Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          56eltzsFmooZFpl5uMb1LYQo6gj/o8Co0unyE+wAvCk=
Subject key identifier:   93:48:5E:F3:A0:2B:55:42:73:81:D8:A9:D2:DF:DE:0F:21:2D:AB:6F
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       019EC25C9EB878443D688A4282AD22090A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          1376
Signing time:             Sat 13 Jun 2026 19:01:50 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:50 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:50 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: O6s6BhqpAnthOg96+liVOO/u9/8SarwAOQTVMhF7z54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:9e:b8:78:44:3d:68:8a:42:82:ad:22:09:0a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Jun 13 19:01:50 2026 GMT
            Not After : Jun 14 19:01:50 2026 GMT
        Subject: CN=93485ef3a02b55427381d8a9d2dfde0f212dab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:f9:47:1e:78:11:6d:e0:0d:73:70:a8:1c:
                    81:a8:54:cd:9d:c9:a5:d2:e0:16:74:d2:84:95:59:
                    00:0a:b1:25:7d:25:d5:e8:3c:53:3f:a5:8d:cc:7c:
                    b6:3f:2a:7f:f7:c2:af:e6:07:e9:f9:5a:e4:6e:21:
                    bf:8c:21:5f:be:b2:3d:fd:64:4a:25:44:d3:dc:7f:
                    8b:27:aa:46:b1:32:72:d0:b1:a5:0e:69:d1:8e:14:
                    b1:7e:4c:0a:0f:d3:c4:5b:ba:23:1b:13:38:a4:d6:
                    76:91:ee:42:0f:b5:f7:27:af:12:c7:1b:db:40:6d:
                    09:f4:82:b1:45:3d:24:e9:c7:9f:44:be:d0:b6:e7:
                    c5:20:08:9f:4b:cb:e9:64:f4:be:0a:2d:2e:73:3b:
                    c4:41:10:22:45:af:42:53:32:12:a4:f1:6e:68:ed:
                    e3:db:71:f5:4a:a0:21:9e:35:c7:6f:3e:97:63:54:
                    75:ff:ca:f6:7e:86:39:f4:b9:6c:3b:90:80:8e:c7:
                    8e:ac:04:7d:d2:65:c4:f1:f3:87:d4:85:12:af:c0:
                    1c:48:31:5d:c9:fc:1e:2d:06:81:1e:08:db:fb:b3:
                    a7:24:66:87:c1:e6:61:41:c9:be:9c:84:31:2c:65:
                    29:ae:6f:48:8a:48:72:94:f0:0f:de:a4:47:8e:d8:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:48:5E:F3:A0:2B:55:42:73:81:D8:A9:D2:DF:DE:0F:21:2D:AB:6F
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:68:96:07:0a:33:ef:39:dc:aa:d0:e8:d3:14:b3:b1:26:74:
         c4:f1:40:f5:ac:e2:76:f8:38:8e:f6:70:e1:f5:f4:94:ab:8e:
         d4:f2:c8:b8:11:a1:ab:6c:c8:6f:0e:48:b2:2f:88:f2:4e:98:
         d7:61:da:46:4e:8d:da:9c:fb:0a:f2:81:94:07:93:79:e9:7e:
         0c:8b:cb:ea:de:7a:ad:2f:5d:74:af:9f:a1:c8:de:79:a7:f5:
         e8:89:0a:0b:ff:30:23:a6:93:5a:06:8b:23:34:72:e3:65:3d:
         95:e7:03:97:22:88:58:5b:4d:9d:64:c7:8f:85:67:23:6f:fa:
         bd:45:3a:71:ad:ca:95:73:e7:b1:9d:94:43:d9:21:81:56:26:
         a7:d0:f9:a6:3b:15:00:97:cd:37:4d:6a:cb:c2:7a:93:2f:e5:
         bb:fb:75:8f:63:a8:0c:ce:31:c3:2d:9f:c2:fc:59:cb:f6:92:
         17:ac:12:9c:3a:b2:a3:dd:d2:df:dd:83:59:4d:c9:65:a4:00:
         c0:e3:89:2d:78:ec:a3:53:83:3f:db:51:19:22:1a:8d:4a:47:
         1c:8f:86:3c:45:61:40:52:a2:7b:97:68:ba:8a:70:ae:9f:75:
         97:ec:96:68:e4:7d:1b:7c:a2:6e:34:06:fd:02:59:d0:f1:27:
         55:02:91:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CXJ64eEQ9aIpCgq0iCQosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZWZkMTg2OWVlYWZlNmY5ZjAzY2IzNDE4Njg5YmNiMGM2
OTEzNzAwHhcNMjYwNjEzMTkwMTUwWhcNMjYwNjE0MTkwMTUwWjAzMTEwLwYDVQQD
Eyg5MzQ4NWVmM2EwMmI1NTQyNzM4MWQ4YTlkMmRmZGUwZjIxMmRhYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNr5Rx54EW3gDXNwqByBqFTNncml
0uAWdNKElVkACrElfSXV6DxTP6WNzHy2Pyp/98Kv5gfp+VrkbiG/jCFfvrI9/WRK
JUTT3H+LJ6pGsTJy0LGlDmnRjhSxfkwKD9PEW7ojGxM4pNZ2ke5CD7X3J68Sxxvb
QG0J9IKxRT0k6cefRL7QtufFIAifS8vpZPS+Ci0uczvEQRAiRa9CUzISpPFuaO3j
23H1SqAhnjXHbz6XY1R1/8r2foY59LlsO5CAjseOrAR90mXE8fOH1IUSr8AcSDFd
yfweLQaBHgjb+7OnJGaHweZhQcm+nIQxLGUprm9IikhylPAP3qRHjtjNJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNIXvOgK1VCc4HYqdLf3g8hLatvMB8GA1UdIwQY
MBaAFOXv0Yae6v5vnwPLNBhom8sMaRNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYt
MDI0OTM1ZGRiOGM2LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iNDdiZGEtNjViNi00YTQyLTk5MGYtMDI0OTM1ZGRiOGM2
LzEvNWVfUmhwN3FfbS1mQThzMEdHaWJ5d3hwRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWiWBwoz
7zncqtDo0xSzsSZ0xPFA9azidvg4jvZw4fX0lKuO1PLIuBGhq2zIbw5Isi+I8k6Y
12HaRk6N2pz7CvKBlAeTeel+DIvL6t56rS9ddK+focjeeaf16IkKC/8wI6aTWgaL
IzRy42U9lecDlyKIWFtNnWTHj4VnI2/6vUU6ca3KlXPnsZ2UQ9khgVYmp9D5pjsV
AJfNN01qy8J6ky/lu/t1j2OoDM4xwy2fwvxZy/aSF6wSnDqyo93S392DWU3JZaQA
wOOJLXjso1ODP9tRGSIajUpHHI+GPEVhQFKie5douopwrp91l+yWaOR9G3yibjQG
/QJZ0PEnVQKRVw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:35 2026 by rpki-client