Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File:                     5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier:          iX4LCSbPb4LXj/x7NGnghj9iAjNoyc2YOWysqeeem94=
Subject key identifier:   E4:52:54:47:02:8B:8C:D2:4D:A4:32:5B:B9:8B:BC:CE:3B:59:E4:8E
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer:       /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial:       019EC06D70875464F2FA8266153C7FEDAFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 10:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:58 +0000
Files and hashes:         1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: HcjWMK+Yx5Nu1sJtZHdEyf/E9UVEWMFzXdivBx8cq3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:70:87:54:64:f2:fa:82:66:15:3c:7f:ed:af:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
        Validity
            Not Before: Jun 13 10:00:58 2026 GMT
            Not After : Jun 14 10:00:58 2026 GMT
        Subject: CN=e4525447028b8cd24da4325bb98bbcce3b59e48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:b3:4d:01:97:d0:36:3d:ee:97:da:8c:73:
                    bd:f7:9b:b2:42:2e:2b:60:8d:8d:11:1e:9f:12:08:
                    42:5b:c7:ff:cd:50:25:d8:db:a3:38:98:05:9e:81:
                    ad:ed:d7:7c:a8:d1:cb:92:0f:a8:3a:22:e2:90:27:
                    98:00:32:bc:86:b3:14:54:c3:99:39:25:48:56:46:
                    0c:ab:bf:55:6c:91:d7:64:20:54:00:5f:8a:b4:47:
                    51:cb:ad:a3:3e:f5:95:55:e5:90:cb:8d:39:5f:51:
                    e7:43:aa:ba:78:17:63:bd:99:4c:94:66:c3:6f:a7:
                    21:e2:be:f2:27:e3:58:31:02:c6:fe:fa:3c:80:b4:
                    66:ea:48:d1:6e:eb:37:f9:2f:1a:f2:aa:1b:c8:f6:
                    31:94:4b:bb:10:28:d1:6c:a0:7f:5f:1a:ba:01:c2:
                    88:21:17:96:1b:8a:10:ac:5c:11:63:17:2f:cc:aa:
                    23:67:e1:fd:44:24:2d:9f:31:b8:55:c6:18:d3:df:
                    58:aa:b8:dc:c6:41:75:69:17:e2:24:55:c3:01:aa:
                    70:7d:60:1e:05:a2:22:31:37:d0:22:23:f2:a9:5d:
                    ab:a8:94:08:4c:6b:c5:25:ad:d3:b6:c5:ab:c7:b7:
                    09:63:df:9e:ed:0e:c9:e7:df:80:d4:c6:b2:57:93:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:54:47:02:8B:8C:D2:4D:A4:32:5B:B9:8B:BC:CE:3B:59:E4:8E
            X509v3 Authority Key Identifier:
                keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:bf:96:e0:6c:d3:c5:8b:0d:db:5d:41:59:90:1c:4c:a2:
         53:4e:c9:f7:04:36:be:7b:3b:4a:1c:51:5a:16:28:0a:b1:1c:
         00:7d:98:c3:55:4b:c8:26:eb:12:00:a7:40:e6:c9:f9:f8:02:
         c1:fc:3c:62:eb:b6:70:10:14:63:ce:9a:06:d8:72:a4:7c:e9:
         30:82:66:5a:ac:89:7a:ca:2a:ec:ed:6e:35:eb:dd:e7:99:ce:
         60:a1:57:39:dc:e8:41:6f:cb:03:cd:88:db:f3:2b:4f:f6:25:
         9b:72:71:91:bf:a2:41:eb:ee:9a:86:2c:67:48:b9:1c:09:f1:
         e2:73:66:65:d8:7d:21:6c:5f:78:f7:72:e3:33:f0:33:e0:d3:
         73:f7:8f:c6:47:2a:c3:4c:93:b8:c8:f7:66:8c:b4:62:ad:d8:
         1b:21:ce:3b:72:44:b1:f9:86:28:67:35:5c:48:06:41:ad:92:
         aa:ae:9c:b2:9f:f6:30:bd:f9:b6:f8:3a:17:24:a2:02:a9:57:
         f8:94:09:f7:9a:18:58:fc:2b:1f:2f:92:43:d9:76:62:12:b7:
         1d:b8:ae:b4:83:cb:23:93:5c:a9:82:84:c1:a7:61:78:a6:ff:
         de:73:23:b5:ab:49:ac:3e:e8:72:cd:6a:f9:8b:be:19:ac:d9:
         81:e5:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:04 2026 by rpki-client