Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          0r+f/51omVQaPGSMs8ZpvfYX1NK2OyxFiCEJ1unfotk=
Subject key identifier:   DB:A8:B4:60:AB:6B:26:A2:51:04:07:58:AE:04:91:3E:D4:EE:FB:98
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       019EBDD98F5087AEC042591EB693E7C033C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0AB4
Signing time:             Fri 12 Jun 2026 22:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:12 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: mN2K2qGNFR5exkmuHlTcrm7ZUBsvpDyN/wQjPriyXYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:8f:50:87:ae:c0:42:59:1e:b6:93:e7:c0:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Jun 12 22:00:12 2026 GMT
            Not After : Jun 13 22:00:12 2026 GMT
        Subject: CN=dba8b460ab6b26a251040758ae04913ed4eefb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:cf:0c:4a:c7:20:ee:3a:67:20:a9:59:d7:
                    84:d9:74:06:da:f5:bd:94:f2:8c:16:29:eb:9d:0d:
                    1d:72:7c:c0:ef:d9:2a:62:0d:67:6e:f3:20:48:05:
                    cc:22:33:9a:d4:c6:b7:51:4c:c8:6f:b7:b5:df:d6:
                    30:b4:46:54:bb:38:04:d8:42:6f:4f:e3:05:dc:36:
                    ab:74:9b:87:44:a9:5d:19:10:a2:52:1d:33:f7:3b:
                    79:2d:a8:dc:6e:2d:bc:9e:ba:1c:7d:81:42:59:8e:
                    0e:b1:93:a5:13:20:6b:b5:79:38:da:dd:8d:7a:1a:
                    bc:9e:7b:cf:9c:5a:5e:43:3e:99:5c:84:68:b3:1f:
                    63:59:2a:14:ae:37:e4:04:5d:88:80:26:31:d4:a2:
                    0a:fa:0f:2e:df:1e:78:49:16:ea:44:39:4a:0d:11:
                    13:60:fd:b3:55:7c:ef:f8:8b:93:fc:87:66:c5:37:
                    51:93:36:27:30:29:36:bc:70:7b:0e:d5:d4:15:d4:
                    53:d0:eb:b3:c5:b7:f8:35:bd:5c:90:b9:43:84:76:
                    40:ac:5e:af:2b:47:75:b4:ff:7e:ad:3f:23:fd:3e:
                    cc:08:27:dd:d3:3c:09:1b:23:53:89:91:8e:b1:1d:
                    50:7f:86:62:54:62:a9:25:2c:7f:bb:27:f8:0c:d8:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A8:B4:60:AB:6B:26:A2:51:04:07:58:AE:04:91:3E:D4:EE:FB:98
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:99:9a:85:c7:f0:33:d1:de:58:0c:0c:48:91:31:cd:67:
         fa:97:10:e5:10:ba:c9:bb:a5:7d:36:68:2c:7f:ba:98:b5:15:
         58:32:0a:77:1e:7a:15:af:fe:35:bd:e4:ab:30:dc:6c:1a:c8:
         14:9a:6c:3d:65:8e:7a:d9:09:33:3c:b1:bc:08:45:a0:99:55:
         d0:5c:29:97:5f:cc:77:a1:12:02:6d:68:5f:66:5f:8c:90:da:
         ea:8b:1a:7c:6e:00:40:cb:b7:4b:73:98:9b:5e:f7:74:e0:c2:
         a1:a6:54:dc:d9:18:e3:6b:17:17:0c:23:b3:90:16:df:ef:60:
         59:67:61:fd:81:f5:1a:68:7d:a8:e6:3f:5f:7d:22:0a:8f:81:
         ef:10:9c:0c:10:6c:f3:74:e0:20:5c:e8:67:e5:8f:c0:be:b7:
         2b:03:05:f6:fa:7f:83:c2:fd:27:9e:9d:6f:b4:f3:a0:f4:58:
         57:25:7d:67:c0:91:31:8c:4d:25:39:ac:79:63:24:81:4b:93:
         75:13:a7:e2:1c:d6:13:4c:04:5b:17:02:c3:90:06:1f:d3:d1:
         73:73:b2:6e:71:44:30:8c:6f:63:1e:bd:a2:55:82:42:4b:fb:
         c4:c4:fe:07:40:eb:55:d2:2e:da:90:3d:88:70:08:98:7d:56:
         fc:5b:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:33 2026 by rpki-client