Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File:                     5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier:          5bLx8lYDexxQ9rA/UgXHjik1KSnGN8sGWqF2K0EqBmw=
Subject key identifier:   B5:A2:26:00:0D:A6:C2:73:A9:02:8D:F4:8D:EC:6E:4A:47:D1:1C:A0
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer:       /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial:       019ED273A93A453E15D1A1D46C25C4820512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number:          18F5
Signing time:             Tue 16 Jun 2026 22:00:55 +0000
Manifest this update:     Tue 16 Jun 2026 22:00:55 +0000
Manifest next update:     Wed 17 Jun 2026 22:00:55 +0000
Files and hashes:         1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: ENnZ9J8mBZjnsB60vXKAT61KQvhAHrtJ/kTWJpbMcS8=)
                          2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:73:a9:3a:45:3e:15:d1:a1:d4:6c:25:c4:82:05:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
        Validity
            Not Before: Jun 16 22:00:55 2026 GMT
            Not After : Jun 17 22:00:55 2026 GMT
        Subject: CN=b5a226000da6c273a9028df48dec6e4a47d11ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:71:70:cd:61:c4:d3:ba:d0:33:23:a6:52:
                    6c:d8:db:d2:0a:76:e8:58:d1:8f:7b:59:0a:17:e7:
                    a7:4d:13:01:10:38:b3:0a:aa:b8:ba:01:0d:83:7a:
                    c2:66:10:9f:ee:56:6b:06:fa:8f:c7:66:06:1f:ef:
                    27:1d:c6:90:d6:07:90:b0:a0:4e:94:d4:80:d6:37:
                    b2:52:00:78:e0:8c:f2:e6:ae:76:ac:55:1a:7a:de:
                    f3:37:57:af:8c:cc:48:63:47:06:fb:4a:24:00:2e:
                    d4:31:d2:e9:be:f4:4e:eb:df:a4:fb:1e:83:28:47:
                    ee:06:52:62:76:a9:d9:b0:c2:49:6a:3a:77:c0:ed:
                    60:83:b1:e0:09:e4:00:b2:9d:4f:5d:a5:ae:5d:ca:
                    d5:ff:ba:90:22:fc:c0:26:6b:d5:c9:8d:97:ca:7e:
                    58:0a:e3:8e:18:c7:14:dc:25:64:d1:21:b3:f2:51:
                    2c:5a:29:61:6a:9a:55:eb:7a:89:e8:42:3e:53:14:
                    d9:47:19:fc:80:d2:42:ed:cb:38:5a:be:f3:34:0f:
                    db:0d:fd:2b:01:bd:7c:aa:e0:59:a3:0b:44:f7:a0:
                    01:65:4a:51:88:6d:3c:4f:13:dc:8a:af:45:5d:fb:
                    ff:91:85:0a:b2:8d:71:01:af:77:5c:67:a1:a2:50:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:26:00:0D:A6:C2:73:A9:02:8D:F4:8D:EC:6E:4A:47:D1:1C:A0
            X509v3 Authority Key Identifier:
                keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:2d:83:f0:ef:6f:eb:9e:cc:78:37:60:38:25:70:53:39:
         38:b5:13:0c:eb:77:b5:40:6f:4b:e1:07:44:71:31:da:04:bd:
         92:2b:15:8d:fd:05:e7:00:cb:6e:ac:89:bf:74:4e:31:9b:33:
         9c:e0:3f:38:c7:a2:f5:b1:97:7c:16:5a:d1:11:8f:f3:17:4b:
         81:f8:79:4f:c4:4a:5c:09:b6:ae:08:94:d2:3c:e2:93:0c:d6:
         9e:bc:b6:2c:2e:00:c2:46:e8:06:e8:bf:1a:50:ba:8b:29:f7:
         35:a0:e2:4c:81:6a:41:12:09:e7:58:62:19:e7:5b:d3:c6:db:
         de:b0:cf:2a:46:b4:14:40:f4:20:38:61:f5:b8:b0:3c:e8:9a:
         13:4b:a0:0f:be:e6:52:05:69:84:68:9a:22:64:cc:ed:14:81:
         99:cf:ba:07:48:8a:c2:f3:b2:b5:93:0c:1a:cf:d3:a1:46:41:
         89:c5:af:35:f5:ad:e7:14:a5:1f:4c:c4:f2:bf:8d:f1:77:06:
         c2:24:6f:1a:d2:e7:b0:da:2b:bf:e7:1c:a9:2f:2a:4d:62:9c:
         09:c2:a1:22:b9:1f:a8:fc:49:5c:e9:02:c6:3b:87:46:a8:ed:
         02:39:f5:bb:cd:72:a8:2a:77:9c:8c:6e:04:94:4b:33:6a:22:
         f9:7c:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:42:39 2026 by rpki-client