Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File:                     5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier:          3dXNsaV9XfgJc24zshxat0S9l1+SwAvad9lvhFQJF8A=
Subject key identifier:   63:8E:37:34:E9:1F:30:BF:09:DB:10:1C:44:F5:74:5B:4F:49:63:B0
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer:       /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial:       019EC3A55590649454F3388C70EADD72F4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number:          0194
Signing time:             Sun 14 Jun 2026 01:00:52 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:52 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:52 +0000
Files and hashes:         1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: GsqLYhVBydc/kisrt3jGKnZNWcRr9gUTrEetd0QRbWU=)
                          2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:55:90:64:94:54:f3:38:8c:70:ea:dd:72:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
        Validity
            Not Before: Jun 14 01:00:52 2026 GMT
            Not After : Jun 15 01:00:52 2026 GMT
        Subject: CN=638e3734e91f30bf09db101c44f5745b4f4963b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:0e:ad:f5:4f:33:81:0b:bd:cb:c8:2b:8b:
                    e3:a2:3a:db:f1:5d:79:c8:5c:e3:14:24:12:e1:5f:
                    90:a2:6f:19:97:2c:25:f3:52:c7:f1:3a:f1:11:7e:
                    f9:07:0a:fc:c0:eb:a3:59:9f:86:62:76:10:20:67:
                    fb:91:bd:2a:29:da:ee:71:ba:ef:23:4d:97:72:53:
                    8d:cb:1b:48:b8:83:84:26:12:26:ee:9d:16:e8:7d:
                    e1:41:c3:af:33:48:29:0b:8c:af:d4:fd:a3:d9:09:
                    11:59:62:23:e2:67:4f:c2:bd:88:4b:64:6a:07:06:
                    38:8d:eb:dc:64:a4:35:5f:fd:1f:ca:76:72:43:e1:
                    88:95:07:4f:41:e0:06:cd:44:4f:4f:b5:6a:3c:62:
                    e7:f5:78:e2:d5:3e:61:97:2f:a6:0e:3f:a8:e7:96:
                    85:82:cb:6b:1e:86:33:4b:0c:2c:d7:04:3e:06:83:
                    3c:26:2e:83:6c:1e:d4:42:a7:06:4a:27:8f:4f:b0:
                    02:a7:a7:81:10:54:68:b6:b3:a3:45:64:7d:60:9e:
                    6b:69:be:fb:69:72:c6:9c:ce:73:87:58:c0:64:88:
                    8b:26:aa:09:10:5c:5d:50:f0:59:c7:d7:5d:87:c1:
                    37:56:36:bd:bd:5c:f3:59:32:48:ba:03:55:8f:73:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8E:37:34:E9:1F:30:BF:09:DB:10:1C:44:F5:74:5B:4F:49:63:B0
            X509v3 Authority Key Identifier:
                keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:c7:5d:f7:7c:4b:33:12:be:ef:8d:8b:ab:41:f8:72:31:
         db:28:c5:77:88:8d:dc:c2:ee:a1:21:de:4d:54:49:b6:71:e5:
         8f:82:ba:bc:a5:8a:2f:77:b5:36:aa:d0:47:dc:ce:52:da:58:
         b8:4d:82:5b:27:7f:dd:2d:6a:52:2b:1a:8f:c3:3d:d1:74:8c:
         93:de:48:e1:72:fe:9e:b1:c1:98:09:57:d0:4e:32:15:7c:d8:
         d5:c6:bf:35:ff:f2:e8:7a:bd:8e:5d:e6:50:7b:9d:f2:5d:54:
         1e:3a:09:50:14:79:8c:d5:54:eb:8a:b9:b9:91:54:8b:15:8e:
         dd:61:6b:fd:88:4c:9b:a3:da:10:5d:ef:32:5a:9f:68:af:61:
         5a:f1:28:a9:b0:89:84:16:fd:33:17:b6:1b:3d:0e:f8:98:ad:
         46:61:a9:2e:34:e0:0b:2f:56:3d:73:01:94:7e:94:f5:f0:a2:
         dd:39:a0:d2:40:fb:72:6c:e0:39:67:df:a6:d7:17:82:d6:37:
         5c:22:41:e4:d9:58:6b:d9:a1:65:e8:e6:3f:53:73:be:40:15:
         d6:68:36:3c:43:39:31:8d:4f:05:95:65:39:5a:07:70:d1:f1:
         03:6d:b5:98:32:db:63:d0:b4:7b:46:17:37:2f:de:df:4f:c3:
         69:f7:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:07:44 2026 by rpki-client