Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          gTUa4NSB+LkgikOZePFUvINPv4Kz38oO7/EZR5JD1Xo=
Subject key identifier:   5E:91:D7:F9:D4:87:6C:27:C5:46:93:BF:9D:0D:34:C8:AB:07:17:D7
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019F19430BC62931F0AF4E083CE1C6CE8276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0F82
Signing time:             Tue 30 Jun 2026 16:00:51 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:51 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:51 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: lcLFpDsol4KQviKXtmrOQNNtrVFvlEOK5yOeBxQkbpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:0b:c6:29:31:f0:af:4e:08:3c:e1:c6:ce:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Jun 30 16:00:51 2026 GMT
            Not After : Jul  1 16:00:51 2026 GMT
        Subject: CN=5e91d7f9d4876c27c54693bf9d0d34c8ab0717d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:02:40:44:6c:ce:79:7c:ef:db:8d:4e:83:
                    bb:e8:54:3b:49:47:c2:7e:e6:cf:d7:e0:07:42:12:
                    68:e7:bd:a4:af:08:df:62:fd:48:00:02:dd:a3:00:
                    b1:52:99:d5:92:94:c1:7c:e2:f6:a5:79:97:15:e7:
                    5a:17:04:5c:5c:7e:16:d8:20:a5:5b:4e:9c:18:39:
                    6a:da:8d:27:36:18:03:f6:60:ee:b4:57:c6:48:ae:
                    f8:84:9e:80:bf:3e:03:d1:44:80:d6:10:b2:3d:d3:
                    e8:85:19:92:f2:a4:11:c3:bc:64:b5:4c:91:00:75:
                    a0:dd:59:b9:5c:96:49:7b:82:c9:e0:e1:70:98:37:
                    fb:85:c2:2f:70:4e:ea:eb:18:07:b4:29:5d:4f:b8:
                    69:b2:f2:dd:cd:19:54:10:e7:5b:39:6f:ac:0a:8a:
                    c2:c0:b6:31:0b:7c:28:08:c6:44:9d:3a:22:4e:8c:
                    b7:66:c9:bf:8d:0d:94:86:ff:a9:22:e8:f0:59:d6:
                    69:43:cf:66:d1:c4:a8:31:d8:52:19:e8:59:ae:ca:
                    1b:c6:c0:c5:73:43:cf:af:ea:c2:44:38:0e:5c:4c:
                    53:7a:e4:5f:27:d5:6c:1a:ec:1f:95:34:83:7d:37:
                    e3:c0:a3:8f:32:b8:ba:a5:8c:55:84:1c:f9:f1:15:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:91:D7:F9:D4:87:6C:27:C5:46:93:BF:9D:0D:34:C8:AB:07:17:D7
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:33:2e:ce:5d:25:48:09:56:3e:25:83:81:69:27:cb:e3:
         b9:6d:b0:a7:48:94:b1:45:f5:56:78:0a:22:4c:a4:ed:ba:bb:
         2b:ab:99:3a:b4:8c:be:8f:39:4a:ad:a5:07:2a:82:e9:68:a2:
         08:ad:8b:1b:fd:4f:06:96:6f:ed:ff:22:c6:f5:be:f5:5b:21:
         28:43:72:60:ca:bc:de:41:21:d8:89:15:0d:61:41:70:b1:ef:
         ec:08:b2:4b:04:a8:85:c4:47:8a:01:2f:78:fe:7f:18:25:25:
         fd:1d:81:b4:7a:f7:d8:92:c9:be:77:ae:a2:f8:51:55:ab:4c:
         93:f3:85:94:41:ff:7f:27:64:7b:95:c1:65:47:85:6c:10:c4:
         2f:43:bf:f1:56:85:83:0e:3e:ae:a9:8c:a8:5a:2a:03:29:bf:
         04:50:c8:f1:28:75:44:49:72:86:c0:0d:6a:17:d9:64:53:74:
         86:f1:a9:61:d5:81:c7:ff:57:56:72:48:d5:94:d1:6b:58:aa:
         24:fc:05:43:0d:fe:71:34:a8:eb:05:25:6f:a4:7f:34:ab:c3:
         04:04:f2:1c:51:83:37:ee:02:fa:70:15:58:38:4b:06:a3:72:
         f5:04:35:cc:9d:b7:63:21:74:32:3a:11:1a:75:b6:cc:e7:d4:
         de:1c:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:28 2026 by rpki-client