Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File:                     5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier:          HPnEP20xKxIuO8aolsjdYc/ByQMSP/VmHVkDcMf5YUI=
Subject key identifier:   8C:73:40:BB:8D:1F:11:6E:17:D2:CA:1C:14:59:B1:8B:7B:01:31:0C
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer:       /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial:       019EBF5A8B695D6D37EE0011CC3DF0D44A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number:          0C12
Signing time:             Sat 13 Jun 2026 05:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:42 +0000
Files and hashes:         1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: Qz+AxleIfkTcOm7IHK6X/J93z6mIV1I4AAY4HpEpaUc=)
                          2: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (hash: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:8b:69:5d:6d:37:ee:00:11:cc:3d:f0:d4:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
        Validity
            Not Before: Jun 13 05:00:42 2026 GMT
            Not After : Jun 14 05:00:42 2026 GMT
        Subject: CN=8c7340bb8d1f116e17d2ca1c1459b18b7b01310c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:db:4a:b8:88:e4:ef:7a:ed:f4:d8:41:89:
                    81:47:b9:50:30:83:96:ed:f1:b7:cb:f6:57:7b:d1:
                    07:2d:05:7d:36:02:48:95:29:01:dd:fc:ce:4c:5e:
                    bc:5b:ea:f4:97:b6:35:07:cb:e0:fb:ef:46:b9:2d:
                    a0:8c:f9:52:da:3d:67:1f:37:a4:ac:a0:be:64:7e:
                    99:dd:18:0d:e2:9d:74:12:2e:1a:93:41:b0:85:f1:
                    6a:b3:7d:22:b2:fe:82:c6:ce:78:a4:9d:b5:bf:f8:
                    c0:76:83:d4:ec:85:c5:25:86:06:15:95:e0:b5:30:
                    29:28:67:06:bc:3a:b7:bd:f5:6f:54:65:ce:5b:98:
                    47:59:e2:0f:61:88:f6:9c:b0:f1:82:8b:f6:b7:90:
                    ea:29:2c:a4:5f:9d:58:1e:9f:6a:d6:37:04:96:bf:
                    8a:c3:f8:dc:8f:79:bb:c8:75:1b:0f:2f:21:33:e1:
                    a4:d4:61:bc:db:e4:f7:01:d8:b2:09:31:08:91:4c:
                    bd:03:6c:0f:82:54:02:9f:fd:5c:69:aa:21:5d:2d:
                    1f:40:ff:7d:ad:bd:c4:4b:72:54:40:bd:ed:f5:e3:
                    73:77:25:57:ef:89:4c:a2:73:3a:d3:2c:25:f9:2d:
                    bb:b0:40:57:89:e6:1e:95:9b:58:cb:a4:85:2b:33:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:73:40:BB:8D:1F:11:6E:17:D2:CA:1C:14:59:B1:8B:7B:01:31:0C
            X509v3 Authority Key Identifier:
                keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:2f:e2:c2:b9:d4:41:79:95:81:67:14:82:f6:70:88:c2:
         6f:84:87:ee:3f:65:0f:35:40:3f:95:aa:03:ff:74:b5:90:06:
         15:0b:f3:40:65:9e:71:c0:00:af:8d:66:0c:06:9e:d0:27:08:
         50:92:51:45:44:3d:b9:c3:12:8e:a2:5a:23:81:ef:ad:98:ea:
         1b:74:bd:54:82:20:cb:c6:b3:b9:86:fc:94:86:3a:da:87:3c:
         b1:6b:a0:76:30:6f:c9:6b:ed:08:ab:8c:f8:49:e1:ba:aa:d5:
         ea:80:61:c4:01:db:f7:54:c9:33:78:ce:05:ee:63:42:14:8d:
         8b:7f:d0:45:ba:3c:86:fc:43:f2:db:45:11:bc:ef:06:18:c4:
         11:fa:59:34:88:cb:8f:44:84:bb:4e:1e:77:40:de:aa:8b:9a:
         b8:d9:a6:7f:39:78:59:61:de:dc:4c:bd:a3:e0:cc:8b:83:be:
         48:44:ae:82:68:ce:be:21:36:40:44:f0:b6:42:f7:98:b2:7c:
         2d:d6:3a:e6:be:47:a7:57:d1:ee:6c:5c:9a:0b:62:66:ac:1e:
         93:c5:f9:a2:b5:89:d3:ad:cc:aa:ab:aa:87:8b:db:47:84:f1:
         8b:9b:c0:e0:f5:66:cc:91:30:a4:a4:0c:50:de:2f:39:d9:9f:
         d0:00:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:23 2026 by rpki-client