Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          +6sD0tjwmitDY/7613ln0K/1qdFsqHx4tN/UMyRqS+E=
Subject key identifier:   0F:C0:60:C6:B9:91:90:C1:32:DF:C5:65:FE:75:14:B7:A5:76:67:F5
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       019E2FCD497A4E5412FD3AA4A0758E3A9F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          18B1
Signing time:             Sat 16 May 2026 08:00:43 +0000
Manifest this update:     Sat 16 May 2026 08:00:43 +0000
Manifest next update:     Sun 17 May 2026 08:00:43 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: UgUkekVW3hl/Gl3MnT96GYWraVgOtdHgDP12PTWJTkQ=)
                          2: zL-LWx-Rz7OMaI1EPMJkxLg31_M.roa (hash: cgNfkZmen0X8xi6X3N5ufjIJZAx+Um78IAgsseJM+y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:49:7a:4e:54:12:fd:3a:a4:a0:75:8e:3a:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: May 16 08:00:43 2026 GMT
            Not After : May 17 08:00:43 2026 GMT
        Subject: CN=0fc060c6b99190c132dfc565fe7514b7a57667f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:bd:12:e4:82:d4:b5:8e:22:5f:04:e9:81:
                    c4:a6:0e:3c:0d:da:9e:c7:cb:43:69:c9:fe:bf:30:
                    6b:27:f9:7a:7d:65:72:82:3e:ef:e1:9e:98:4d:6e:
                    b2:cc:bb:b6:27:c0:aa:dc:47:69:b5:28:97:0f:07:
                    cc:7b:66:5f:4b:34:27:ce:fa:1d:75:fb:31:4b:c8:
                    e4:de:6d:21:ce:f4:62:41:3d:7d:f6:2b:e4:7a:c7:
                    6c:da:ee:cf:4b:d8:c3:e1:e5:77:a5:91:57:3e:cb:
                    00:c1:32:24:2e:d1:84:48:83:e1:50:f6:5f:b5:fc:
                    f0:14:75:13:a4:96:52:95:96:d7:18:55:94:ef:d5:
                    5e:fe:3f:14:82:c7:58:34:9f:e3:e1:58:4b:5b:20:
                    c1:17:89:f4:99:90:36:2e:80:a4:3d:05:8b:db:96:
                    bf:04:03:44:00:df:0b:84:8b:9d:3b:1a:d4:a4:2d:
                    f3:46:96:32:9a:32:ee:53:05:c7:aa:65:e8:42:00:
                    46:51:ae:b4:9b:d5:57:ec:aa:11:92:5b:df:42:de:
                    27:e1:43:aa:c8:02:98:12:c4:3c:34:23:bf:10:97:
                    fd:8b:17:ee:bb:01:58:48:92:eb:d1:ad:b3:6a:c5:
                    f1:5b:03:69:74:06:5a:20:a1:20:65:5e:02:10:3c:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:60:C6:B9:91:90:C1:32:DF:C5:65:FE:75:14:B7:A5:76:67:F5
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:28:fa:12:6e:29:72:20:f9:37:3d:ea:3e:c7:11:f4:77:
         4b:d0:bc:e9:1b:13:5c:cc:1d:1a:5d:b9:4c:fc:d9:3e:33:4c:
         3d:b2:34:5e:4f:ab:57:c3:dc:f0:cb:2b:a7:ce:f1:99:a8:42:
         b9:a9:03:6b:89:0b:64:6d:79:01:9b:28:9e:6a:79:4e:00:d2:
         a6:f9:91:4f:e9:28:8f:55:3d:be:58:c9:81:32:fb:c9:62:71:
         a4:e7:05:c0:62:d7:f0:06:e0:ad:f4:60:92:7f:0c:3c:a2:43:
         7a:a6:72:68:a5:02:6c:51:04:77:9b:f9:6a:72:db:e3:b1:81:
         d3:4a:f5:bb:80:9b:1f:45:3c:cf:54:b4:f8:33:06:32:7b:af:
         a4:a5:d3:f8:32:e9:48:69:ba:8a:5d:81:2e:ce:00:2d:fe:53:
         81:52:5e:66:70:f1:c6:f6:2a:19:b0:b4:09:a0:0b:65:e9:40:
         5c:6c:94:32:0a:ca:23:a4:d1:8f:9e:cf:e0:da:cc:f6:84:61:
         34:a7:02:b1:72:9c:d3:be:03:28:2f:4c:16:17:3e:2d:b8:61:
         3f:9d:e5:85:50:bf:22:f5:9e:bb:98:42:1d:7f:8c:cb:36:c8:
         bf:41:a6:20:93:5a:ba:d0:fe:fb:ab:f4:35:15:07:c9:ed:b8:
         13:b4:b6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzUl6TlQS/TqkoHWOOp82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj
ODE3NDgwHhcNMjYwNTE2MDgwMDQzWhcNMjYwNTE3MDgwMDQzWjAzMTEwLwYDVQQD
EygwZmMwNjBjNmI5OTE5MGMxMzJkZmM1NjVmZTc1MTRiN2E1NzY2N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7my9EuSC1LWOIl8E6YHEpg48Ddqe
x8tDacn+vzBrJ/l6fWVygj7v4Z6YTW6yzLu2J8Cq3EdptSiXDwfMe2ZfSzQnzvod
dfsxS8jk3m0hzvRiQT199ivkesds2u7PS9jD4eV3pZFXPssAwTIkLtGESIPhUPZf
tfzwFHUTpJZSlZbXGFWU79Ve/j8UgsdYNJ/j4VhLWyDBF4n0mZA2LoCkPQWL25a/
BANEAN8LhIudOxrUpC3zRpYymjLuUwXHqmXoQgBGUa60m9VX7KoRklvfQt4n4UOq
yAKYEsQ8NCO/EJf9ixfuuwFYSJLr0a2zasXxWwNpdAZaIKEgZV4CEDzALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/AYMa5kZDBMt/FZf51FLeldmf1MB8GA1UdIwQY
MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt
ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2
LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjo8o+hJu
KXIg+Tc96j7HEfR3S9C86RsTXMwdGl25TPzZPjNMPbI0Xk+rV8Pc8Msrp87xmahC
uakDa4kLZG15AZsonmp5TgDSpvmRT+koj1U9vljJgTL7yWJxpOcFwGLX8AbgrfRg
kn8MPKJDeqZyaKUCbFEEd5v5anLb47GB00r1u4CbH0U8z1S0+DMGMnuvpKXT+DLp
SGm6il2BLs4ALf5TgVJeZnDxxvYqGbC0CaALZelAXGyUMgrKI6TRj57P4NrM9oRh
NKcCsXKc074DKC9MFhc+LbhhP53lhVC/IvWeu5hCHX+MyzbIv0GmIJNautD++6v0
NRUHye24E7S2Rw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:50 2026 by rpki-client