Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          nDRDk5k3pDt9H0WU22CspSx7Hb1Ubjd/v6Tc0xipARw=
Subject key identifier:   38:B4:9B:ED:39:E8:6E:EA:D8:AA:4F:15:B5:91:37:6E:A4:66:03:6F
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       019EBF5A320D7B5F110B2772BBE457BCA427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          125A
Signing time:             Sat 13 Jun 2026 05:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:19 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: JRIkydGxGlu1r2Im6ydtlgWV/VGx+P11Z+8MvGzyKWM=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:32:0d:7b:5f:11:0b:27:72:bb:e4:57:bc:a4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Jun 13 05:00:19 2026 GMT
            Not After : Jun 14 05:00:19 2026 GMT
        Subject: CN=38b49bed39e86eead8aa4f15b591376ea466036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b3:e5:ad:69:97:d3:62:23:0b:0c:14:d3:f7:
                    46:69:23:1a:a7:ae:a8:bd:e6:a9:35:ed:a5:2c:f5:
                    72:92:23:26:1d:ce:90:f1:ad:9e:19:57:83:f7:d7:
                    d4:cf:d8:d2:05:c5:d3:39:95:29:a3:ab:1f:81:a4:
                    d6:9b:62:67:6b:27:ee:b3:e6:d9:6a:07:d1:02:9b:
                    c4:31:51:0b:e3:60:bb:df:11:2e:c3:b9:04:2d:93:
                    e6:cc:3f:4e:e5:e6:4c:19:8e:8a:e5:a1:97:8a:34:
                    d0:a2:d0:2f:a1:d4:72:e1:59:2f:15:89:08:8f:02:
                    35:1b:f2:4f:99:2e:bf:6e:32:3e:46:d0:9f:4b:f9:
                    2c:16:ef:94:cd:57:91:ac:db:25:d8:e0:5e:96:d0:
                    44:c6:ae:cc:c1:a4:c9:91:43:1d:85:ef:fc:db:e7:
                    11:b1:49:63:86:45:0d:aa:0a:e5:8c:f7:20:59:f2:
                    5c:af:aa:59:ea:82:de:83:c3:56:5f:8f:d4:87:69:
                    dc:8b:94:81:58:19:ea:2f:78:ce:42:7a:93:0c:a0:
                    20:85:f8:5a:22:2f:ed:3d:2a:85:bc:3d:49:f4:37:
                    7a:d1:1c:8f:cd:b4:cc:ba:55:1a:e9:bd:0f:e1:7f:
                    38:cc:53:ad:f6:c8:1a:f2:2e:ca:c5:96:b9:a4:bc:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B4:9B:ED:39:E8:6E:EA:D8:AA:4F:15:B5:91:37:6E:A4:66:03:6F
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:b2:34:72:71:2d:e8:ba:32:4b:0f:ef:91:49:f5:b5:ec:
         c0:3b:f2:6d:20:3c:1f:68:49:fb:08:6c:10:ae:3b:94:41:01:
         1c:5c:3f:c4:2d:a1:04:b9:e5:77:cf:b3:66:59:ed:a7:8e:d6:
         66:7d:99:06:04:55:22:39:8c:4d:88:e8:bf:35:32:71:b8:02:
         b7:8e:a9:56:a2:2c:7a:ef:c6:5a:9a:5f:df:76:b7:83:54:0e:
         75:53:fb:ba:73:29:b0:4f:64:f1:51:64:96:fe:64:1f:f9:ff:
         33:b7:1f:9b:8d:b2:88:26:c0:ad:0d:8e:f3:e1:a4:07:d2:04:
         5e:97:3a:bd:0e:8f:ff:c3:6c:6e:79:15:47:21:79:7d:d0:a8:
         96:87:bd:22:68:27:81:4a:54:30:77:06:3c:ef:fd:be:41:f7:
         46:2d:5e:fa:0e:b3:b4:7b:09:b7:aa:e2:6b:37:e8:0a:c5:5c:
         62:0e:83:e3:a3:80:6e:32:01:d4:61:3d:1b:48:36:0e:39:24:
         9e:38:fc:af:f2:20:3a:32:03:38:5c:15:ee:1c:c8:ec:3f:28:
         de:7c:57:fc:4b:1a:d7:75:ee:63:f4:e1:f5:70:90:54:a0:fb:
         da:f9:e4:0d:6a:f4:e7:8e:6d:ae:d7:39:4f:06:a0:c9:d2:40:
         ec:5c:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:17 2026 by rpki-client