Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File:                     5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier:          F8blCuhRk2rctd18iYTtXS4X6XmD+M+19hfpTJ6iQSc=
Subject key identifier:   79:10:99:0D:DF:09:5E:C8:DD:FB:03:AA:51:B5:E6:E6:8E:5A:F5:B9
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer:       /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial:       01A0016EF59A5B4CEBCF1C81E07A20B982DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number:          16DE
Signing time:             Fri 14 Aug 2026 18:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:44 +0000
Files and hashes:         1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: cgHblbCyZ0XH7FQv5+RuThnf0wqblnl5VGV5X218caU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:f5:9a:5b:4c:eb:cf:1c:81:e0:7a:20:b9:82:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
        Validity
            Not Before: Aug 14 18:00:44 2026 GMT
            Not After : Aug 15 18:00:44 2026 GMT
        Subject: CN=7910990ddf095ec8ddfb03aa51b5e6e68e5af5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:45:8e:d8:9e:01:e6:4a:d7:7e:e8:39:1d:
                    8a:d4:ed:a1:ab:ca:f1:ce:70:8f:b8:17:aa:16:86:
                    97:17:e0:d3:e6:f1:86:0c:e2:22:01:02:85:5c:9c:
                    86:cc:2f:26:03:d6:b6:8f:0a:31:22:50:58:de:3c:
                    16:21:ea:18:fd:5c:63:8e:52:31:29:33:1f:fe:46:
                    c6:c2:5d:d7:f5:6d:fe:fc:fb:83:c2:86:c0:28:5f:
                    3b:40:26:c5:7e:ba:30:f6:33:15:04:b9:b1:bc:b2:
                    0f:d3:43:bc:a7:ee:70:e0:f9:63:1b:e8:3c:b2:41:
                    c7:a6:4a:74:5d:8b:95:9f:b0:30:c8:8f:56:85:42:
                    e3:48:d7:8c:e9:0b:e4:64:86:96:04:22:a0:67:e9:
                    b7:2b:c4:9f:25:e8:83:dc:cf:87:d1:be:2a:60:8f:
                    68:37:7c:fd:cf:9a:b9:03:8b:ec:76:41:c6:21:23:
                    87:0d:33:60:bb:34:9e:c7:a3:0e:a5:5e:88:5c:41:
                    ca:fa:ee:88:b2:98:3a:75:15:d2:e2:b2:06:e8:79:
                    d5:a0:2c:a1:f7:ea:05:06:03:8b:ad:70:4b:15:f2:
                    4c:dc:c1:b8:4e:ac:0d:6c:1a:2c:b3:9a:26:d5:83:
                    67:01:f4:45:e7:e5:1f:36:de:ca:e8:3d:5a:c7:e7:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:99:0D:DF:09:5E:C8:DD:FB:03:AA:51:B5:E6:E6:8E:5A:F5:B9
            X509v3 Authority Key Identifier:
                keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:82:ef:d7:11:be:e5:2e:ce:88:30:a1:9c:d4:a0:dd:9a:
         d7:45:5c:4f:90:21:d7:3d:32:b0:b3:28:1c:f1:99:95:e9:fd:
         f8:c0:32:01:7c:ef:0e:99:55:b8:f1:26:d4:2d:e5:90:7d:f8:
         e5:03:99:6a:02:6e:c0:3e:9b:5c:ba:2b:e1:fe:bb:69:19:13:
         92:21:12:94:0b:4c:6f:b6:e2:d2:1f:a5:61:63:43:87:6a:6a:
         46:e4:ea:48:b8:8a:cf:2c:12:7e:b2:bf:da:ed:91:0d:91:08:
         8c:f3:b6:c2:29:4e:bf:c3:08:92:63:aa:f0:0e:9c:0c:7b:e0:
         6c:7d:0c:c6:79:73:50:e8:74:81:db:bf:1b:1a:f8:51:19:89:
         8b:7c:c8:62:ea:10:c5:43:fa:4a:cd:59:fa:11:62:e5:06:5f:
         f6:d1:55:1f:51:89:68:a6:2f:8f:dc:41:21:36:ad:b3:3d:60:
         47:d1:ad:26:be:8c:ff:4a:4d:f6:8b:04:9a:68:ec:51:5e:0a:
         c3:98:c0:af:14:a7:85:06:c2:6c:0c:5d:6e:34:f3:f7:70:93:
         1c:3c:69:37:3c:c4:95:00:34:71:df:e7:f3:ce:ed:84:0a:7d:
         c3:e3:ed:af:d2:78:90:f8:b4:5f:9e:a3:ae:be:f0:c8:9a:09:
         18:f0:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:38 2026 by rpki-client