Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          Xyq2sn1Kw5eX3fyOZCxJDpxqa1AR9VQNW+rL+woqr+s=
Subject key identifier:   AD:33:3B:24:D3:50:65:61:0B:6F:34:27:9A:69:A6:91:F7:66:90:B6
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       019EC0A3DE83D6141AA2C5810FDE16DDC1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0F58
Signing time:             Sat 13 Jun 2026 11:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:25 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: D2tX3IPh4iBOPl15j/ZdOcJkviR2AdUDEvh5Y8x5AqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:de:83:d6:14:1a:a2:c5:81:0f:de:16:dd:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Jun 13 11:00:25 2026 GMT
            Not After : Jun 14 11:00:25 2026 GMT
        Subject: CN=ad333b24d35065610b6f34279a69a691f76690b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:8f:bc:69:bd:9c:81:bf:c4:0f:e2:bf:68:
                    bf:48:14:61:90:9c:ec:8f:85:0a:16:87:80:6c:e3:
                    32:42:20:a9:0d:93:9b:ef:5b:b4:ba:7e:ce:79:53:
                    0d:d1:80:95:f0:9e:8c:f3:f5:37:01:b1:aa:be:aa:
                    a4:f8:18:1b:06:45:56:ce:95:fa:56:2d:09:77:dc:
                    b7:2d:d1:13:90:9e:ac:4b:8a:3c:a5:b4:9c:44:97:
                    87:7c:e8:c0:f6:4f:24:00:30:d1:33:19:d6:4f:22:
                    0b:fe:8a:2a:f9:e3:22:7b:2b:e4:64:8c:d9:44:b7:
                    f5:44:e8:28:1c:1f:ac:8d:73:da:53:9b:98:9b:2f:
                    d5:3b:51:ed:48:49:3c:cb:0b:f7:c6:50:53:02:04:
                    6c:bc:b9:15:3e:54:70:28:75:97:9b:02:a4:e7:d7:
                    c3:b4:54:26:8c:76:b8:a1:26:78:cf:8c:0b:74:67:
                    7b:61:48:ff:3d:08:8e:4c:a8:38:21:14:2f:99:9a:
                    95:8a:f7:72:91:b0:0f:de:56:4c:3c:8c:84:c2:b0:
                    09:df:14:da:cf:06:a9:f1:a9:db:f0:d7:89:3c:ea:
                    86:8a:fc:3e:5c:7f:c4:e0:21:6d:a8:41:25:32:89:
                    18:b5:e5:a9:36:2c:10:10:e2:48:62:2d:2f:1b:e6:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:33:3B:24:D3:50:65:61:0B:6F:34:27:9A:69:A6:91:F7:66:90:B6
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:bd:ad:d9:64:3f:25:15:44:53:4e:29:b5:25:1e:6a:b4:
         6c:43:b1:43:e7:c5:85:15:c8:e6:01:f0:af:dd:5e:29:86:d3:
         11:9d:f1:aa:d8:39:4b:0f:4f:9e:0e:fb:b7:78:76:3a:7f:6e:
         3e:04:88:0a:d6:e6:72:c8:f9:9b:a9:b7:39:86:b1:e8:e0:83:
         27:1b:5a:fa:bc:f3:39:60:57:70:80:65:d6:91:09:f1:f5:88:
         6d:4f:f8:e1:87:b8:6a:26:cf:87:8a:60:d2:73:76:04:51:24:
         66:ae:7c:6c:eb:30:9d:4e:d8:1e:75:de:67:2e:7a:6f:92:83:
         74:6e:4e:df:67:7c:62:6a:74:91:cf:6e:a3:ac:4c:ac:6b:f6:
         a1:40:14:47:e3:87:23:6d:21:ac:59:67:da:a9:59:08:9b:cc:
         79:2e:64:a6:2f:25:35:90:85:de:a9:1b:49:f2:7b:65:eb:a0:
         73:95:dc:ba:82:97:ce:a4:70:75:91:3a:71:3c:24:37:01:fa:
         f6:8d:30:8b:a1:73:f2:8c:8f:6f:27:84:c5:7e:2f:b8:33:c7:
         30:0a:27:2b:e8:ae:08:47:c8:96:a3:6e:7e:59:cf:33:df:08:
         f9:b9:73:42:57:82:09:93:9b:48:71:22:40:e6:a6:4b:76:05:
         40:34:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:09 2026 by rpki-client