Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          iGrypxp3ZmHIirZGPgn4BSp6asxM9npRhUeU4ReCTUQ=
Subject key identifier:   88:C5:53:C3:40:AC:48:A2:AB:0B:E2:58:D2:F8:56:E7:1E:FF:7C:12
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       019E30E01A5C402ED548191BCDE7D3DCD687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:00:53 +0000
Manifest this update:     Sat 16 May 2026 13:00:53 +0000
Manifest next update:     Sun 17 May 2026 13:00:53 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: nnh7qKosUiWJCsPYwA7oNpefYijyPTVcCszHslz6aJw=)
                          2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:1a:5c:40:2e:d5:48:19:1b:cd:e7:d3:dc:d6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: May 16 13:00:53 2026 GMT
            Not After : May 17 13:00:53 2026 GMT
        Subject: CN=88c553c340ac48a2ab0be258d2f856e71eff7c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:9e:3b:a6:cf:be:1a:61:34:34:82:ab:2b:
                    72:bc:b7:cc:2c:ae:01:a1:b2:f0:cd:bc:79:62:6a:
                    01:34:53:d9:6f:f2:c3:8f:bc:52:dd:4a:be:ad:a0:
                    82:bc:3f:91:be:44:a3:49:6f:fc:0e:0c:23:b8:b4:
                    d4:f9:43:ab:ce:97:3f:36:60:88:7b:6c:61:9e:1e:
                    b6:18:6c:49:a8:2e:01:17:a6:e1:cf:62:20:96:9c:
                    09:25:3f:1e:c7:7f:4f:0b:cb:47:d5:f2:f8:db:42:
                    ad:15:ce:c6:ab:51:a0:e2:bb:8c:54:8a:9c:99:4f:
                    ec:53:c5:50:d0:44:e0:ea:89:d5:85:e1:6a:52:64:
                    4a:c9:99:5b:be:05:f7:7d:36:5e:7b:0b:e4:c3:37:
                    1e:06:ca:96:15:34:7a:2b:7e:2a:02:d6:7b:56:3c:
                    dc:89:b7:ca:37:14:f5:ef:dd:75:da:74:1d:6d:cc:
                    e8:12:5c:e3:6b:41:fc:af:9e:b0:f1:0f:d0:0b:b3:
                    7b:f3:d2:0e:41:57:8c:fc:1e:69:bf:3e:ca:36:0a:
                    58:ce:8e:10:fb:36:ad:6e:18:ce:eb:61:19:d4:a5:
                    53:71:13:6d:3f:1e:76:49:4c:30:e2:00:fe:5a:12:
                    6a:52:f3:7a:31:cc:2c:34:b3:9f:b2:19:28:3e:31:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:53:C3:40:AC:48:A2:AB:0B:E2:58:D2:F8:56:E7:1E:FF:7C:12
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:b4:a8:d7:57:c0:d5:53:3f:8b:86:9b:79:07:84:a3:06:
         7f:e3:85:f1:79:d1:20:97:57:80:66:15:ee:69:47:3a:11:63:
         9d:15:21:b8:a9:8d:13:1c:42:e2:cf:37:1f:69:77:ba:a7:89:
         e4:2e:5e:43:3d:96:21:73:10:23:55:91:9e:14:1f:8f:1e:08:
         97:05:29:27:da:4b:7b:dc:c3:06:db:55:5e:5d:b1:96:5c:4a:
         2b:10:e5:59:89:1a:1b:ae:5d:08:af:91:70:eb:48:21:fb:90:
         8b:21:45:16:e3:2c:b1:71:80:f5:5e:70:7d:ca:a5:4a:9c:85:
         fd:98:ae:d4:57:08:b1:ba:7d:c8:18:2a:8e:44:a4:d1:72:ca:
         38:14:26:08:b4:c5:2f:14:0f:21:8a:9b:42:c2:98:3f:e2:b9:
         3b:ed:d9:61:67:84:f3:84:00:8d:c6:d2:c5:77:26:6e:29:85:
         af:b1:54:b4:1b:1b:9c:c4:3c:0c:9c:d5:0d:1c:b8:f1:78:3e:
         58:29:cb:86:bb:c2:de:27:13:51:2e:ca:b7:a7:9f:46:ad:e5:
         b6:8f:a3:1c:3c:e9:ab:14:fa:d0:5a:82:ea:99:fd:31:b8:b0:
         d7:74:e7:67:72:b5:e6:31:83:64:33:8c:8a:5c:60:46:47:ab:
         1d:47:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:32 2026 by rpki-client