Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File:                     PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier:          jE2fx+CaYg7xvvTBPbgOyq505YZsq9IHr3xL75kKhCk=
Subject key identifier:   91:1B:A8:E0:AC:F6:32:38:CA:9E:56:3F:1C:C8:9A:9F:83:51:33:15
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer:       /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial:       019E051ABBC13E2509A3C5E57D41A13F28F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number:          05ED
Signing time:             Fri 08 May 2026 01:01:38 +0000
Manifest this update:     Fri 08 May 2026 01:01:38 +0000
Manifest next update:     Sat 09 May 2026 01:01:38 +0000
Files and hashes:         1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 8yBPtpR/4SB07kHRyqdg8BSpoU6xH6o6dFtu2ZcCLdk=)
                          2: ycAuPmO_sLVvMbeFsggXQjZ-bEc.roa (hash: IOeAqOcXQYE9MbdToOk7llMBN5GYLYRtb8t8JnGE6Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 21:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:05:1a:bb:c1:3e:25:09:a3:c5:e5:7d:41:a1:3f:28:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
        Validity
            Not Before: May  8 01:01:38 2026 GMT
            Not After : May  9 01:01:38 2026 GMT
        Subject: CN=911ba8e0acf63238ca9e563f1cc89a9f83513315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:d6:93:fe:33:a4:50:52:de:5e:91:3b:68:
                    bb:23:19:69:f4:3a:8b:b5:2f:f4:71:29:83:cc:cc:
                    d5:03:26:94:8d:40:fd:ac:3d:73:9d:77:18:23:41:
                    c4:c9:28:21:37:f5:4e:da:2a:82:9e:8f:15:62:56:
                    b2:30:7d:ef:69:1e:c5:0d:49:fc:3c:a8:e5:01:a5:
                    bd:2e:04:b3:d9:ee:39:4d:b4:f2:7c:b2:3f:6a:78:
                    9e:8c:cb:de:49:fb:25:f7:91:54:0c:46:af:45:5f:
                    9d:9a:03:27:1c:5d:fd:7a:7b:ed:de:42:a0:9c:81:
                    3d:88:c7:1f:f1:c2:fb:ad:d2:fb:7c:61:fb:66:65:
                    39:00:6b:7a:97:95:75:b5:fe:68:dd:23:44:67:05:
                    8b:3a:04:43:b2:58:d0:4a:aa:87:38:27:2b:6d:1d:
                    54:c0:19:49:b2:ae:ff:db:4c:39:13:bc:15:36:06:
                    c9:18:75:86:d8:05:e5:1e:c4:d6:32:b9:39:69:17:
                    ea:2d:ff:dd:36:b5:98:c2:4d:7c:85:9d:cb:56:67:
                    64:d1:eb:07:6b:68:60:f0:90:d8:2a:94:3a:68:0a:
                    b4:be:56:a5:c7:02:50:56:54:e7:a2:74:78:06:38:
                    68:7e:4e:c4:7c:29:71:88:6d:b7:c6:8d:48:ef:00:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:A8:E0:AC:F6:32:38:CA:9E:56:3F:1C:C8:9A:9F:83:51:33:15
            X509v3 Authority Key Identifier:
                keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:5f:45:6d:3c:e1:0f:e3:59:57:99:21:3e:62:4c:24:d3:
         b7:46:5a:c3:06:59:d9:26:c8:2f:27:48:1d:45:6d:0a:84:8f:
         8d:8d:aa:2e:ca:75:77:82:54:90:cf:3a:a6:92:ef:4a:2a:e9:
         33:68:be:4e:c5:10:08:2d:02:e1:8e:5f:0d:1a:56:c5:2b:0b:
         c5:82:32:0c:01:94:2b:a6:a8:e3:aa:ae:73:77:b9:f2:c8:41:
         a7:05:44:48:91:e6:4d:b9:b4:0f:db:55:33:7e:f7:35:c9:6f:
         0b:5a:99:36:24:d7:6c:4e:33:7b:7a:27:5f:0a:a2:67:e9:0b:
         e5:95:1c:03:90:18:94:8c:f5:a1:de:05:2d:41:1d:be:f1:1d:
         23:66:ef:53:67:6b:35:19:c1:29:eb:ee:99:f8:3f:98:e8:15:
         3c:e3:8d:63:e2:2c:d2:1d:94:2c:9b:73:f3:03:18:ad:1d:7b:
         03:5a:c8:29:19:81:be:d6:21:0d:34:63:c5:bf:83:e4:ad:33:
         8b:1f:08:c1:5b:82:23:95:93:47:d1:e6:c2:ce:8f:64:1e:68:
         20:3e:5a:9f:58:74:db:f5:48:35:28:ed:43:fc:12:66:59:60:
         b9:b3:e2:59:c8:d1:04:4b:3f:1d:b8:cd:c4:e7:57:f0:16:9d:
         98:0c:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:20:03 2026 by rpki-client