Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File:                     5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier:          YevrCo77LiIk/IWk4BeNjIWAvi6Z/89a9nKrXfSY0/k=
Subject key identifier:   53:04:29:73:9E:6A:39:F6:3D:9B:F7:A1:4F:1F:EF:49:F2:B3:AC:F4
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer:       /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial:       019EBF5A86312D2F2F0F5A2AF9DC9884F22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 05:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:41 +0000
Files and hashes:         1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: pGaxKkwV5+pLEZ9WKAgvEh/l7HEitXMRLP1NaJbHeXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:86:31:2d:2f:2f:0f:5a:2a:f9:dc:98:84:f2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
        Validity
            Not Before: Jun 13 05:00:41 2026 GMT
            Not After : Jun 14 05:00:41 2026 GMT
        Subject: CN=530429739e6a39f63d9bf7a14f1fef49f2b3acf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:b4:ef:18:30:36:4f:16:0f:11:c2:fe:09:
                    7a:f5:0b:66:09:b7:46:f6:27:a9:dd:d7:11:7d:58:
                    9d:75:2d:9c:c5:7f:40:12:23:e0:07:cd:01:2c:37:
                    57:14:9b:8d:d5:02:7d:8c:4d:4d:9f:2f:37:72:ee:
                    7a:36:55:9c:73:d9:68:1a:da:68:96:5a:18:cf:b3:
                    07:6a:1b:65:53:0b:40:10:94:ed:aa:33:2f:26:9e:
                    5a:65:88:00:66:71:36:c1:2e:cb:43:ae:b2:f3:f7:
                    8a:55:98:55:88:be:94:e4:63:5a:9e:52:a6:d4:4f:
                    0f:28:06:b7:51:be:93:f3:58:f5:b7:b4:86:2b:33:
                    42:76:8e:a6:9c:43:ed:87:e7:84:d9:a6:1c:5c:26:
                    36:15:94:df:de:07:6e:bc:3a:d1:92:b4:53:45:1e:
                    34:42:0c:cc:0f:c6:12:9f:ed:00:a5:b6:c0:6e:29:
                    db:e8:2e:df:a6:3b:f2:56:aa:fe:eb:93:63:28:c2:
                    40:41:09:bf:b6:08:a9:a6:bb:4e:e0:10:bd:ed:72:
                    f4:5b:d0:a5:a9:ac:8c:fc:99:d9:af:38:e8:41:ae:
                    1e:88:e4:d0:cc:30:1b:34:5a:0a:7a:45:4d:ef:94:
                    73:a1:47:bc:21:fb:2d:8d:dc:4c:ef:72:4b:71:92:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:04:29:73:9E:6A:39:F6:3D:9B:F7:A1:4F:1F:EF:49:F2:B3:AC:F4
            X509v3 Authority Key Identifier:
                keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:14:c7:75:d7:68:34:04:cf:d3:6b:eb:67:df:58:b3:1f:9c:
         13:77:ee:f6:dc:ad:43:f4:3d:a2:16:c8:09:39:27:b0:76:4c:
         16:52:2d:07:2a:14:67:2d:1b:61:b0:0c:3a:8b:90:f0:f8:b8:
         7b:63:5a:21:80:96:63:91:2e:91:4b:7f:2f:8a:a9:e9:7d:a4:
         9a:a0:f3:0e:09:39:14:2b:71:34:87:0f:af:49:b7:79:b4:15:
         e5:2f:b0:27:7b:a3:0e:5f:28:60:a7:da:79:f1:f1:63:13:6f:
         08:59:1c:59:63:18:95:fe:ab:8b:e3:c0:b8:60:18:dc:cd:48:
         3e:be:a9:98:48:26:b5:9e:d2:d2:c4:6b:b4:c6:06:8b:d5:48:
         87:04:f8:6b:e3:28:2a:c3:f7:d0:4d:79:e7:b7:6f:68:e4:78:
         4f:24:d0:78:70:79:64:03:fa:7f:1a:06:51:07:d5:22:0a:fd:
         8e:2c:83:7c:cb:9e:a0:3f:4b:9f:0c:78:32:cd:4c:12:54:ed:
         7e:3b:21:9a:de:f2:7d:c8:42:8a:b3:57:94:3c:2a:1b:28:16:
         37:24:f6:e5:16:23:ef:5f:fd:5a:23:74:ec:14:e4:e2:f8:6f:
         55:f4:72:10:fb:0a:fb:15:6b:2c:81:85:1c:b1:75:a2:5a:20:
         0f:37:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:16 2026 by rpki-client