Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          xRp6uTOGJdS6M9mR+kXS4JPKAB+VsuMiWaaNLvS0P9U=
Subject key identifier:   73:FF:E0:20:3D:F2:DE:F3:EB:11:9B:E6:71:BA:0C:83:18:E4:98:91
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       019EBFC8FC77BC7ECC8E2C44EBA91299E4CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          149D
Signing time:             Sat 13 Jun 2026 07:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:20 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: UUfUIvAlKXQWAJOOWa5IOvFRaA5VCH08i3SojwzuwOs=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: kqPwo-tGhdHXOEYZAA2rZ5T34g4.roa (hash: 4MUqRPaEDTzgXrU6Y0k0IEZ7T2M+taIszXucXEvAMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:fc:77:bc:7e:cc:8e:2c:44:eb:a9:12:99:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Jun 13 07:01:20 2026 GMT
            Not After : Jun 14 07:01:20 2026 GMT
        Subject: CN=73ffe0203df2def3eb119be671ba0c8318e49891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:bf:d6:72:05:4e:19:b7:93:22:74:39:a3:
                    fc:b2:8c:f1:7b:95:b8:00:fb:ab:c7:b8:8f:94:43:
                    ee:1a:c3:b2:81:4e:a4:e4:1b:de:72:c8:f2:2a:09:
                    de:86:8a:91:d8:64:2e:84:d3:25:69:3e:3c:6e:90:
                    58:a4:db:5f:30:1e:00:63:f1:78:e8:53:08:6f:38:
                    86:ff:ce:af:ab:df:46:85:c5:81:0a:97:91:6f:37:
                    06:7b:b4:3f:85:c3:4b:7f:76:7a:96:fc:a2:8f:ef:
                    7d:00:56:52:e6:94:c1:ac:ea:f4:40:75:d3:bc:39:
                    9b:ad:c3:4d:fa:c8:4c:a0:31:32:b6:69:49:1e:d6:
                    7c:07:11:87:b0:1e:76:5a:fa:24:ea:87:c3:1e:83:
                    c4:e9:46:d4:22:6a:ef:f2:9d:3b:20:a9:ee:3b:dc:
                    99:22:1d:8a:54:89:4b:0f:e5:97:71:96:2c:78:8c:
                    86:8c:2b:af:fd:91:81:71:66:6a:42:73:a1:de:78:
                    0b:74:8e:84:19:88:80:af:10:eb:25:32:56:56:bd:
                    0c:3a:89:eb:ae:60:87:d3:2f:31:d3:71:a7:2f:ea:
                    a5:d0:4b:a5:43:49:c8:de:76:17:bd:67:eb:ed:26:
                    e9:ba:97:36:a4:a9:a1:c3:71:b3:b1:39:c8:f4:a7:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:E0:20:3D:F2:DE:F3:EB:11:9B:E6:71:BA:0C:83:18:E4:98:91
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:64:a9:c9:e0:c5:a3:6a:81:09:45:49:97:42:a2:29:69:
         3e:d7:9e:06:aa:5f:db:c2:a2:35:00:79:91:88:ed:e3:a2:1b:
         ea:59:08:5f:9b:6b:7c:8e:4a:bb:37:26:c5:30:63:a4:6c:ec:
         6a:0c:6b:b9:d4:ed:06:71:b2:0f:28:fb:ee:f1:9b:fc:d2:12:
         87:b0:17:43:f5:de:90:dd:92:b8:83:32:4c:3b:64:99:b0:99:
         8e:64:b8:8d:02:e6:35:2c:c2:5c:24:f5:04:d1:f4:09:77:43:
         86:3c:45:b1:db:5e:0f:b1:c5:c9:a2:23:ac:85:86:a8:fa:83:
         36:22:1d:91:1d:d5:f2:59:95:a9:91:f5:09:dd:ab:be:74:96:
         20:80:15:51:bd:3b:f3:eb:34:fa:00:f5:da:a9:27:88:7c:68:
         27:5c:8e:b3:db:55:81:36:fb:d2:59:dd:34:9f:bb:25:5b:5c:
         70:b2:76:70:51:70:3d:4f:24:bd:57:44:c1:67:54:21:50:1b:
         9b:5b:b8:a1:01:ec:fb:b3:68:7d:c9:f3:ba:49:db:83:46:4c:
         f3:89:d6:e8:95:13:a2:93:38:a1:83:f2:40:dc:bf:a6:36:a3:
         d2:9f:cd:96:d9:b4:f9:7f:1f:b4:fb:80:31:ad:dd:18:14:43:
         af:55:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:39 2026 by rpki-client