86:d7:30:5e:68:f8:9f:61:f3:81:
         98:c2:34:31:0b:6d:07:1e:47:df:02:e6:9a:e8:c3:e7:82:8c:
         8f:af:d2:3e:0c:e3:6d:e0:5e:02:23:03:e6:04:0d:c4:46:93:
         8d:4d:53:d4:1a:23:99:36:a0:b7:1b:ac:6a:f7:7c:86:69:4b:
         6a:34:2e:e2:20:c6:03:46:c5:97:ff:57:45:52:1d:ef:66:2d:
         3d:f7:43:1b:76:f6:f8:d0:1f:a0:4e:7e:09:44:2f:2c:b1:a9:
         32:f1:56:38:3e:4c:58:4a:8d:8d:fa:51:23:42:d0:84:a0:e4:
         3e:23:db:36:3c:1a:36:0b:b3:fc:e8:49:a2:25:68:a3:40:13:
         3c:af:e4:57:a3:a0:b8:d1:9e:92:27:27:b6:8c:ca:9a:00:b8:
         08:d7:49:9e:61:5a:c2:ff:71:20:9c:49:82:ec:7f:ae:b3:d5:
         3f:06:41:8c:ed:45:61:b9:95:9b:ba:38:f4:d4:ad:10:f5:1e:
         fa:64:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:50 2026 by rpki-client