Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File:                     5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier:          IrHLMd0cdYRGj70sUgLSxkN/YNfkeUGUI87nEAbNg3s=
Subject key identifier:   2E:59:36:14:96:A3:A8:0F:71:17:B3:AC:A6:7D:6F:C6:92:F5:FC:F0
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer:       /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial:       019EFBA87FC39FF3C91348DD907C75932045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number:          0213
Signing time:             Wed 24 Jun 2026 22:03:04 +0000
Manifest this update:     Wed 24 Jun 2026 22:03:04 +0000
Manifest next update:     Thu 25 Jun 2026 22:03:04 +0000
Files and hashes:         1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: OijK7Jo3y0PzqEXy4tZNpMPAr3noHyIPBQgKnXXhS3U=)
                          2: aB79fGj4vXTZE5XL5eriNSFisHA.asa (hash: 1qM7sm32yNwlqaxmCx8pUKuLeMMUaDuzmS9PF1Xa8zE=)
                          3: bABKElQpuUR5qvAEktEyWURQ4XE.roa (hash: xB7baZkS+NXVYrZMh8EL0mNmqqM8iQ6l8pfIwSwvFAM=)
                          4: ttuyL-r_sF14vrJmSfGRByq4NVU.roa (hash: m+09LyVjwBpCJnAmv2ZE6YEVLeDzveLbBNnCOc68a84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:7f:c3:9f:f3:c9:13:48:dd:90:7c:75:93:20:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
        Validity
            Not Before: Jun 24 22:03:04 2026 GMT
            Not After : Jun 25 22:03:04 2026 GMT
        Subject: CN=2e59361496a3a80f7117b3aca67d6fc692f5fcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:05:ee:f5:b2:9b:1f:f4:04:4b:f6:46:92:
                    fb:94:ad:d2:ec:d8:16:dc:a1:48:82:8b:8b:08:33:
                    4f:e2:38:e5:dc:ac:02:ee:ce:61:48:20:1f:04:78:
                    85:58:39:d0:3e:6c:26:a5:b9:cd:5d:c4:6e:28:73:
                    52:fe:67:93:30:4a:1d:84:d3:80:39:a8:10:50:80:
                    a3:e5:73:77:a7:2c:52:b9:d0:7a:7b:f7:8e:21:d3:
                    51:ae:68:53:64:de:31:e4:a9:53:d8:aa:d3:2c:91:
                    9f:dd:f2:49:a4:f4:2e:2f:50:25:c5:f4:86:2c:39:
                    e4:65:70:96:ac:50:1a:e7:2f:29:23:df:87:e3:09:
                    7f:16:df:9d:2c:f0:4a:66:ce:6b:e1:e0:4b:20:df:
                    07:66:d3:fa:9c:22:ae:6d:4e:4c:41:a5:91:f8:f0:
                    c7:9f:53:e6:c4:30:87:7d:87:c0:8f:1e:e2:ca:a3:
                    ba:26:03:01:4d:fb:1e:d8:a9:c4:32:06:e4:58:26:
                    cb:d7:bc:d3:ae:7c:c3:d5:b6:92:dd:6b:e1:be:10:
                    72:2b:7e:fb:c0:c4:c3:c5:9a:da:90:01:de:98:ab:
                    55:43:56:b7:30:5d:6e:71:d6:75:a3:2b:3d:e3:3f:
                    42:46:9b:58:6d:eb:13:42:32:cb:b6:44:fb:a2:d3:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:36:14:96:A3:A8:0F:71:17:B3:AC:A6:7D:6F:C6:92:F5:FC:F0
            X509v3 Authority Key Identifier:
                keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:59:65:2f:b9:95:a8:d1:ba:df:b7:20:e7:00:b0:23:60:16:
         0d:d1:c2:e6:2d:0d:64:81:ea:c9:e2:56:cb:f5:dc:31:ae:be:
         fc:db:93:dd:c6:60:59:6c:34:cd:9e:9f:78:7a:15:3d:a1:c5:
         7a:da:8f:dd:bf:91:b2:00:c9:f3:21:d7:2d:2c:02:6c:28:a2:
         48:8e:c8:ac:e7:35:03:02:ec:39:e4:00:af:c2:e5:80:bc:26:
         3b:a4:af:a3:c5:60:f3:82:8f:50:68:a4:46:92:ac:bb:85:46:
         7e:05:6c:5f:d0:54:e1:cf:75:59:12:19:00:ae:45:56:a4:2d:
         90:9c:80:5e:24:89:ef:91:c8:7d:56:9a:f5:1f:13:eb:8f:a2:
         0e:93:ad:61:a7:56:5f:3a:5f:9f:f2:11:1d:2e:cc:fb:03:3a:
         89:3c:12:32:a1:e1:87:ce:35:19:f2:1f:ce:a7:29:f5:64:c0:
         fb:01:33:fd:34:f8:31:19:fe:46:31:1d:7d:32:a6:d8:e5:2e:
         be:c9:2c:75:7a:e6:19:ab:20:50:c9:a6:87:1f:de:3a:69:3c:
         52:9b:b6:36:a1:29:3d:8c:e3:2b:a5:b8:a5:3b:74:1a:c9:69:
         d0:10:14:ed:60:58:88:6b:2c:98:97:c6:77:4b:52:c8:1d:ad:
         a9:dc:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:05 2026 by rpki-client