Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          V74i+sYid9XMrEdj7FZKVctv00+4MbI4HkMlQfQrIgI=
Subject key identifier:   47:89:0A:C3:19:B7:6C:D5:8D:14:2C:06:42:E9:CB:D6:A3:10:7D:91
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019EC0DBAE63D0B4EDF1B363106C6A4154E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          1249
Signing time:             Sat 13 Jun 2026 12:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:22 +0000
Files and hashes:         1: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (hash: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ=)
                          2: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: heQCy8ivz+srx9FVGMWFSNaTCUURQ9BT25nBGE6/mcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:ae:63:d0:b4:ed:f1:b3:63:10:6c:6a:41:54:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Jun 13 12:01:22 2026 GMT
            Not After : Jun 14 12:01:22 2026 GMT
        Subject: CN=47890ac319b76cd58d142c0642e9cbd6a3107d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:85:5b:48:dd:7b:98:bd:a3:a0:14:48:59:
                    11:5d:a3:5d:1b:87:a4:02:7c:01:7c:26:95:9b:c2:
                    c8:f3:bb:24:00:7b:4f:c1:4c:86:b6:ad:df:03:fd:
                    c8:56:28:5e:5e:84:d2:e0:9d:a6:ac:c5:bf:34:d2:
                    cb:1e:e6:44:ae:1d:47:25:24:31:29:d3:4e:e7:1e:
                    27:65:af:d7:a3:be:6f:78:19:e5:fd:7a:3c:3c:dd:
                    b6:88:9a:5e:9d:03:d1:bb:30:ca:f9:c7:a2:c9:89:
                    46:2a:ea:bc:bc:36:30:63:7e:66:96:28:4e:37:4b:
                    1a:d2:1a:e0:95:df:e6:75:77:3e:8f:62:f8:f8:2c:
                    7a:8c:b6:f1:ff:1e:79:3d:24:db:4f:b5:ea:99:71:
                    d1:30:7b:bf:ed:55:6b:33:88:da:44:7e:c2:f4:02:
                    cf:a3:5c:02:24:15:fd:a6:02:cf:33:ef:d5:b2:3a:
                    8a:4d:1a:6f:15:d7:c0:ba:1e:5b:2c:b6:6d:d1:d7:
                    53:3c:dd:fd:20:1b:c9:a4:5c:dd:cd:6b:71:34:0b:
                    63:89:c5:23:38:b1:ec:f7:c6:c0:e5:9b:0d:d1:a3:
                    cc:44:95:4f:c9:d7:58:3d:b7:fc:89:22:16:a0:fc:
                    7f:e4:52:13:c8:99:ae:8c:dd:1c:e9:60:f3:60:7b:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:0A:C3:19:B7:6C:D5:8D:14:2C:06:42:E9:CB:D6:A3:10:7D:91
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:da:a0:1b:f7:de:00:16:6c:b8:04:76:63:d7:dc:e7:df:
         bd:a9:a6:5e:e1:1d:65:5b:1e:f4:a0:21:a1:7b:cb:cf:bb:a2:
         86:47:9f:47:be:17:4d:d1:ad:81:ed:22:d8:c5:a1:9d:3a:52:
         b7:b0:c1:c7:a4:21:1f:c6:2f:3f:de:af:5a:48:4c:80:3e:cb:
         6d:6a:9e:80:58:a2:bb:48:c2:06:6b:2c:be:06:c7:48:c5:3d:
         73:5d:4f:d5:3d:02:94:b4:19:06:fb:8a:6c:37:54:1b:32:68:
         35:fd:2c:ed:01:cd:85:fb:b5:2e:8e:48:f0:bb:17:18:9e:b8:
         9e:53:94:95:e0:04:97:52:80:5b:b0:5f:37:45:1e:61:e2:d0:
         73:fe:a6:7c:ba:e6:6a:2b:ae:12:4d:66:8f:0e:d7:a8:e0:58:
         bb:6e:ba:58:96:25:d5:58:34:d1:bf:d4:b7:98:4a:4a:ea:db:
         3a:b4:24:e5:80:e7:48:7d:85:23:c7:06:a0:ec:fc:f8:04:a5:
         c7:13:33:29:f8:f7:d0:9b:be:4a:78:5c:b9:91:40:c9:8b:ac:
         24:b3:21:33:94:e6:8f:36:bb:ed:e1:56:e0:38:e6:9c:64:50:
         c9:30:57:b8:be:a5:f2:fa:87:ba:c6:42:b8:59:fa:72:51:d0:
         c8:94:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:30 2026 by rpki-client