Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          hv9xZKucumKrmLtQELHiSTUVRUDstYpvsgPQNRQghdE=
Subject key identifier:   0F:C9:57:90:8C:31:53:27:7B:27:97:4C:70:01:32:B5:C3:13:D4:30
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       019EBEEC5BD731E66D6155AC31BC80E76269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          160B
Signing time:             Sat 13 Jun 2026 03:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:21 +0000
Files and hashes:         1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: CYEZFRNT5uqxbHUAFOg8APsl2M+mfkgf9ICUdTLiYV8=)
                          2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:5b:d7:31:e6:6d:61:55:ac:31:bc:80:e7:62:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: Jun 13 03:00:21 2026 GMT
            Not After : Jun 14 03:00:21 2026 GMT
        Subject: CN=0fc957908c3153277b27974c700132b5c313d430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:00:f1:e4:c9:92:9a:a8:a7:ad:9f:7b:b1:
                    c0:ae:d3:f2:3d:f6:44:3f:64:bb:74:a2:0e:f4:10:
                    dd:1d:7f:87:76:73:da:7d:95:2f:88:85:6e:47:6c:
                    72:90:17:0c:72:54:33:93:fb:87:73:1e:d5:9e:f4:
                    c3:13:a5:d1:c6:44:57:3e:94:d3:9e:91:bf:3e:68:
                    fb:05:6e:e0:cc:53:9d:82:a4:41:4d:88:a9:9c:59:
                    ba:49:45:03:ba:9f:77:31:9e:de:e3:bd:74:d5:80:
                    0c:e3:c5:fb:59:a8:9f:34:41:1e:5f:59:8d:5b:fa:
                    2d:f3:a7:2a:ab:d1:fe:bc:2a:8a:36:d8:68:de:44:
                    17:4f:d2:0b:89:5f:66:18:8f:72:28:bc:08:d7:19:
                    6c:b2:c4:6f:04:70:44:05:45:1f:4b:52:3a:0c:c1:
                    01:5c:76:e4:72:5d:8f:a5:f0:1c:0c:3c:a0:34:7f:
                    21:71:3f:1c:ba:9a:2c:1d:62:e2:0f:c4:d7:68:cd:
                    25:cb:87:ef:f3:10:a7:a8:81:2d:5c:5e:27:24:4a:
                    20:cc:67:86:ec:36:9b:fe:33:bc:bf:85:d7:55:c4:
                    86:c3:10:57:70:39:28:29:8e:e3:3d:15:1e:1d:46:
                    2d:60:99:4e:ab:19:3a:cf:b5:ef:f6:13:3f:0c:5d:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C9:57:90:8C:31:53:27:7B:27:97:4C:70:01:32:B5:C3:13:D4:30
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:2e:22:66:45:59:10:23:81:e4:6c:19:b4:71:68:28:cf:
         a3:f0:5d:81:0a:b3:d7:6f:86:99:de:0f:da:38:d2:a9:5e:03:
         95:16:90:13:a2:6b:a2:2d:b3:e7:a2:13:47:cb:a8:c5:3f:b4:
         4f:02:8d:c8:38:01:b5:35:32:14:79:d4:07:8f:c6:3c:b3:31:
         bd:5a:df:98:49:92:c3:90:fc:63:fc:c8:3e:2e:e3:cd:76:bf:
         a7:c6:28:c0:c8:f0:be:d2:be:a6:ca:66:e1:ca:4f:f5:c0:92:
         55:fe:8e:87:6b:ff:53:9a:a7:2c:46:db:d3:bf:11:cf:de:11:
         11:aa:cf:8d:c7:cd:de:4e:42:f8:cc:f9:f3:36:f3:e4:30:a2:
         c4:3b:18:af:66:d0:68:48:b7:b5:62:5d:62:36:c4:c4:07:5c:
         57:b3:26:9d:3b:9b:f3:40:a5:d7:b8:4a:ba:08:6a:4f:91:6c:
         09:72:ce:8d:32:52:66:e0:b9:a1:c7:4a:a5:75:9c:f0:72:70:
         22:50:62:a7:16:d7:3c:87:75:73:4a:67:5f:58:79:42:2a:ff:
         62:e0:e0:e4:e3:d6:8b:52:94:32:7d:c9:bc:c7:49:b0:65:2b:
         58:97:23:b4:9e:9f:b9:de:77:ef:49:35:37:fb:85:bb:b4:61:
         df:04:97:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7FvXMeZtYVWsMbyA52JpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0
ZTQ2ZmMwHhcNMjYwNjEzMDMwMDIxWhcNMjYwNjE0MDMwMDIxWjAzMTEwLwYDVQQD
EygwZmM5NTc5MDhjMzE1MzI3N2IyNzk3NGM3MDAxMzJiNWMzMTNkNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32YA8eTJkpqop62fe7HArtPyPfZE
P2S7dKIO9BDdHX+HdnPafZUviIVuR2xykBcMclQzk/uHcx7VnvTDE6XRxkRXPpTT
npG/Pmj7BW7gzFOdgqRBTYipnFm6SUUDup93MZ7e47101YAM48X7WaifNEEeX1mN
W/ot86cqq9H+vCqKNtho3kQXT9ILiV9mGI9yKLwI1xlsssRvBHBEBUUfS1I6DMEB
XHbkcl2PpfAcDDygNH8hcT8cuposHWLiD8TXaM0ly4fv8xCnqIEtXF4nJEogzGeG
7Dab/jO8v4XXVcSGwxBXcDkoKY7jPRUeHUYtYJlOqxk6z7Xv9hM/DF0tBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/JV5CMMVMneyeXTHABMrXDE9QwMB8GA1UdIwQY
MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt
ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz
LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkEuImZF
WRAjgeRsGbRxaCjPo/BdgQqz12+Gmd4P2jjSqV4DlRaQE6Jroi2z56ITR8uoxT+0
TwKNyDgBtTUyFHnUB4/GPLMxvVrfmEmSw5D8Y/zIPi7jzXa/p8YowMjwvtK+pspm
4cpP9cCSVf6Oh2v/U5qnLEbb078Rz94REarPjcfN3k5C+Mz58zbz5DCixDsYr2bQ
aEi3tWJdYjbExAdcV7MmnTub80Cl17hKughqT5FsCXLOjTJSZuC5ocdKpXWc8HJw
IlBipxbXPId1c0pnX1h5Qir/YuDg5OPWi1KUMn3JvMdJsGUrWJcjtJ6fud5370k1
N/uFu7Rh3wSXwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:59 2026 by rpki-client