Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File:                     5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier:          DZHIF1jKvWgYdK13/AvV4n4/34GC/H/ocrnD40V8Jnw=
Subject key identifier:   FB:75:F5:AA:90:74:59:7C:36:1C:99:A7:0C:F1:FD:6E:A4:0F:3E:A0
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer:       /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial:       019F194347172F313D70303F72FF59BDE476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number:          080D
Signing time:             Tue 30 Jun 2026 16:01:07 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:07 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:07 +0000
Files and hashes:         1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: aHBvFIhpZixZ1oUfHuiLGc0XNiTHVsGLXEVl+REBog0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:47:17:2f:31:3d:70:30:3f:72:ff:59:bd:e4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
        Validity
            Not Before: Jun 30 16:01:07 2026 GMT
            Not After : Jul  1 16:01:07 2026 GMT
        Subject: CN=fb75f5aa9074597c361c99a70cf1fd6ea40f3ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:34:56:dc:a4:01:9f:5e:de:e2:ca:0f:b1:
                    e8:4f:19:3e:51:43:67:4f:1e:68:c4:a3:a6:4c:04:
                    84:19:cb:90:fc:ab:c0:2b:15:72:56:ab:5d:8f:39:
                    0e:ad:32:49:88:40:36:b5:11:5e:8a:92:ef:ed:3f:
                    d2:95:91:cf:9a:49:f9:6e:e0:8a:74:fe:45:9a:9e:
                    cc:6f:dc:b2:a7:92:b0:3d:ef:5d:3b:97:25:92:01:
                    0e:77:15:09:93:88:1e:06:3a:05:d9:42:75:34:25:
                    d7:7f:53:1a:e8:07:39:64:36:18:e9:96:e7:43:9f:
                    73:de:01:1e:18:3f:0f:e8:df:b0:6c:da:8a:43:4b:
                    85:a2:63:09:13:fa:c2:85:7f:21:ed:d3:80:ba:fb:
                    09:cc:52:ae:60:b5:31:f5:71:2f:92:9c:1b:4f:27:
                    eb:31:a8:16:4c:63:6e:8b:6b:c0:56:07:d9:12:11:
                    75:a0:99:19:67:b8:26:72:25:29:44:e5:fa:fd:c1:
                    97:7d:9d:20:fe:2e:32:20:cc:5a:d1:cc:2d:ca:19:
                    be:68:55:f9:52:19:42:0b:d4:a5:aa:f4:64:32:81:
                    40:f0:50:73:a8:7a:cc:37:f8:2f:d6:a5:a4:b3:e3:
                    18:4b:87:41:a7:70:34:5e:e8:2f:cf:9c:aa:6a:b5:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:75:F5:AA:90:74:59:7C:36:1C:99:A7:0C:F1:FD:6E:A4:0F:3E:A0
            X509v3 Authority Key Identifier:
                keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:06:96:f8:84:8b:3e:5f:67:3d:38:6b:63:42:cb:db:59:
         7e:48:18:f1:2b:b9:b7:5b:4a:a9:62:92:71:4a:77:c7:cc:19:
         41:e4:1b:59:45:39:4d:f8:d6:1a:65:e6:a6:0e:83:6f:60:54:
         1c:d6:e8:3f:34:83:6e:81:ae:05:a2:58:46:15:c5:4a:5a:de:
         85:62:6a:85:90:e9:63:9b:2f:ce:68:e5:45:fe:1c:1a:50:94:
         b8:cc:d1:d4:56:34:84:ce:55:11:6e:f5:4c:52:d8:71:00:0b:
         b5:16:16:99:6b:40:d7:1b:85:95:ca:41:19:c1:6e:2a:f5:b2:
         3e:26:03:e0:79:b4:55:25:e1:c5:8d:32:a8:d7:19:55:8c:df:
         64:65:4b:01:ba:2b:ac:e5:f4:12:c5:62:e9:6e:c3:04:73:cc:
         f8:95:6a:2e:45:c8:12:34:db:86:55:33:ff:ca:42:25:3d:44:
         00:08:92:c3:ae:93:b0:d4:dc:4b:2a:cb:92:be:c9:a4:cb:7f:
         28:5f:b2:04:2a:17:44:cc:78:95:9c:7f:9d:f1:b9:3e:2c:75:
         b0:88:75:3a:d2:6f:ea:6c:1b:29:cc:f0:be:c0:1a:fa:bd:e8:
         b8:ab:48:45:7c:8f:4d:31:70:29:5c:cf:1c:4a:78:f2:68:a7:
         03:cf:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:28 2026 by rpki-client