Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          ara7fy62YUJ9U+m7hugnyRdhkq+9JgP1VeuCP7poPZI=
Subject key identifier:   03:11:AB:22:23:D3:7C:C1:BE:81:61:ED:21:E8:38:37:F2:B2:3C:C1
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       019EC17FEA4C3E3095695811683DF33EF683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          0A4C
Signing time:             Sat 13 Jun 2026 15:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:46 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: z9mueeOHIk8E/Yyp+a8tZ1C3EXwGnIYplTvHZVVgieY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:ea:4c:3e:30:95:69:58:11:68:3d:f3:3e:f6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: Jun 13 15:00:46 2026 GMT
            Not After : Jun 14 15:00:46 2026 GMT
        Subject: CN=0311ab2223d37cc1be8161ed21e83837f2b23cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:87:e0:2a:2c:07:3c:67:dd:34:30:7c:d6:
                    88:2a:2d:c5:ae:55:50:af:41:c9:bf:48:d0:f3:90:
                    05:3b:15:fd:cc:fd:94:3d:df:1d:60:c8:97:9d:06:
                    f2:af:18:56:9f:14:1f:e3:55:94:30:68:c3:13:9f:
                    d1:3c:d1:4b:fc:d1:6f:e8:c0:47:98:14:35:64:1a:
                    15:22:e5:76:dd:b5:e6:c8:5e:58:a1:7b:6c:ce:a4:
                    49:d1:25:b3:2f:a9:7d:3e:14:b4:a1:80:27:e5:ff:
                    bd:e8:0a:b5:e3:d7:86:82:42:da:63:d3:60:fd:f0:
                    52:e5:12:e9:6c:bd:a8:56:56:fc:f0:ee:a2:e8:09:
                    fd:cc:98:d2:d4:52:3b:6c:f5:be:f9:51:65:0e:2b:
                    1c:26:9c:90:25:66:93:9a:c0:e3:3d:67:6a:c4:2d:
                    d2:68:16:f2:25:83:e3:f2:9b:dd:2e:66:b8:13:5f:
                    db:9e:c5:e1:ff:ff:3b:9a:1c:98:dc:7d:07:1d:79:
                    b6:1a:01:0b:3b:50:74:06:c4:3b:8a:28:03:7c:cf:
                    46:76:d7:cf:2e:45:8a:66:cf:f9:dc:7f:11:aa:43:
                    1f:9a:e2:d6:8c:c8:8d:a5:1e:f1:97:31:09:cb:20:
                    6c:9f:5a:a6:09:76:51:ca:ae:ee:a2:2e:1e:9a:69:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:11:AB:22:23:D3:7C:C1:BE:81:61:ED:21:E8:38:37:F2:B2:3C:C1
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:50:eb:9a:cd:a1:38:7c:6d:02:9f:5a:aa:d0:a4:0f:ca:e4:
         cb:db:8d:3b:96:30:13:bf:a9:fc:48:80:dd:56:ac:c4:cf:43:
         be:3c:a9:49:68:f0:a8:af:c1:68:fa:3c:05:78:62:74:06:55:
         65:21:e0:17:67:af:9a:dd:59:3c:b5:16:6f:79:37:62:08:e5:
         71:7c:ff:64:3b:3f:05:6a:b1:c6:a3:28:80:f1:0c:1a:ff:7b:
         6e:76:81:97:10:51:e8:f7:b6:6d:d9:f8:d2:42:a8:78:48:e8:
         b9:76:66:69:28:1c:f9:d1:39:1f:55:26:40:78:85:cd:38:79:
         28:28:49:6d:b7:0b:4c:5b:9c:b3:6c:a8:b5:1d:61:c5:ae:4b:
         16:0a:47:d9:cb:74:41:44:16:37:f6:4d:dd:56:f7:61:65:80:
         7d:6c:d3:37:77:e5:57:61:65:63:39:b0:17:c2:d7:b6:c4:25:
         21:e8:c1:61:4c:27:c7:26:63:55:94:3c:a8:c7:06:2d:b7:51:
         66:a2:77:6d:87:cd:59:dc:ab:b8:a7:fc:05:a8:fb:b0:08:43:
         75:4f:76:e3:30:bb:7c:16:5c:10:2b:60:c3:98:13:91:9c:02:
         97:89:3b:52:90:58:d3:81:07:39:40:ee:89:91:33:f6:39:c4:
         f5:84:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:09:00 2026 by rpki-client