Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File:                     5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier:          XtFlPXzDO74PqhS/OJqq15n7HUL2dEQph/OGsU1Me+s=
Subject key identifier:   78:70:41:E5:CC:36:A4:C4:A4:A0:86:0D:ED:CE:43:15:C2:C1:8F:EC
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       019EC17FBE868E642279120CB26B7F7AC7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number:          0F62
Signing time:             Sat 13 Jun 2026 15:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:34 +0000
Files and hashes:         1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: QlygneATRJk8WyrrqIfvaPndYfjMmqLqIlf0/Xpt0rM=)
                          2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:be:86:8e:64:22:79:12:0c:b2:6b:7f:7a:c7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Jun 13 15:00:34 2026 GMT
            Not After : Jun 14 15:00:34 2026 GMT
        Subject: CN=787041e5cc36a4c4a4a0860dedce4315c2c18fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:6b:e1:14:47:48:db:ac:e9:dc:0a:69:73:
                    e3:dc:ba:c3:38:a9:6f:87:9a:98:ce:15:95:e4:ac:
                    71:01:3f:c3:bf:3c:76:6e:e8:39:df:bf:7c:5a:21:
                    44:be:8c:36:a0:b1:6f:41:a5:97:8c:cd:e8:b5:62:
                    93:5e:9f:94:72:96:41:12:5a:f7:3d:e5:d9:84:8a:
                    70:5f:3a:db:ef:ac:84:f9:32:2d:d7:70:84:45:15:
                    ac:5c:90:7c:ba:26:d9:f9:9d:08:7e:9e:16:fc:27:
                    c7:42:2d:e6:07:b2:5d:cf:5a:b5:47:e9:4c:a4:78:
                    09:30:13:d3:8d:48:ae:4b:f1:ac:59:d3:a5:a3:a1:
                    c3:08:0d:d3:a1:c0:74:ca:31:06:de:6b:95:37:76:
                    a6:7b:3a:fb:37:78:19:68:4d:35:7f:95:7c:3c:7a:
                    ac:92:39:7e:61:19:f3:95:5a:ae:89:3d:3d:c2:c4:
                    f5:f0:00:86:48:5b:9b:e2:8f:a9:34:bd:02:bf:15:
                    c7:cc:5b:4f:d0:9d:4b:e2:52:39:86:82:bc:d5:ed:
                    e6:cd:55:87:a8:fa:b1:c9:2c:fc:32:67:15:6e:1e:
                    1c:5f:99:22:a6:43:be:b7:44:c9:d3:f7:95:f8:d1:
                    6d:83:29:ec:25:af:2c:13:6c:b2:5a:5e:b3:1f:9d:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:41:E5:CC:36:A4:C4:A4:A0:86:0D:ED:CE:43:15:C2:C1:8F:EC
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:f4:3a:b4:b2:5f:aa:0d:f7:7e:86:f8:16:9a:57:ba:95:
         97:eb:98:ed:03:bb:17:63:06:c0:7a:b6:20:fc:c7:4a:2f:9b:
         a5:ff:ea:40:46:d0:1d:1d:be:9c:b1:7e:59:a2:18:8b:e4:f1:
         01:d5:bc:3b:6a:b0:f3:da:d1:90:28:41:c9:91:da:13:53:ce:
         16:98:17:87:8c:c0:82:e7:ed:3f:60:9c:b6:e9:d8:1f:32:ed:
         4b:d5:81:c8:96:0a:55:c5:14:e7:db:90:73:e9:5b:01:6f:5d:
         43:6a:b0:c1:fa:88:f2:40:82:e5:7d:ef:3c:50:15:54:d3:83:
         5e:86:eb:77:93:78:80:d2:5d:fe:1a:30:43:81:4d:3f:aa:50:
         d7:1a:5a:c0:d8:45:0b:58:78:b1:bd:90:2d:39:1e:76:85:45:
         15:07:1e:4f:72:56:36:77:30:81:f4:65:51:3f:75:48:01:d4:
         24:bb:ce:97:c6:03:df:d9:f5:81:52:e8:c1:d1:31:09:ed:18:
         c2:6e:11:87:c6:29:e7:74:2a:89:f8:15:f7:38:2a:0b:4d:b0:
         9e:8a:98:ea:5e:7d:54:09:bb:23:8d:30:b8:43:cf:00:98:c2:
         4b:82:19:25:26:b2:f0:82:77:fd:6e:4a:19:f6:2d:5e:e4:b2:
         98:73:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:11 2026 by rpki-client