Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          bTYbNawDMtImYlwxOlNvFkwQsg71d/U5+U7xswbKJsg=
Subject key identifier:   C4:80:3B:2E:BD:43:99:0D:3D:28:B5:07:53:7B:2C:14:AC:A9:B6:A8
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       019CA7FCD19AB61A64D30CC07A357AFB85AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          17D5
Signing time:             Sun 01 Mar 2026 06:01:29 +0000
Manifest this update:     Sun 01 Mar 2026 06:01:29 +0000
Manifest next update:     Mon 02 Mar 2026 06:01:29 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: bcYk2sveE82Cpn5GICbfkMtwhkzx1bHbLbu0ZF1xUMM=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:fc:d1:9a:b6:1a:64:d3:0c:c0:7a:35:7a:fb:85:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Mar  1 06:01:29 2026 GMT
            Not After : Mar  2 06:01:29 2026 GMT
        Subject: CN=c4803b2ebd43990d3d28b507537b2c14aca9b6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:3b:fc:4c:7b:a0:82:ab:21:a8:98:4f:f3:
                    ec:46:bc:28:d5:4c:aa:e8:e3:43:71:0e:97:71:8b:
                    d6:f4:e8:2a:48:ae:1e:54:56:5b:c0:e8:7b:fe:2d:
                    5c:7b:98:ef:be:9e:69:40:bc:fa:f1:80:d6:8c:27:
                    08:7f:78:23:cb:ed:c8:bf:2b:fc:4b:9d:63:ac:c8:
                    20:a3:01:d0:3a:e7:ea:1d:00:47:4d:60:27:93:77:
                    c8:1c:d4:4d:07:0d:2e:ca:03:3a:b3:c1:00:61:73:
                    05:84:f5:df:17:7c:f9:2e:49:05:4f:6b:d9:d3:0c:
                    80:de:e8:17:41:b6:2d:d8:63:67:de:db:9e:af:fa:
                    68:3f:f4:df:60:14:02:13:05:e2:1b:3e:c8:72:6d:
                    de:4a:79:4a:36:0e:99:54:83:b4:83:d2:57:6a:75:
                    6b:8e:86:9f:34:93:cd:98:ee:d1:fb:71:cc:c7:7c:
                    c6:b4:42:1d:b5:f0:08:f9:a3:cf:6e:f4:c9:d4:50:
                    a6:a3:6e:4c:85:bc:69:a7:ff:99:e0:26:a7:2a:58:
                    1e:89:f6:23:41:fe:ea:d8:a1:19:c8:7d:a0:b8:29:
                    f2:4a:40:37:be:bc:71:47:fd:96:57:43:81:f0:23:
                    26:a5:de:4a:ba:fc:91:c2:1d:a0:8d:6e:5c:14:cc:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:80:3B:2E:BD:43:99:0D:3D:28:B5:07:53:7B:2C:14:AC:A9:B6:A8
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:5a:07:f1:56:d1:93:2b:b5:62:b8:5b:73:48:a9:bd:b4:
         95:40:9a:d7:bf:de:cb:ea:18:d5:f4:30:5f:88:b3:14:90:4f:
         28:08:22:b5:04:16:a7:83:c3:57:8e:26:ba:b3:97:77:88:c2:
         bd:38:f1:b3:72:03:50:16:b1:d6:48:43:fb:0f:cc:95:63:4b:
         f6:1d:54:e3:75:fb:e2:06:79:5a:c9:f0:b3:f4:5e:79:58:51:
         14:fb:a0:f3:7f:51:00:78:5b:19:29:73:3e:f8:84:f7:fd:b4:
         12:f1:76:4d:12:b0:f0:c6:71:08:55:1f:7b:d2:48:d1:15:a5:
         1c:a7:71:a9:27:86:28:90:60:42:d2:47:e6:67:0b:4b:5a:b0:
         ec:29:b5:2d:a6:dd:a6:51:dd:e7:f3:7a:1b:a2:70:ae:1c:b3:
         c3:3a:ee:87:4a:45:68:30:88:37:a2:bf:70:20:04:49:9c:25:
         63:79:92:8d:48:1f:5b:29:22:d2:9c:46:50:79:ba:8f:fd:e8:
         c8:86:86:77:ee:80:7a:28:fe:6e:63:f5:11:de:dc:f3:ca:ad:
         0e:f8:60:92:91:c6:fa:5f:e8:5c:12:46:16:49:52:5c:1d:e7:
         45:b1:16:b9:86:4d:9a:02:99:34:a8:17:dd:80:53:82:49:f2:
         15:3e:00:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/NGathpk0wzAejV6+4WtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTdiMDM0YjRlN2NhODZkNzE2YjExNDBmY2E1YjU5MGYz
ZTc4YzAwHhcNMjYwMzAxMDYwMTI5WhcNMjYwMzAyMDYwMTI5WjAzMTEwLwYDVQQD
EyhjNDgwM2IyZWJkNDM5OTBkM2QyOGI1MDc1MzdiMmMxNGFjYTliNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uA7/Ex7oIKrIaiYT/PsRrwo1Uyq
6ONDcQ6XcYvW9OgqSK4eVFZbwOh7/i1ce5jvvp5pQLz68YDWjCcIf3gjy+3Ivyv8
S51jrMggowHQOufqHQBHTWAnk3fIHNRNBw0uygM6s8EAYXMFhPXfF3z5LkkFT2vZ
0wyA3ugXQbYt2GNn3tuer/poP/TfYBQCEwXiGz7Icm3eSnlKNg6ZVIO0g9JXanVr
joafNJPNmO7R+3HMx3zGtEIdtfAI+aPPbvTJ1FCmo25Mhbxpp/+Z4CanKlgeifYj
Qf7q2KEZyH2guCnySkA3vrxxR/2WV0OB8CMmpd5KuvyRwh2gjW5cFMzUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSAOy69Q5kNPSi1B1N7LBSsqbaoMB8GA1UdIwQY
MBaAFOXnsDS058qG1xaxFA/KW1kPPnjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEt
ODAwNzBhZjBlYjVlLzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEtODAwNzBhZjBlYjVl
LzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiZaB/FW
0ZMrtWK4W3NIqb20lUCa17/ey+oY1fQwX4izFJBPKAgitQQWp4PDV44murOXd4jC
vTjxs3IDUBax1khD+w/MlWNL9h1U43X74gZ5Wsnws/ReeVhRFPug839RAHhbGSlz
PviE9/20EvF2TRKw8MZxCFUfe9JI0RWlHKdxqSeGKJBgQtJH5mcLS1qw7Cm1Labd
plHd5/N6G6Jwrhyzwzruh0pFaDCIN6K/cCAESZwlY3mSjUgfWyki0pxGUHm6j/3o
yIaGd+6Aeij+bmP1Ed7c88qtDvhgkpHG+l/oXBJGFklSXB3nRbEWuYZNmgKZNKgX
3YBTgknyFT4A7w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:42 2026 by rpki-client