Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          CmYd07dYHmos8OMD1QnuTIjNBswttwRHWS4C7AQxMHc=
Subject key identifier:   E3:74:67:B9:26:22:A6:51:AE:4A:F6:05:29:C9:6A:97:87:65:E1:F7
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019EBEED39E7FBC7DD1E0409C351384A357D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          1717
Signing time:             Sat 13 Jun 2026 03:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:18 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: UDlx2K89Ztz2zD1sQ7HTEqfkpoTgbRON4/afH+Q+h44=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:39:e7:fb:c7:dd:1e:04:09:c3:51:38:4a:35:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Jun 13 03:01:18 2026 GMT
            Not After : Jun 14 03:01:18 2026 GMT
        Subject: CN=e37467b92622a651ae4af60529c96a978765e1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:33:de:de:19:54:56:7d:ca:1a:f4:3c:07:
                    49:17:01:83:6d:bb:3b:e2:ea:f7:2a:aa:53:3a:46:
                    e9:6b:1c:83:d7:a4:61:5b:ea:87:e3:0d:3f:37:9d:
                    f1:df:9e:ca:10:3b:8d:f4:14:0e:f6:5f:09:0a:e8:
                    7e:2c:ae:45:17:e1:db:2f:e4:cb:b3:d1:a8:80:88:
                    b5:9e:95:a8:ec:5f:01:81:a0:58:48:e9:31:4f:2d:
                    de:06:51:ec:2e:d2:5b:4f:b4:81:ed:ed:95:c5:5b:
                    be:81:77:c6:10:74:90:1f:03:46:f5:e8:6d:37:f7:
                    46:ba:9c:62:0b:37:8a:e5:fb:29:b6:15:43:3b:91:
                    e7:e7:6c:be:21:0c:00:02:1d:bd:43:04:d0:b6:3b:
                    a3:09:58:98:eb:91:d0:46:af:73:62:d8:c9:32:cb:
                    b1:d6:e0:e2:bb:23:58:1d:45:e4:d7:7c:fd:0d:b6:
                    f7:3c:c8:42:76:9b:94:d5:f3:a1:7d:b0:36:ec:ec:
                    f0:91:fe:51:27:ec:82:62:86:ec:75:da:2e:63:7a:
                    02:0d:d7:0d:7a:4c:73:a9:d0:01:da:5f:9b:4c:f3:
                    f2:d4:40:74:ac:68:87:88:db:ab:0c:89:cf:3b:cf:
                    55:0e:e7:8b:b7:c4:7e:aa:dc:87:38:a8:16:2a:27:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:67:B9:26:22:A6:51:AE:4A:F6:05:29:C9:6A:97:87:65:E1:F7
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:be:16:5d:9e:8b:5c:70:5a:56:20:97:f8:af:5e:78:08:
         d5:77:9b:89:84:ba:b1:0b:67:db:6f:32:6c:a2:85:0f:22:45:
         f3:5b:9d:c3:33:a4:d2:99:bb:78:cf:46:84:d4:00:b8:39:89:
         0e:e8:85:c4:5e:26:cc:b2:46:b0:0d:4f:9b:36:7f:50:ed:84:
         3e:15:43:52:4f:09:d5:3b:1e:14:3d:1b:30:4f:80:63:d9:d1:
         3c:e8:d8:5e:d6:e3:bb:66:48:73:e9:ce:20:09:a8:a6:53:2a:
         68:6a:3b:fd:de:c4:24:73:1d:85:07:d8:67:8b:a3:96:4f:7b:
         05:fe:41:c3:bf:7a:5e:6c:89:39:d8:9c:fb:b3:c8:ea:ca:0d:
         a7:fb:3c:53:e0:58:83:7b:33:00:c6:0d:70:a2:a6:66:53:b8:
         d9:5e:ab:90:8f:a7:fa:00:12:11:36:ce:92:88:5b:87:5e:87:
         4e:5a:9e:05:ee:90:44:3d:db:64:a6:f4:d1:60:7f:ac:3f:2f:
         6a:fb:cc:e9:e7:1d:ca:a7:6e:8d:47:49:b9:2e:84:97:10:73:
         b9:37:ae:ba:5b:c0:3a:e7:8f:5f:85:69:3c:80:4f:4c:1d:3b:
         9b:fe:ba:76:0d:f4:2f:de:85:82:e9:92:56:6e:8e:ae:4b:75:
         b4:4b:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:40 2026 by rpki-client