Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          TSl4RhYTU/tsDZ/4Q4UY/fZLr9rzvHLqphQePy3CXjI=
Subject key identifier:   86:E2:06:D2:0E:92:FB:C2:9E:88:48:29:6D:BC:76:D9:29:B6:F1:EC
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       019EBF5AC5132CAE5340E08530DE62B4F82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          056F
Signing time:             Sat 13 Jun 2026 05:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:57 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: OUnRhzgk+pZOVdbUh0HIyT+V2fQmEevSXE0uokKlPpY=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c5:13:2c:ae:53:40:e0:85:30:de:62:b4:f8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Jun 13 05:00:57 2026 GMT
            Not After : Jun 14 05:00:57 2026 GMT
        Subject: CN=86e206d20e92fbc29e8848296dbc76d929b6f1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:6f:40:c1:06:de:c0:a1:a5:d6:e6:07:f7:
                    cc:ca:f9:70:2a:58:a6:25:33:9b:b4:e9:d9:07:b2:
                    8a:22:99:14:df:39:89:37:b5:4a:16:c8:c5:36:f6:
                    8b:fb:bb:51:33:50:34:af:93:3e:d7:9c:31:1a:cf:
                    f7:e8:67:6b:74:69:84:aa:79:ff:6f:3f:0a:71:89:
                    79:57:37:89:94:df:9b:4f:83:68:87:86:db:77:fc:
                    9e:8a:3d:db:14:64:af:9c:3e:83:88:4e:b2:ad:35:
                    25:f5:ca:01:8c:c9:95:a7:45:86:e2:3c:c8:5f:25:
                    67:41:ee:e2:99:00:2c:9f:6d:2c:d2:86:62:e0:f9:
                    58:78:e8:59:01:0d:ec:8f:a4:9f:86:2b:5a:64:2f:
                    6c:92:31:3d:0a:c1:7a:b0:5b:b0:b9:cc:f6:41:f2:
                    03:b1:0c:a8:7e:4d:dd:0e:8d:6b:99:f7:63:6a:2a:
                    bd:68:f4:81:99:c6:0e:90:50:ee:37:19:86:34:1b:
                    c2:01:ba:1e:e5:5a:28:d2:9e:6b:c0:de:b8:98:fd:
                    5c:31:fa:f3:6b:de:fa:8e:83:8b:94:e1:c2:19:47:
                    12:0a:1b:54:8a:2d:95:2c:13:e7:02:3f:37:f1:69:
                    92:b1:c4:50:9b:bd:fb:3d:ba:d9:2d:f2:1c:7b:0c:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:06:D2:0E:92:FB:C2:9E:88:48:29:6D:BC:76:D9:29:B6:F1:EC
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:c6:b7:6c:6d:52:e7:2e:20:3a:81:1e:cd:7f:15:50:aa:
         9e:09:5f:7b:b1:79:9e:8e:9d:46:06:b0:3b:b5:2f:4e:d6:08:
         c8:02:02:a1:d6:0c:d1:e3:41:b9:0d:4f:73:9a:62:a5:3b:ac:
         56:01:1a:4e:d2:14:34:fb:2f:00:0a:22:5f:ef:88:96:86:26:
         5a:ac:91:f5:07:4b:87:c3:a6:e7:6c:b8:1f:ec:de:eb:49:de:
         c4:ef:75:25:c1:49:0f:7e:5a:c9:de:84:95:7b:79:14:46:06:
         b0:21:96:a0:00:1d:54:b0:dc:1e:c9:5b:9c:e8:38:42:72:69:
         56:62:1e:76:f5:dd:47:be:f2:57:15:2b:c5:1e:ce:37:2a:ee:
         5e:45:9a:62:ac:20:12:ef:d1:4e:ce:25:aa:13:42:4c:8e:01:
         a3:9c:8f:b1:e8:5e:45:bd:6b:72:25:9b:8b:b2:2e:bd:44:03:
         44:ef:87:df:ff:1f:c7:af:c6:32:b3:5c:32:c9:d2:69:3d:cb:
         a0:9e:f7:80:d5:f6:c6:52:e2:12:a4:86:77:1d:4c:3d:57:58:
         85:42:31:34:53:d8:ab:d9:13:26:41:17:ac:e8:f8:66:a1:a5:
         70:74:06:29:81:89:56:60:20:2a:bc:36:61:2d:6e:f9:2c:15:
         1e:8a:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:54 2026 by rpki-client