Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          I0W6nA2Ls5WN631YVs5vDRK0c9m3IiY63m69hY1bU5g=
Subject key identifier:   B1:92:3D:D6:EC:D6:C8:B2:F5:3B:AC:BD:29:7E:C0:0F:4E:7D:70:54
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       019E30A99B418743CFD845E75229E7713F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          1465
Signing time:             Sat 16 May 2026 12:01:22 +0000
Manifest this update:     Sat 16 May 2026 12:01:22 +0000
Manifest next update:     Sun 17 May 2026 12:01:22 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: b8dZBk6q3TQWSe/tHO2Gp4dkTAmjhvPXZIr1S70x3to=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:9b:41:87:43:cf:d8:45:e7:52:29:e7:71:3f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: May 16 12:01:22 2026 GMT
            Not After : May 17 12:01:22 2026 GMT
        Subject: CN=b1923dd6ecd6c8b2f53bacbd297ec00f4e7d7054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:81:ff:4b:71:9c:c1:2b:8e:87:fc:6f:60:
                    b7:03:1d:25:b3:9c:d1:ee:f6:a7:2e:51:0e:ed:4b:
                    df:78:52:f9:7c:56:22:b4:9b:03:60:57:d6:b6:2a:
                    76:cd:b5:aa:be:b0:51:a4:1f:22:f0:18:30:c7:dc:
                    a7:63:79:23:af:26:14:71:00:f0:7c:60:4d:82:12:
                    d9:da:7f:aa:3d:86:2b:d8:e5:39:55:23:fe:8e:cf:
                    bb:da:db:27:6b:37:88:28:e0:cf:ce:e5:06:b3:77:
                    85:3f:25:32:77:41:10:4e:13:24:16:a7:4f:cc:b3:
                    66:4a:20:b4:a0:37:77:b7:90:59:35:c2:42:a5:23:
                    8d:e9:1b:d2:bc:41:3a:16:06:ff:d6:b3:e0:08:27:
                    66:1a:86:7a:b0:6b:52:23:4f:70:42:01:cf:a9:b5:
                    aa:33:7f:35:e1:da:0e:a9:12:29:b6:04:2c:31:39:
                    9e:24:87:bf:c9:66:31:6a:79:9a:e0:3f:7b:fc:8f:
                    a9:4e:d3:f4:c7:d0:10:6e:5e:e8:01:5b:83:b1:c4:
                    cf:22:ed:a2:40:ab:47:4a:98:ae:08:48:6d:55:6b:
                    d6:15:56:25:3c:e1:fd:0f:4c:73:c7:74:cf:ab:1b:
                    f8:94:77:37:83:a1:f8:33:2e:7d:4f:20:a1:dd:bf:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:3D:D6:EC:D6:C8:B2:F5:3B:AC:BD:29:7E:C0:0F:4E:7D:70:54
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f5:c6:70:f6:1b:9b:4e:a9:3d:2b:5d:bd:13:23:41:b2:04:
         b5:f8:5c:8a:29:01:79:5d:c1:7c:d4:23:b8:08:72:e3:1b:f5:
         60:b1:e3:80:ce:a7:df:de:ac:13:7b:e4:c4:f6:ad:cc:c2:85:
         97:3d:d0:c2:6c:fc:d4:69:d4:6d:e4:12:ce:81:81:4c:73:89:
         80:7a:0d:0c:66:b6:75:17:ed:8d:7f:9a:ba:09:c8:0a:93:83:
         87:98:35:04:71:4f:60:4f:c1:06:46:d3:0f:37:ea:eb:83:b6:
         b1:46:72:6a:e3:06:20:71:a8:58:58:49:91:a1:0a:82:4e:5d:
         48:18:7c:eb:2e:fe:20:66:3a:aa:2a:4d:db:dc:d8:c4:d4:0d:
         2d:e1:d7:dc:f5:3e:2b:a2:f5:51:2e:46:ce:f3:5a:10:b7:95:
         38:78:b6:96:fd:b7:fa:c0:27:c6:0b:21:ad:e7:3e:61:1e:54:
         cb:38:22:5e:78:36:2f:5d:a0:bf:8c:29:21:39:a3:9f:bf:c2:
         88:dc:9c:95:a5:db:a9:48:e0:aa:bc:85:3d:13:43:22:15:72:
         aa:97:3c:3c:88:79:b1:ac:28:f6:78:5f:30:e8:91:3c:cb:a9:
         aa:b5:7c:84:d0:31:f4:79:51:e8:dc:a3:ad:f5:ff:d5:57:a8:
         1c:8a:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:00 2026 by rpki-client