Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          8gY8+e3PmqvLEUYTXq6p4wwlkbGxnc8kyq8ySmyBIhU=
Subject key identifier:   52:95:45:64:D9:63:D3:5B:99:29:AA:E8:D0:89:46:C9:1B:4F:5A:19
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       019EC0A4329CAE9ED1D1819E6187CDEE4188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          0C14
Signing time:             Sat 13 Jun 2026 11:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:46 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: gbpwV+LaqgLw38l1gGDV8rm03H1pwJbzbmzY8A2KfUQ=)
                          2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:32:9c:ae:9e:d1:d1:81:9e:61:87:cd:ee:41:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Jun 13 11:00:46 2026 GMT
            Not After : Jun 14 11:00:46 2026 GMT
        Subject: CN=52954564d963d35b9929aae8d08946c91b4f5a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:03:0b:43:63:05:f5:32:6c:26:98:42:fc:
                    61:1e:69:00:c8:4e:d2:e9:47:13:46:27:86:b9:3b:
                    cc:c5:c1:9e:f4:58:62:94:f6:60:05:35:c3:e9:a4:
                    fe:ef:ab:fe:2c:1c:8a:c9:45:31:99:e1:c3:1d:f1:
                    f3:80:4b:fc:29:56:db:8c:15:5d:ca:fd:99:e5:57:
                    21:36:9c:bd:ce:89:a6:af:73:90:8d:04:a3:d3:30:
                    be:b4:83:e2:9b:64:d4:03:75:b1:51:57:24:7c:b9:
                    66:6c:06:d3:76:5b:3b:3f:09:a8:41:05:f0:7b:a3:
                    bf:89:b7:9a:8b:4d:2c:60:12:69:4f:e6:4a:07:3f:
                    d4:6c:d7:90:73:3a:86:f8:b4:c3:9a:d0:ec:c0:a5:
                    a8:17:cf:2b:9b:21:1e:9a:ba:ca:ea:10:a2:1d:79:
                    3c:0d:51:dc:0f:bf:e7:c9:00:fe:ae:df:ee:f7:61:
                    e5:80:15:37:10:29:57:17:e1:c2:3b:fd:de:62:ff:
                    7f:96:51:f5:43:b4:ab:61:ed:09:33:e6:43:ee:b1:
                    74:d5:ad:2c:0c:2d:1d:04:e7:0e:b9:4a:55:8e:34:
                    86:22:90:cd:e5:ab:cc:ef:28:93:ab:69:c6:58:f4:
                    51:bf:5e:08:e0:70:72:12:86:da:d7:8e:c8:1a:01:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:45:64:D9:63:D3:5B:99:29:AA:E8:D0:89:46:C9:1B:4F:5A:19
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:eb:05:a4:96:b8:44:15:56:fd:7b:6d:48:0b:f9:b2:13:
         a8:7f:c3:44:f7:a3:ed:51:b4:48:e2:36:16:e5:15:66:15:7d:
         de:5f:6a:ff:33:8b:04:fd:85:75:38:fb:50:94:50:39:e0:0d:
         ee:b2:cf:8e:15:dd:11:3c:6a:46:37:e9:ad:84:6c:33:32:72:
         ee:95:d6:7b:a5:65:69:15:86:3a:d4:b3:55:63:b6:37:94:be:
         69:28:d6:31:e7:89:a0:fa:88:89:1c:85:45:09:90:d8:d5:32:
         8f:9b:04:0e:09:69:f7:df:0e:e7:41:92:6e:78:0e:41:b8:5f:
         e9:a2:66:17:0d:5c:24:24:04:da:e1:02:52:c6:40:e1:8b:cc:
         ce:f1:7c:6d:7f:d8:3b:f3:1e:c9:08:9c:3e:0c:84:51:58:44:
         7f:ff:71:3c:86:0a:0c:43:7e:fe:51:77:f3:4f:7c:d4:9c:0b:
         c7:e2:60:d0:c2:9a:cc:1a:3b:c3:d0:c5:da:8e:3e:41:42:b7:
         91:66:7d:fe:2a:bf:ff:79:fb:b3:36:73:89:7b:38:d0:f6:63:
         8c:9c:b6:0d:7c:d7:bc:8f:3f:78:08:9a:77:22:e0:03:a7:57:
         33:36:e2:ad:a6:ea:f4:2e:48:f0:fe:fb:85:bc:23:23:1d:a0:
         66:b8:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:08 2026 by rpki-client