Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File:                     5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier:          NXxlAegawAQHxH/lQRRC2i+VKC/IiHdTir1PCnCb+7U=
Subject key identifier:   DE:9B:F5:9E:61:6E:74:CA:70:73:43:B5:10:0D:9F:B2:FC:FF:CC:36
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer:       /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial:       019EBF5ADE140C5A20B1F8B9EA62433790B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number:          05FD
Signing time:             Sat 13 Jun 2026 05:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:03 +0000
Files and hashes:         1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: eLCCPmTUZaMpDnMUP24jzSkqxyq2jIXF7fRYHpItgjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:de:14:0c:5a:20:b1:f8:b9:ea:62:43:37:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
        Validity
            Not Before: Jun 13 05:01:03 2026 GMT
            Not After : Jun 14 05:01:03 2026 GMT
        Subject: CN=de9bf59e616e74ca707343b5100d9fb2fcffcc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:8a:35:79:ae:83:92:0f:e9:29:a6:1c:25:
                    23:09:b6:5a:c3:4c:1f:b7:1a:eb:0a:db:12:2d:37:
                    11:74:f8:7c:73:9c:d4:97:8d:59:7d:55:ad:7b:5c:
                    8f:eb:40:ce:6a:78:3e:93:b2:07:98:d9:7c:32:2c:
                    bc:42:46:0d:4b:09:8d:2f:c5:3b:74:03:31:c4:94:
                    b7:c7:02:59:6f:89:6a:3d:a6:fd:20:71:63:a9:4e:
                    8e:35:32:01:ff:ab:d2:76:f6:c5:ef:39:61:2b:39:
                    8a:3f:77:45:b0:22:1d:4b:d3:17:90:ef:63:a8:9d:
                    4a:3f:5d:72:ce:77:8e:26:e4:c5:5d:0c:0b:57:99:
                    a5:e0:b8:09:f4:44:03:e8:13:db:40:ef:bd:1f:ad:
                    9a:f6:dd:c4:d4:e3:94:3e:8e:ab:93:6e:df:f4:2a:
                    52:9b:00:a0:36:8e:78:dd:e9:80:9e:4c:7b:8e:4a:
                    39:40:85:44:b4:db:cb:10:4c:ca:91:c6:2a:91:35:
                    20:d1:6e:61:78:cb:04:4a:95:07:e5:0d:04:5a:53:
                    26:be:4b:7f:d1:b0:13:a9:05:99:20:51:a9:83:a1:
                    67:66:b7:72:f2:39:bf:b0:08:f4:87:ac:31:59:b1:
                    de:dc:8c:0a:d3:35:87:b5:87:20:57:07:df:28:bf:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:F5:9E:61:6E:74:CA:70:73:43:B5:10:0D:9F:B2:FC:FF:CC:36
            X509v3 Authority Key Identifier:
                keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a5:05:db:af:2f:84:54:52:c3:50:5e:a5:a0:0a:19:37:31:
         7e:78:41:7e:28:92:e2:a1:a0:b5:75:12:a9:40:51:a6:ef:13:
         da:05:ca:75:4d:18:0c:c1:33:36:c1:50:21:3d:b4:97:7e:1c:
         28:da:1f:22:46:24:83:02:28:d0:0a:60:88:2b:30:4e:6a:4e:
         d5:8d:4f:6a:a0:7e:8d:1c:c9:e2:10:05:da:ad:f2:4a:93:ed:
         ee:05:5e:f3:6d:45:24:b4:f8:2b:c7:31:2f:b8:1e:0f:0d:dd:
         55:c3:db:10:6c:46:c6:9c:6e:c2:13:18:7c:88:ba:08:35:f7:
         67:db:61:aa:58:4d:67:9f:06:83:0a:34:0d:f7:ef:81:92:f9:
         28:59:9c:67:18:00:dc:8c:8c:21:59:e9:53:92:8b:cc:6f:63:
         93:89:50:e1:82:eb:37:5c:2a:1d:52:b1:3b:80:60:79:19:20:
         40:7d:4d:c1:42:85:fd:8d:00:a1:81:15:6b:76:7f:ef:20:a5:
         c3:f3:4d:04:9c:e6:bb:a4:7c:9c:c0:9a:4f:3d:6d:a5:86:c6:
         b2:f2:18:f6:c8:9f:12:81:5d:3d:91:f6:df:df:2f:26:15:6e:
         af:dd:9c:47:34:75:e2:55:2c:bf:a2:6b:98:3f:b5:4c:a7:bd:
         91:c9:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:57 2026 by rpki-client