Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File:                     5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier:          zaPlGMQR68dpUv+dZPeb2ojymh/7XjWUPV8LMfqVKCA=
Subject key identifier:   DB:70:14:A5:CF:31:70:F1:1F:8B:2F:D8:CF:83:27:33:1B:53:22:05
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer:       /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial:       019EBF913A3973CB8411226BD94A9C9301C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number:          17A0
Signing time:             Sat 13 Jun 2026 06:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:26 +0000
Files and hashes:         1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: Z5QEIfFSZR3TXWs0MPbCVOCFTtFUD7foGdfbBy8E+b0=)
                          2: 660vFFGpn8clSWO6FY_HjESqHac.roa (hash: PavhF4oz19TrgmDV4DTkSyfBE4qBlY8WfjSQlelqWBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:3a:39:73:cb:84:11:22:6b:d9:4a:9c:93:01:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
        Validity
            Not Before: Jun 13 06:00:26 2026 GMT
            Not After : Jun 14 06:00:26 2026 GMT
        Subject: CN=db7014a5cf3170f11f8b2fd8cf8327331b532205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:89:43:8f:77:11:fc:93:d8:d2:11:e9:24:
                    35:7c:a0:04:bb:60:14:bf:b5:91:a6:46:43:0b:03:
                    c9:87:d8:b1:5f:95:5b:98:c8:95:be:04:cf:c5:34:
                    85:4c:53:e9:5e:c7:30:18:6c:8f:5f:d3:6b:fb:f0:
                    40:d6:36:c3:8d:b9:4a:73:d5:1a:82:6e:c3:26:c0:
                    74:04:2b:18:a6:99:db:07:7f:51:08:59:ff:48:f7:
                    c4:f8:46:c4:4b:51:aa:f4:78:2a:2b:ab:4b:bc:12:
                    13:ae:37:d6:37:c1:bd:6f:5f:a6:b7:66:6c:f6:f2:
                    a2:3c:a1:f6:52:88:67:cc:12:0d:bd:ea:f0:c6:63:
                    d6:d2:90:c2:e7:e6:af:4a:40:3a:2f:16:0f:a2:a6:
                    38:a3:d5:39:c7:b8:7a:eb:b3:4f:25:73:42:5e:b1:
                    6b:26:c4:0b:1f:c4:94:a9:4e:30:a5:a8:c7:58:cb:
                    34:53:12:8c:b9:26:22:20:0f:af:28:74:c5:80:91:
                    4c:79:4e:be:e0:ec:6d:75:b6:85:45:15:de:96:1c:
                    bc:92:88:6e:ff:13:13:59:73:71:2c:02:a9:e8:45:
                    22:a5:cb:bd:31:2f:c4:43:f3:6b:cf:58:b1:21:3e:
                    4b:20:17:c0:8c:49:bf:42:ba:c2:2a:c3:cf:e3:07:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:14:A5:CF:31:70:F1:1F:8B:2F:D8:CF:83:27:33:1B:53:22:05
            X509v3 Authority Key Identifier:
                keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:cc:12:cf:b0:af:4e:ec:2f:fa:2b:d0:8d:8e:8d:60:23:
         b3:6a:f6:e2:5c:4b:6d:4c:0c:ad:9e:28:57:28:a5:b2:e7:40:
         23:ef:f9:c4:96:7f:3f:d4:1b:bb:0c:9f:a2:2e:3a:de:d2:ba:
         0f:60:59:f7:d0:4e:20:5b:05:25:a1:e5:f4:6d:90:13:66:0f:
         25:5a:75:54:61:40:f0:78:13:26:07:8b:16:05:42:77:07:a1:
         96:49:9a:d4:ca:73:a9:ac:d2:11:ca:ce:3e:71:9b:ca:3c:57:
         98:69:a7:86:50:86:95:3d:57:a2:a7:99:99:69:93:d2:22:b7:
         cb:b4:e2:bf:93:1b:ca:0b:01:60:bc:5b:00:27:59:ec:bc:03:
         4a:54:e3:7a:01:37:ca:d8:b2:7c:52:8c:39:77:07:4e:1e:f0:
         47:a0:05:41:cc:79:6f:15:5e:12:18:e8:a2:be:34:db:3a:af:
         79:fb:02:b3:fc:6f:44:94:9f:66:c2:75:c0:92:a7:fb:19:74:
         73:2f:0d:00:76:94:d8:c8:41:f4:a1:12:31:e2:ff:07:45:7a:
         71:e8:87:7f:b4:02:7b:21:60:15:26:76:19:8e:83:a5:73:56:
         68:2e:e3:ef:1f:8b:e1:4e:10:8d:c2:71:60:5d:0a:7c:83:f9:
         9f:40:2e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kTo5c8uEESJr2UqckwHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzlmZmYyZjhlZDBkNjVhYWQwYjk0ZjgwMzZmMmVlMWFl
ZWVhMGEwHhcNMjYwNjEzMDYwMDI2WhcNMjYwNjE0MDYwMDI2WjAzMTEwLwYDVQQD
EyhkYjcwMTRhNWNmMzE3MGYxMWY4YjJmZDhjZjgzMjczMzFiNTMyMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuCJQ493EfyT2NIR6SQ1fKAEu2AU
v7WRpkZDCwPJh9ixX5VbmMiVvgTPxTSFTFPpXscwGGyPX9Nr+/BA1jbDjblKc9Ua
gm7DJsB0BCsYppnbB39RCFn/SPfE+EbES1Gq9HgqK6tLvBITrjfWN8G9b1+mt2Zs
9vKiPKH2UohnzBINverwxmPW0pDC5+avSkA6LxYPoqY4o9U5x7h667NPJXNCXrFr
JsQLH8SUqU4wpajHWMs0UxKMuSYiIA+vKHTFgJFMeU6+4OxtdbaFRRXelhy8kohu
/xMTWXNxLAKp6EUipcu9MS/EQ/Nrz1ixIT5LIBfAjEm/QrrCKsPP4wd9CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtwFKXPMXDxH4sv2M+DJzMbUyIFMB8GA1UdIwQY
MBaAFOXJ//L47Q1lqtC5T4A28u4a7uoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2Qt
OWZhYTYyYTFmMTc4LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2QtOWZhYTYyYTFmMTc4
LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS7MEs+w
r07sL/or0I2OjWAjs2r24lxLbUwMrZ4oVyilsudAI+/5xJZ/P9Qbuwyfoi463tK6
D2BZ99BOIFsFJaHl9G2QE2YPJVp1VGFA8HgTJgeLFgVCdwehlkma1MpzqazSEcrO
PnGbyjxXmGmnhlCGlT1XoqeZmWmT0iK3y7Tiv5MbygsBYLxbACdZ7LwDSlTjegE3
ytiyfFKMOXcHTh7wR6AFQcx5bxVeEhjoor402zqvefsCs/xvRJSfZsJ1wJKn+xl0
cy8NAHaU2MhB9KESMeL/B0V6ceiHf7QCeyFgFSZ2GY6DpXNWaC7j7x+L4U4QjcJx
YF0KfIP5n0AuqA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:43 2026 by rpki-client