Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          JI8UfrDKAe8Sd4XOJUPPWEx5oxSL/USe80VwqS3YRlE=
Subject key identifier:   C0:CA:C6:9A:55:AA:5E:A8:DE:CC:96:FF:BD:56:CD:C0:4C:A7:57:F0
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       019E2FCD4C107C0C51F7A5B1B626E7ACC9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0F0D
Signing time:             Sat 16 May 2026 08:00:43 +0000
Manifest this update:     Sat 16 May 2026 08:00:43 +0000
Manifest next update:     Sun 17 May 2026 08:00:43 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: Oe5eToG+ZCNfqafyPaP8swtkITqt3HpWdAhLCGdVhyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:4c:10:7c:0c:51:f7:a5:b1:b6:26:e7:ac:c9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: May 16 08:00:43 2026 GMT
            Not After : May 17 08:00:43 2026 GMT
        Subject: CN=c0cac69a55aa5ea8decc96ffbd56cdc04ca757f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:e9:13:92:f7:7e:62:3b:4e:35:82:cd:b5:
                    6d:c4:3e:fc:e5:24:c9:8b:b7:ec:69:de:5c:bc:a3:
                    ef:d4:3d:72:c7:41:2f:34:ef:ab:9c:70:1c:8e:e5:
                    fd:09:d6:ab:0e:cb:43:c3:71:ef:4f:0b:8d:d1:a9:
                    c6:f8:fb:68:13:aa:d4:e2:af:9a:42:52:ff:bb:e4:
                    e4:b8:c3:2b:14:70:14:f3:53:05:55:36:52:ca:c4:
                    27:80:5b:1d:8e:65:b6:7a:de:bd:d1:97:8e:b7:54:
                    77:fd:65:e4:79:69:da:29:38:2e:ee:57:80:4a:cd:
                    d2:07:ff:e4:3f:8d:79:bc:81:99:27:47:1a:15:03:
                    62:46:25:08:15:6c:9c:69:c7:e1:93:2a:cd:7c:5c:
                    f7:b9:48:99:ab:8c:69:f4:ef:b7:bf:37:9c:4e:bb:
                    14:74:66:aa:28:04:c0:8e:7a:d2:50:31:2e:14:67:
                    f8:32:57:5a:35:ee:73:ee:0a:e3:b3:30:65:99:e4:
                    2b:35:81:39:3e:bb:e9:35:e1:08:09:1f:4a:8e:ab:
                    df:9f:28:33:79:07:9c:14:19:4f:57:8b:2b:55:5d:
                    ed:73:13:ad:19:6b:8a:0b:d1:a1:6e:77:fb:a7:4c:
                    bb:aa:10:47:d4:32:bf:0d:30:c9:66:3e:7a:c5:d6:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:C6:9A:55:AA:5E:A8:DE:CC:96:FF:BD:56:CD:C0:4C:A7:57:F0
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:1e:aa:fa:37:5d:11:21:ab:e1:e1:dc:09:d3:74:1c:f1:
         1c:eb:34:90:7d:bb:66:8c:17:db:be:25:42:f3:7b:fb:31:c0:
         63:e2:6a:94:68:ba:0d:33:23:7a:04:6a:20:24:7d:ab:82:e5:
         e7:ed:a2:da:e9:2e:fa:b7:49:9c:e4:ba:fc:de:47:d6:93:e6:
         35:77:7e:99:56:6a:28:fc:6d:42:07:82:94:c0:20:c5:d4:c7:
         ff:62:58:1d:90:5c:68:91:b0:11:6a:bf:32:f4:29:5f:6b:bd:
         42:73:49:69:30:b3:16:39:6a:49:04:54:74:c9:c9:ff:aa:0e:
         0f:0d:5b:27:bf:3d:7a:d4:a1:2e:af:cc:16:de:4f:80:13:b5:
         1e:65:25:02:c0:6f:43:8e:56:23:c6:89:d9:6e:5d:0d:20:9c:
         a8:40:20:80:ec:fb:b8:54:0b:75:cb:72:a2:a7:fb:06:e8:a1:
         cd:4e:78:c7:4d:95:fc:83:f5:ec:f9:ad:d1:65:83:f8:fd:20:
         57:ae:bf:b2:1e:cf:7b:47:d6:80:b3:bd:96:ae:58:a3:be:9b:
         ee:d4:b4:29:03:8a:7d:06:2f:6b:95:3d:64:da:87:d2:f3:62:
         84:11:a0:f9:cf:0c:3e:14:ba:54:c0:70:09:28:0c:64:e5:bf:
         85:a7:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:09 2026 by rpki-client