Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          9+qNfsp1Cn5MKpY9IAtDSGuen+pYtQVHOX1J25a8Crg=
Subject key identifier:   1E:72:CC:EB:B9:EC:3F:BD:6D:8E:64:02:14:33:69:AB:AF:FD:3D:6C
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       019EBB100686B249314A3E676C78A5DCBA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          18EA
Signing time:             Fri 12 Jun 2026 09:00:50 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:50 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:50 +0000
Files and hashes:         1: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: IlTQv4BHbMz54XURFTcXvb0hwRpd63GUIPxebetWXnQ=)
                          2: wVQATVneJGNgeJdEAAt8JoUma-o.roa (hash: 0T7EKoEIVpeyvaEceVoNM5TEKal0WHNVbKVS5qTgZTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:10:06:86:b2:49:31:4a:3e:67:6c:78:a5:dc:ba:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Jun 12 09:00:50 2026 GMT
            Not After : Jun 13 09:00:50 2026 GMT
        Subject: CN=1e72ccebb9ec3fbd6d8e6402143369abaffd3d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:e7:9d:ae:c9:06:01:c4:62:69:31:29:68:
                    c1:bb:1e:cf:2a:a8:8d:4a:42:b9:e9:da:82:be:40:
                    20:5c:7c:69:8e:db:58:8b:b1:c3:d8:ac:84:9c:de:
                    07:5b:d4:fa:a5:ae:37:90:17:84:90:b4:bd:e3:64:
                    e6:47:d3:11:70:0a:45:38:c9:97:89:f3:a6:a1:3c:
                    46:42:8b:79:71:4e:1c:c7:c1:c4:3c:eb:56:2f:7f:
                    c8:bb:8b:fc:3b:ba:eb:23:d8:a9:fe:ed:df:6d:50:
                    3c:07:bc:aa:d9:d8:62:ac:c4:02:9c:b1:a2:7f:78:
                    7f:a1:eb:07:43:39:7e:2f:49:b3:bb:b6:a3:83:b2:
                    ec:d0:08:75:21:a0:2d:f6:12:b3:82:4f:7e:6a:dd:
                    cf:23:fb:13:d3:dc:12:84:22:ea:47:51:da:95:e6:
                    c1:25:e3:03:b4:61:8b:00:6c:8c:96:29:75:94:c0:
                    19:6a:cd:82:c7:7a:97:2e:15:fe:fc:52:1d:db:b7:
                    c9:d7:95:60:94:66:35:2a:93:0a:40:04:a9:b5:cd:
                    6c:eb:ab:9b:1a:e3:c6:86:d6:c3:d3:d7:80:ca:bd:
                    26:f6:83:ff:e8:a3:af:65:cf:9f:88:e1:7d:7b:92:
                    7b:00:8b:a2:af:25:90:1b:25:df:63:c7:a9:80:a8:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:CC:EB:B9:EC:3F:BD:6D:8E:64:02:14:33:69:AB:AF:FD:3D:6C
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:69:64:5b:99:06:d4:2e:b1:f0:d8:2e:8a:49:c0:9e:b3:e1:
         ff:ab:c5:e5:12:9d:5a:cc:a9:62:53:ac:89:9f:dc:8c:6d:9b:
         78:16:60:d7:57:2e:52:18:9e:32:ef:cc:b0:4e:9a:ce:d2:82:
         0b:1b:51:1e:cd:20:9f:d1:01:d6:b0:88:8c:d7:bd:94:bc:01:
         82:d8:38:15:40:89:f6:2b:4c:75:c1:eb:32:72:cc:12:cc:57:
         1e:8f:8b:bd:0a:cd:c9:43:7a:8e:53:36:d1:b9:31:fb:6b:a9:
         a1:81:a1:3e:3d:02:92:71:77:f8:d7:03:64:3b:a7:43:ad:30:
         9d:fb:b9:1a:74:89:67:a7:07:e8:80:34:a0:e7:bd:43:64:f4:
         12:7b:23:c0:dc:b3:51:c1:62:a7:2a:17:f0:88:30:e4:c1:d0:
         0c:01:cb:c7:cc:7a:c1:49:cf:56:b9:85:32:42:b8:33:b2:5a:
         77:36:65:7c:7b:f1:be:10:85:f7:71:74:ed:6f:a4:6a:43:d7:
         dd:5e:ff:c9:6f:91:24:93:94:35:e5:40:2e:1f:f9:6e:58:92:
         4d:9b:12:f6:71:04:85:33:5e:15:c9:c3:fe:0f:e1:b1:96:fc:
         61:cb:2f:d5:0d:05:f8:ee:fc:9f:dc:f6:71:e1:cd:e9:ca:41:
         eb:6e:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:17:17 2026 by rpki-client