Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          ZRYibstw/0IRKX8ssfv8JMpooOh73f2wJSLMPS69xIY=
Subject key identifier:   53:9A:FF:91:DA:4B:F0:D6:E8:A0:B2:B3:EC:49:62:50:A8:13:1D:E2
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       019E30A99CF9CF62772B8AF5DADA27526F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          05E5
Signing time:             Sat 16 May 2026 12:01:22 +0000
Manifest this update:     Sat 16 May 2026 12:01:22 +0000
Manifest next update:     Sun 17 May 2026 12:01:22 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: E4cBM7YmyRbgPnqPXkRerRFKeM6ID6xyltYYsOzMqcs=)
                          2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:9c:f9:cf:62:77:2b:8a:f5:da:da:27:52:6f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: May 16 12:01:22 2026 GMT
            Not After : May 17 12:01:22 2026 GMT
        Subject: CN=539aff91da4bf0d6e8a0b2b3ec496250a8131de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:74:f6:fe:e4:51:fc:f3:1a:5d:b5:a6:87:
                    9c:bb:4e:be:61:d9:f8:80:63:13:c8:f7:aa:07:e5:
                    bf:72:0d:cc:12:93:c9:46:d4:3c:3f:bf:d5:27:ff:
                    ae:a3:de:13:86:2b:a9:58:80:ff:b9:81:45:22:c2:
                    6a:b0:3b:0f:07:a4:b8:18:d3:e5:9f:10:2f:85:0d:
                    7d:cf:cb:9a:75:a0:bd:b4:85:76:70:fa:0f:8c:08:
                    ce:2e:54:fb:0d:bc:5a:63:05:0f:93:de:09:e8:29:
                    e8:67:3b:d2:46:49:cc:4c:07:b9:b6:da:b5:f1:3d:
                    d5:ce:87:7d:b8:1c:2b:4b:be:39:49:5d:3f:0c:eb:
                    ca:9b:82:eb:ea:fa:e3:31:eb:ce:c3:54:50:3b:a1:
                    0e:f6:83:ce:01:6a:ba:dd:2e:de:71:17:16:ff:9f:
                    fa:05:ff:6f:15:f1:99:54:b2:52:fe:a7:e8:cb:63:
                    1e:52:d5:6a:b7:67:46:2b:59:fb:a8:2b:b0:5e:74:
                    4a:6d:b3:08:48:68:68:db:9d:ca:33:b2:e5:e9:30:
                    d8:e5:1f:48:90:97:5c:1c:c5:1d:af:16:da:97:5d:
                    1c:cb:93:7d:55:16:0c:2b:ed:df:90:6b:61:d7:da:
                    16:5b:53:b9:3b:18:b1:08:43:0c:a9:0b:80:dc:fd:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:FF:91:DA:4B:F0:D6:E8:A0:B2:B3:EC:49:62:50:A8:13:1D:E2
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:b6:d7:d8:64:e7:34:67:97:07:4c:96:10:01:ab:6d:b1:
         0b:e1:5e:08:34:f2:bd:1c:b2:da:8a:a9:a3:51:65:3d:a1:f8:
         b6:87:b8:4e:9d:eb:69:f2:fc:40:6a:19:c6:41:33:92:84:ae:
         8c:e0:e9:6e:21:58:a0:ae:8f:64:f6:0a:d4:69:4c:12:26:60:
         ad:f3:c3:f5:0f:a7:99:68:f6:37:e4:4b:02:9c:c1:f1:49:7e:
         7a:b8:df:a7:0c:78:a4:61:37:23:02:05:d1:c8:14:fc:1a:fe:
         43:03:63:70:c0:0e:0f:46:37:63:64:4a:a6:d5:67:8c:34:83:
         4b:ba:4f:3a:36:e8:b1:ae:46:1b:f9:e4:14:f8:92:18:1a:4f:
         84:ac:ef:99:ef:05:d9:f8:2c:2d:13:93:14:8d:b9:45:95:3b:
         df:f4:36:43:54:49:75:32:5e:a9:70:12:b0:1d:17:0d:ed:21:
         3b:0f:43:6e:2f:42:d9:41:31:1a:a7:7c:d8:a4:df:7e:64:15:
         db:61:0d:ad:d7:16:66:9f:cd:f8:a6:e6:04:03:03:e3:01:c7:
         2c:09:8c:cb:c6:5a:79:54:a5:9a:7f:ba:62:3e:4d:d8:be:6a:
         29:5c:31:a4:6d:a5:56:dc:b9:80:f7:1b:6c:20:b2:98:1d:8f:
         ec:77:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:57 2026 by rpki-client