Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          ZROwHY4FBSbwXw/R4uq9oWWKJk4nk+VHxNt/7O6bKAM=
Subject key identifier:   BB:0E:72:CD:54:63:AB:B4:BF:05:BB:04:5A:CB:60:E2:2F:A8:5E:B2
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       019EBE7FAE7D8B0E227371D4E24CDAF06359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 01:01:39 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:39 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:39 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: JI/fTdw/W81mHAbma876+d4NGhClxubBF4tv2VGOBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:ae:7d:8b:0e:22:73:71:d4:e2:4c:da:f0:63:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Jun 13 01:01:39 2026 GMT
            Not After : Jun 14 01:01:39 2026 GMT
        Subject: CN=bb0e72cd5463abb4bf05bb045acb60e22fa85eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:01:57:b9:08:ca:c1:fb:7d:e4:81:e7:b9:
                    42:78:0a:d6:98:75:5e:c2:56:e8:d4:c4:1f:0b:2f:
                    a7:07:de:24:48:a4:d2:94:94:3d:43:72:07:d8:be:
                    07:be:ef:61:75:15:12:6b:29:b5:5f:73:ea:e8:7e:
                    57:18:af:d6:a7:9c:ba:66:94:96:c1:bd:a2:fd:c8:
                    75:08:57:17:b6:a7:fe:1c:54:cc:e3:ff:6b:e6:c3:
                    91:01:b2:ff:77:59:f7:d4:a4:44:b1:f7:c9:b0:00:
                    c5:72:72:9d:49:46:ae:3c:7f:1b:59:7e:a0:bd:64:
                    be:a9:85:e2:a8:df:a0:83:31:8a:e9:81:4b:e5:84:
                    32:11:5b:00:bc:bc:02:ce:77:82:9f:ce:32:84:26:
                    21:34:1f:80:31:db:a6:de:64:84:68:f4:c2:93:e7:
                    f8:0a:1e:a6:b9:07:bf:06:2c:c6:15:4b:cb:d6:57:
                    be:d4:12:98:36:f3:f9:f3:3a:f9:c3:06:14:dd:bc:
                    83:f0:b0:3b:02:0b:f7:3b:65:fd:11:60:c4:ae:d8:
                    f4:ed:57:7f:9f:f9:8c:a6:7c:b3:a8:c5:05:53:74:
                    c9:18:39:cf:43:08:bd:20:14:67:26:dc:ef:67:80:
                    e0:4b:8e:e6:9e:c4:b7:d2:a0:db:07:16:4a:41:24:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:72:CD:54:63:AB:B4:BF:05:BB:04:5A:CB:60:E2:2F:A8:5E:B2
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:c2:c9:39:35:f6:bf:d0:58:7b:59:04:4c:14:17:2b:6c:
         ba:33:a0:60:03:18:ac:6a:9c:03:df:90:e1:f4:85:f3:6e:7a:
         ac:04:bc:c6:d2:ac:24:29:62:0e:f7:35:1d:19:7c:2c:aa:60:
         83:6a:75:b6:03:01:2c:92:e1:55:6f:f9:91:3f:85:ac:be:73:
         1f:33:e8:f1:e0:ea:74:4c:ab:21:8e:2f:f5:f9:6e:42:86:40:
         36:d3:c6:fa:b7:7c:8e:7b:0b:a9:45:2e:a9:eb:50:5c:0f:da:
         76:44:a0:a9:46:89:f7:b2:06:85:6f:1b:6a:7f:57:b3:59:16:
         07:65:a5:b8:1f:28:4a:38:68:d2:2a:23:49:2d:a4:bd:a3:e1:
         35:f2:56:87:f5:11:f1:15:84:bc:f5:a1:cc:4c:55:5a:04:cf:
         ae:ca:e4:ae:6b:e6:ca:20:b7:e7:03:1a:20:d2:a3:37:4a:9d:
         7a:a0:cb:85:5a:31:f3:48:bb:89:20:42:1c:bd:25:a5:09:1b:
         ce:33:ed:69:04:b0:6a:dd:91:b6:57:b4:7b:23:e7:5f:9e:92:
         8e:5a:8f:c7:70:3b:bd:c0:d9:43:93:0f:55:92:0f:fb:ea:ed:
         d8:56:da:46:b4:66:71:43:11:b1:64:4e:8f:64:28:be:16:6c:
         17:38:44:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f659iw4ic3HU4kza8GNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl
NjYwMmUwHhcNMjYwNjEzMDEwMTM5WhcNMjYwNjE0MDEwMTM5WjAzMTEwLwYDVQQD
EyhiYjBlNzJjZDU0NjNhYmI0YmYwNWJiMDQ1YWNiNjBlMjJmYTg1ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02YBV7kIysH7feSB57lCeArWmHVe
wlbo1MQfCy+nB94kSKTSlJQ9Q3IH2L4Hvu9hdRUSaym1X3Pq6H5XGK/Wp5y6ZpSW
wb2i/ch1CFcXtqf+HFTM4/9r5sORAbL/d1n31KREsffJsADFcnKdSUauPH8bWX6g
vWS+qYXiqN+ggzGK6YFL5YQyEVsAvLwCzneCn84yhCYhNB+AMdum3mSEaPTCk+f4
Ch6muQe/BizGFUvL1le+1BKYNvP58zr5wwYU3byD8LA7Agv3O2X9EWDErtj07Vd/
n/mMpnyzqMUFU3TJGDnPQwi9IBRnJtzvZ4DgS47mnsS30qDbBxZKQSSw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsOcs1UY6u0vwW7BFrLYOIvqF6yMB8GA1UdIwQY
MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt
MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl
LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC7CyTk1
9r/QWHtZBEwUFytsujOgYAMYrGqcA9+Q4fSF8256rAS8xtKsJCliDvc1HRl8LKpg
g2p1tgMBLJLhVW/5kT+FrL5zHzPo8eDqdEyrIY4v9fluQoZANtPG+rd8jnsLqUUu
qetQXA/adkSgqUaJ97IGhW8ban9Xs1kWB2WluB8oSjho0iojSS2kvaPhNfJWh/UR
8RWEvPWhzExVWgTPrsrkrmvmyiC35wMaINKjN0qdeqDLhVox80i7iSBCHL0lpQkb
zjPtaQSwat2Rtle0eyPnX56SjlqPx3A7vcDZQ5MPVZIP++rt2FbaRrRmcUMRsWRO
j2QovhZsFzhEhw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:17 2026 by rpki-client