Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File:                     5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier:          u0KEzOPdnh6aQdE/ODClzCGQbwSYbLlJ/eFdesH6ugo=
Subject key identifier:   B4:6B:89:76:E6:CB:DD:BF:44:66:7E:B6:BD:AA:40:97:85:DE:9F:A8
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       019EBF5AF755C7962315FE28A2B47866707F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number:          1553
Signing time:             Sat 13 Jun 2026 05:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:10 +0000
Files and hashes:         1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: h32Zz6eh3/5uQ9Oiy3I2fXmCaJodgclleho2m6dd80g=)
                          2: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
                          3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:f7:55:c7:96:23:15:fe:28:a2:b4:78:66:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Jun 13 05:01:10 2026 GMT
            Not After : Jun 14 05:01:10 2026 GMT
        Subject: CN=b46b8976e6cbddbf44667eb6bdaa409785de9fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:38:7c:3c:02:da:f3:24:81:e2:31:28:9d:
                    5b:53:80:d2:ba:c4:19:ec:32:c4:1b:13:44:2c:70:
                    bd:89:b4:ed:1b:0b:32:10:d6:a2:cc:f6:1d:2e:e0:
                    fd:ad:be:fd:94:5b:9c:7f:7c:b8:67:0d:31:3a:0a:
                    c6:ca:28:b2:8b:0a:76:5d:d1:37:69:7b:1e:a6:cc:
                    ea:20:68:88:c6:d0:23:d8:3e:18:c3:3a:d5:c8:5a:
                    e7:84:7b:e9:b7:dd:70:b0:ca:23:5e:6f:7d:22:54:
                    c4:42:0b:46:a8:cb:5d:c4:da:21:c0:46:5d:4e:50:
                    69:ec:bb:15:44:42:38:66:43:57:c0:1c:e9:7f:ee:
                    8c:32:a7:bd:49:26:f4:a4:4a:be:33:aa:d6:d5:f4:
                    56:20:5f:a8:4b:df:ee:d2:4b:4e:de:94:27:9f:93:
                    5b:2f:34:55:9d:86:97:a9:89:3d:90:0e:7d:5d:82:
                    00:23:b8:02:82:79:20:d0:00:cf:fa:0b:ba:a9:b2:
                    56:35:a0:fa:1a:79:46:56:59:d8:83:82:45:e8:1b:
                    f6:4b:d6:3b:9f:78:d9:d3:3d:34:ba:3c:70:e3:b5:
                    b5:35:98:00:a5:2c:92:99:2f:40:71:6a:8d:ec:1c:
                    2f:fd:af:9b:45:98:5e:5d:0b:69:7d:40:01:19:c4:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:89:76:E6:CB:DD:BF:44:66:7E:B6:BD:AA:40:97:85:DE:9F:A8
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:20:9a:66:1a:17:13:3d:35:b1:6c:2b:d3:ee:25:16:cc:01:
         7c:88:49:d6:a5:e7:94:97:a3:46:c0:5d:38:c8:df:09:33:a6:
         cc:61:5f:1f:05:f6:12:a9:9b:8e:b4:dd:ba:32:92:95:61:27:
         61:81:44:14:dc:81:9e:08:54:2b:dd:7e:9c:45:81:38:9c:38:
         54:d4:d1:1a:10:b6:46:60:e9:da:1a:0a:02:40:35:51:1a:8d:
         22:0a:be:22:db:1e:6c:b3:c9:51:40:c8:bb:88:bd:bc:13:8b:
         3c:15:e0:af:a6:81:55:43:62:8f:82:42:5e:d7:78:c4:4f:30:
         d2:8c:ed:d6:1d:2e:82:e7:41:8b:e6:61:aa:fc:7f:f8:70:98:
         a3:45:ba:ce:77:b1:24:48:80:1d:3f:7c:18:62:e7:63:f3:8b:
         92:cd:fa:d5:25:d8:f5:ae:74:b5:9e:ca:44:36:e7:9c:20:1c:
         ae:85:1a:64:f4:6b:69:69:26:5c:a6:2f:84:5d:06:9b:e9:06:
         d7:10:e3:04:d5:05:21:a0:28:b8:4b:e9:ff:65:19:7f:ef:ce:
         2e:36:0a:75:63:0d:8c:89:f4:94:57:7c:13:85:0a:d3:30:62:
         e8:71:88:62:c8:ed:ec:8b:8c:2a:37:3d:22:12:92:d2:54:62:
         a3:10:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:19 2026 by rpki-client