Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File:                     1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier:          P9fDbJqS4CAi4d+8Y/FR0Q30m6dIjdcJswiyBQzBP2o=
Subject key identifier:   24:86:13:EC:FF:FD:08:C5:E5:72:65:55:95:09:D6:A6:AC:F6:7D:83
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer:       /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial:       019F1830D875E63988EFBA409B79DCAAEE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number:          0DB3
Signing time:             Tue 30 Jun 2026 11:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:21 +0000
Files and hashes:         1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: S9aASzYQ8M9goRvZHlqtMEawi3hQiglg5p5eedEYaig=)
                          2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
                          3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:d8:75:e6:39:88:ef:ba:40:9b:79:dc:aa:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
        Validity
            Not Before: Jun 30 11:01:21 2026 GMT
            Not After : Jul  1 11:01:21 2026 GMT
        Subject: CN=248613ecfffd08c5e57265559509d6a6acf67d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:20:cc:58:1e:fe:25:7f:bc:62:04:7b:55:
                    f2:e2:8d:9f:0f:43:b1:97:4c:84:3f:88:2e:cc:38:
                    5e:2f:13:e8:5d:30:ba:fb:d7:8f:75:2f:65:39:81:
                    1a:e1:bb:1f:34:94:41:b5:7d:5e:86:fc:7a:0f:73:
                    c5:f2:d1:5e:4a:49:7c:e4:e6:6d:a1:02:77:2d:9f:
                    3e:45:d8:44:76:21:09:72:4f:76:56:06:76:02:5f:
                    4f:36:e3:87:6b:12:c5:21:7b:fe:60:5b:c8:30:34:
                    5a:d0:18:49:1c:2c:fb:09:c2:82:86:2e:cd:b8:a3:
                    15:67:73:31:f7:6d:b9:1d:c7:3f:2f:db:25:87:c7:
                    19:9b:f0:32:01:1e:64:09:94:07:dd:2b:d1:fc:28:
                    30:6f:bb:c1:ca:24:ed:bb:7b:f8:05:75:3a:77:b1:
                    9e:bf:10:06:67:43:d1:c6:d8:bc:85:d0:68:95:72:
                    40:50:00:bb:4f:6e:a0:c8:57:e8:ba:b4:6c:5a:c8:
                    41:39:ab:38:fe:3d:62:92:da:15:61:6e:79:cf:7f:
                    5e:dd:d6:36:79:66:8e:d5:6b:85:fd:e3:51:0d:56:
                    3f:c1:e2:20:7d:48:04:8c:23:aa:2c:25:71:ca:0d:
                    f6:4e:22:c7:41:10:0d:3a:e6:e6:20:57:4c:a9:d5:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:86:13:EC:FF:FD:08:C5:E5:72:65:55:95:09:D6:A6:AC:F6:7D:83
            X509v3 Authority Key Identifier:
                keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:1b:44:92:e2:be:c4:fe:fb:81:b9:f7:af:53:b8:f0:63:
         f2:4a:15:c1:f2:d1:30:ee:5e:ef:07:5c:15:34:63:d0:1e:77:
         69:8c:48:26:a0:b1:88:5a:48:c3:7f:ac:96:27:97:43:58:47:
         c3:b6:43:d6:a4:d3:9d:45:80:a9:59:3f:fb:76:15:fc:09:89:
         19:1b:96:71:1c:c8:f3:0e:86:12:07:c2:39:e3:78:2b:1d:2a:
         39:24:a1:c3:df:c4:2c:d0:d4:fe:7a:9e:cb:ee:af:7d:1b:a8:
         36:f5:5b:d4:9f:91:9a:80:30:7c:84:c7:1b:4e:73:48:ab:7d:
         b6:3b:d4:bf:5f:4a:18:14:26:93:ba:eb:00:98:2c:e2:2a:0f:
         d3:8c:c8:38:d3:21:68:71:96:2c:07:af:4f:7f:89:a6:63:9e:
         d5:c4:4d:4e:27:3d:92:51:cc:ba:81:59:19:b0:8b:f3:bf:c6:
         d7:70:9a:39:ba:0d:4e:14:79:02:57:ba:ae:57:01:95:9c:83:
         ec:fe:f5:57:09:c2:16:7e:b7:c6:de:8a:c9:10:64:32:cc:fe:
         c0:b3:52:48:70:3a:11:50:6d:5e:4f:8f:9c:69:29:43:01:f5:
         f6:56:f6:56:25:4f:e4:8c:64:1a:6d:a9:ff:f2:ae:77:81:fa:
         37:70:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:21 2026 by rpki-client