Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File:                     5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier:          oSp8+DZzf3v6qnRtyCbpswW3kLVFZyLXYE7J57SVqMY=
Subject key identifier:   94:78:C4:25:D3:65:93:A6:70:FC:D7:4F:2E:22:54:57:A2:89:BA:2C
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer:       /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial:       019E2F965A230F4CBCC0C4BF15A209CDE644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number:          0C2C
Signing time:             Sat 16 May 2026 07:00:43 +0000
Manifest this update:     Sat 16 May 2026 07:00:43 +0000
Manifest next update:     Sun 17 May 2026 07:00:43 +0000
Files and hashes:         1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: 6X9FXfGg4dQinrGSi96M5hlfn8ogofiH8kbzM2BSnv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:5a:23:0f:4c:bc:c0:c4:bf:15:a2:09:cd:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
        Validity
            Not Before: May 16 07:00:43 2026 GMT
            Not After : May 17 07:00:43 2026 GMT
        Subject: CN=9478c425d36593a670fcd74f2e225457a289ba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:5d:98:4e:07:45:5b:16:25:e3:ae:70:cc:
                    28:89:00:28:33:a5:b2:d8:26:be:15:bd:aa:ed:7c:
                    a0:76:a7:41:60:84:3c:32:26:66:5e:fc:3b:1a:d4:
                    a4:4e:5b:85:88:a5:de:f6:29:dc:35:c4:d1:ed:71:
                    8e:65:95:ee:bc:18:a1:84:0d:0e:48:74:1d:a0:8b:
                    86:c8:db:50:25:13:2f:78:56:5b:a5:58:63:36:82:
                    1b:5b:37:a7:4b:a5:f6:38:5b:01:1c:dc:ae:33:a1:
                    2a:cd:71:c0:ae:e7:f6:e2:dc:09:a5:f1:33:80:45:
                    6e:59:54:b3:93:0c:b4:13:18:28:de:5a:2c:98:47:
                    af:49:a4:14:d6:b0:ba:74:ae:5d:e9:1f:81:0e:9d:
                    48:a8:dd:91:f4:ef:29:6b:07:c8:dc:23:ba:c4:94:
                    ed:b7:49:ca:7d:08:8f:81:3b:17:b7:ea:ac:4b:04:
                    27:09:3a:af:f3:9c:a7:cb:af:86:45:b5:a7:07:99:
                    c5:3f:ec:30:3f:a3:50:f5:c4:c2:6e:f6:1f:14:c9:
                    16:6b:e2:84:ec:6b:63:12:50:16:53:52:d0:9a:83:
                    fd:7c:4c:6d:9b:fb:2d:dd:47:23:16:54:59:f4:57:
                    85:64:77:94:76:14:0a:18:f2:69:93:bb:3b:d5:de:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:C4:25:D3:65:93:A6:70:FC:D7:4F:2E:22:54:57:A2:89:BA:2C
            X509v3 Authority Key Identifier:
                keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:f0:33:30:42:7f:09:ad:79:f2:c8:af:6a:d2:f7:69:04:
         22:1a:d5:4c:41:0a:88:dc:75:75:c3:dd:3b:34:86:2d:d5:e9:
         08:55:88:6c:18:fc:4a:0b:57:3b:d3:bb:41:c0:2f:c9:1a:22:
         15:31:98:97:fd:8d:71:c0:3e:3c:88:9f:3d:be:ef:6b:1a:dc:
         a7:c6:63:0a:11:90:e3:86:67:94:4b:0a:da:6a:c6:09:a8:1f:
         3d:29:a5:96:92:69:cc:f2:1f:00:4f:23:4f:47:d1:e0:dd:3a:
         2b:b6:05:39:cf:c7:38:98:30:3c:65:63:3d:7c:8c:8a:b3:9a:
         4c:e0:41:f1:d2:03:57:5c:d6:fb:a9:c1:a7:6c:72:98:79:34:
         ba:4a:a4:c6:a1:42:60:dc:d3:43:52:3b:20:be:c1:1e:e5:9a:
         bb:f4:1b:d0:30:a2:89:24:e9:19:ff:2b:9d:68:94:96:10:36:
         f2:99:b5:73:1e:3c:46:41:53:5c:21:1e:52:f2:61:9c:9d:b0:
         ec:a2:ed:d1:b8:a9:fa:24:93:e6:37:5b:1d:ed:bf:30:5f:51:
         c4:1c:a4:75:a7:11:bc:76:9e:61:e7:80:85:61:17:b5:69:df:
         0f:66:c1:bb:24:26:26:6e:f7:d3:31:62:2b:76:80:62:71:13:
         6a:e9:33:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vllojD0y8wMS/FaIJzeZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTFjODkxMWVkYmFlMzZkZjFhODBiYmU4MTRiMjVhMGY5
NDM5ZmEwHhcNMjYwNTE2MDcwMDQzWhcNMjYwNTE3MDcwMDQzWjAzMTEwLwYDVQQD
Eyg5NDc4YzQyNWQzNjU5M2E2NzBmY2Q3NGYyZTIyNTQ1N2EyODliYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkFdmE4HRVsWJeOucMwoiQAoM6Wy
2Ca+Fb2q7XygdqdBYIQ8MiZmXvw7GtSkTluFiKXe9incNcTR7XGOZZXuvBihhA0O
SHQdoIuGyNtQJRMveFZbpVhjNoIbWzenS6X2OFsBHNyuM6EqzXHAruf24twJpfEz
gEVuWVSzkwy0Exgo3losmEevSaQU1rC6dK5d6R+BDp1IqN2R9O8pawfI3CO6xJTt
t0nKfQiPgTsXt+qsSwQnCTqv85yny6+GRbWnB5nFP+wwP6NQ9cTCbvYfFMkWa+KE
7GtjElAWU1LQmoP9fExtm/st3UcjFlRZ9FeFZHeUdhQKGPJpk7s71d4r4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR4xCXTZZOmcPzXTy4iVFeiibosMB8GA1UdIwQY
MBaAFOcRyJEe26423xqAu+gUsloPlDn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWZjMTUtMWU3OS00ZmU5LTlmYWQt
MDNhNGRkNGE5MTU2LzEvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYWZjMTUtMWU3OS00ZmU5LTlmYWQtMDNhNGRkNGE5MTU2
LzEvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKHwMzBC
fwmtefLIr2rS92kEIhrVTEEKiNx1dcPdOzSGLdXpCFWIbBj8SgtXO9O7QcAvyRoi
FTGYl/2NccA+PIifPb7vaxrcp8ZjChGQ44ZnlEsK2mrGCagfPSmllpJpzPIfAE8j
T0fR4N06K7YFOc/HOJgwPGVjPXyMirOaTOBB8dIDV1zW+6nBp2xymHk0ukqkxqFC
YNzTQ1I7IL7BHuWau/Qb0DCiiSTpGf8rnWiUlhA28pm1cx48RkFTXCEeUvJhnJ2w
7KLt0bip+iST5jdbHe2/MF9RxBykdacRvHaeYeeAhWEXtWnfD2bBuyQmJm730zFi
K3aAYnETaukznA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:33 2026 by rpki-client