Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          wR+41TQkbESrzRdEWtA699VqccIYnelVt9BLj67l8Jo=
Subject key identifier:   E7:A0:41:36:6F:EE:56:7B:66:E5:DB:A4:10:43:22:9D:7A:9C:50:48
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019E2F967548BE05D664FE62A74B4DB22E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0F09
Signing time:             Sat 16 May 2026 07:00:49 +0000
Manifest this update:     Sat 16 May 2026 07:00:49 +0000
Manifest next update:     Sun 17 May 2026 07:00:49 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: CC6Ab54ZIgyHMQcTiqnDlvwJffKDqXC74xIB5JxJi+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:75:48:be:05:d6:64:fe:62:a7:4b:4d:b2:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: May 16 07:00:49 2026 GMT
            Not After : May 17 07:00:49 2026 GMT
        Subject: CN=e7a041366fee567b66e5dba41043229d7a9c5048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:7b:90:89:b1:ab:0e:d8:eb:39:cd:06:95:
                    11:72:55:94:e1:43:90:19:91:65:d0:3c:3c:19:ca:
                    d5:28:69:59:01:97:63:19:36:55:36:67:7d:9e:19:
                    b6:43:e9:3f:da:30:99:61:a1:a2:7a:d0:5d:e2:08:
                    94:37:c2:1b:3b:64:6f:a4:55:e3:df:f9:59:05:8b:
                    76:70:66:e6:d2:85:29:6c:4a:52:25:d2:fa:2f:9e:
                    80:1a:1d:06:d0:aa:f2:4f:ee:0b:d6:59:5d:e5:80:
                    fa:0d:1b:9d:2e:f3:a8:71:58:eb:f3:52:0e:e9:37:
                    50:ad:f1:f0:c3:ac:a3:2d:c7:0d:e0:d1:a4:58:5d:
                    d7:73:11:df:4a:65:1f:b5:d4:c6:5b:90:9d:d1:0c:
                    b3:cf:f0:0b:bc:c5:88:60:77:3c:5c:58:4a:86:c7:
                    56:09:eb:93:fe:91:07:a2:ab:a4:0c:f1:a3:48:2c:
                    3f:02:f3:0d:7b:80:db:d3:89:5e:01:00:b5:a0:22:
                    1d:44:34:27:46:de:cd:3a:78:1d:14:d1:42:fb:1f:
                    20:fc:53:38:5a:51:a3:3a:ac:92:ec:d2:34:3c:2b:
                    80:62:55:5b:48:7b:65:80:a8:ff:17:c3:39:8a:86:
                    d0:9d:d3:4b:25:b2:ad:0f:ef:b1:a5:01:d6:89:d1:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:41:36:6F:EE:56:7B:66:E5:DB:A4:10:43:22:9D:7A:9C:50:48
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:9e:84:4b:c5:41:9e:53:91:13:c2:ac:1f:73:63:db:98:
         ca:cc:c8:4e:7a:e8:7a:0f:5b:77:fb:42:eb:c6:c3:04:33:58:
         e7:74:00:78:b5:ba:a3:9c:81:07:f4:38:98:ed:fc:64:b9:8d:
         b8:b5:30:96:96:f2:d6:dc:82:66:5d:6d:50:87:b7:58:16:81:
         35:61:c0:33:dc:2e:c4:7a:58:46:93:f8:b2:98:62:52:0b:d4:
         e9:53:68:a5:07:cc:78:4b:e5:bb:e4:89:64:90:fd:ff:ad:ca:
         88:33:2b:54:d3:79:b2:2a:56:20:6a:22:37:ab:b5:41:d7:62:
         3c:ea:36:5d:7b:7b:6b:d3:6a:a7:95:f3:38:17:99:22:af:44:
         9e:ac:31:b8:8d:fc:24:ed:c8:3a:51:20:7d:7e:e3:20:76:75:
         39:72:48:fd:bd:8f:09:03:2a:6b:7d:dd:aa:89:86:1e:54:b9:
         50:8a:b5:a9:f8:8a:ef:ef:d9:b3:f1:55:fb:25:18:8f:46:cf:
         91:8c:4c:f8:93:d3:de:49:7f:fb:ff:fe:ca:00:8a:7b:f8:a0:
         b9:e0:a4:ac:8c:bb:7d:d2:db:97:a4:2c:4a:c9:f9:84:72:95:
         da:96:95:9c:0a:cb:4f:73:ca:05:31:7d:ee:83:4f:2d:cb:ae:
         1f:8d:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:43 2026 by rpki-client