Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File:                     5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier:          tPEt4vnjuSgx7H7J/mWtDtfbVuoQie79xXKOO9F4MB4=
Subject key identifier:   A8:63:CA:22:F8:F3:C4:28:DE:78:EF:C5:11:6C:1E:28:B5:04:58:06
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer:       /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial:       019F1867E2049321344063A254877006D767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number:          08E8
Signing time:             Tue 30 Jun 2026 12:01:28 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:28 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:28 +0000
Files and hashes:         1: 1bqNsOJJ8fekiGjNmHIxOifScpk.roa (hash: awuwmLZI74s+JrAhvYcfSETsMAtPOVKMZXnh9sFIapk=)
                          2: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: 2Xx4zhe3dM94HPxgnkOIksqKZuaU28wlRhrG6CvMcno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:e2:04:93:21:34:40:63:a2:54:87:70:06:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
        Validity
            Not Before: Jun 30 12:01:28 2026 GMT
            Not After : Jul  1 12:01:28 2026 GMT
        Subject: CN=a863ca22f8f3c428de78efc5116c1e28b5045806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:ad:4d:4c:a4:fa:cb:03:46:a8:6f:01:57:
                    44:b1:e9:a6:94:57:ac:66:fd:51:f5:ee:35:a3:0e:
                    cc:81:da:2c:30:aa:f5:88:e3:ef:45:73:64:d5:4a:
                    1d:a6:34:86:fe:30:49:66:e4:03:e6:42:05:9a:78:
                    e8:6f:be:68:95:bc:c3:d6:b3:80:d2:ec:2b:15:32:
                    e5:12:98:ec:9b:db:7f:cf:97:1b:e4:78:c9:45:bd:
                    92:85:24:27:f7:3a:c8:60:48:68:93:19:b4:3f:be:
                    06:a8:61:83:ef:ed:fe:c3:41:45:a9:f5:77:f9:9a:
                    75:a6:9e:81:54:36:80:12:82:f4:6d:0a:60:e7:90:
                    9a:4e:78:0e:8b:4e:8b:4a:b1:06:bb:48:d3:20:45:
                    f4:49:17:2b:fc:14:c1:8b:e5:1e:a2:6a:fd:43:06:
                    b9:0b:e4:5c:05:81:7e:de:6e:65:f5:c0:b4:91:7c:
                    20:d2:c3:46:71:32:6a:c5:52:30:b8:99:d7:82:86:
                    5d:17:5f:e6:7b:0a:4e:06:93:68:e2:1f:3c:10:cd:
                    29:1a:ca:7f:5c:74:44:0d:29:6a:aa:e1:30:05:ae:
                    a7:b2:49:04:3c:dd:6a:9d:dc:06:83:89:24:f0:17:
                    45:04:9a:d7:ef:44:9d:b3:99:a8:69:c1:60:d6:c4:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:63:CA:22:F8:F3:C4:28:DE:78:EF:C5:11:6C:1E:28:B5:04:58:06
            X509v3 Authority Key Identifier:
                keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:f4:43:96:4e:86:75:bc:d8:04:24:cd:01:45:dc:d8:c4:
         04:82:fe:e5:8f:21:e4:e2:fa:67:e7:36:9e:59:9d:b3:d4:94:
         02:77:2b:80:cf:a1:bc:fb:42:fc:33:88:62:ee:a1:99:fc:7c:
         a4:1d:f3:c8:b5:af:13:59:54:61:6e:b3:f7:9a:6f:a6:eb:d9:
         72:21:b3:4a:ba:a6:e1:17:13:61:5a:68:fa:c9:ce:67:88:ff:
         8d:54:ad:30:ac:10:9b:0d:66:8a:bf:19:07:ba:25:d2:1a:33:
         dc:02:cb:12:0a:71:d6:ab:91:0c:24:da:4e:01:a1:7b:ba:b3:
         88:f8:55:0d:8f:28:b1:0f:d1:1d:b1:52:01:b3:38:dd:e3:ff:
         ea:1f:2d:15:bd:96:22:db:da:35:db:75:18:3f:11:14:b3:bd:
         e8:88:74:0d:bb:1d:a0:82:a0:6b:d8:65:f7:3b:5b:80:d0:b6:
         44:d0:3a:fe:d2:d0:07:75:25:e1:d9:0c:37:e5:4d:84:c6:71:
         8f:09:e9:30:ac:aa:72:ff:e7:40:fc:73:88:d5:55:b6:f7:6f:
         ee:2b:c4:d6:c5:da:98:a8:72:76:03:18:d3:00:25:d3:a6:f6:
         0b:e6:24:1d:b7:fe:12:6d:60:99:d9:86:cd:ce:51:c3:f8:18:
         7b:8e:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:31 2026 by rpki-client