Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          ji37IhbUPLsGjwToQ7JWCvUCiuoxIOEpaEO7q49RDZQ=
Subject key identifier:   24:94:6D:09:7A:88:0F:C2:99:5B:74:7E:02:91:5D:D7:15:CD:20:DE
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       019E30732C4AD93ADF1424AD128C2FCB78DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          0D1F
Signing time:             Sat 16 May 2026 11:01:54 +0000
Manifest this update:     Sat 16 May 2026 11:01:54 +0000
Manifest next update:     Sun 17 May 2026 11:01:54 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: jEpuF4lUOdGLhEe4OcxZ/IM/smescBgUEtZDoq5TtGg=)
                          2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:2c:4a:d9:3a:df:14:24:ad:12:8c:2f:cb:78:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: May 16 11:01:54 2026 GMT
            Not After : May 17 11:01:54 2026 GMT
        Subject: CN=24946d097a880fc2995b747e02915dd715cd20de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:ba:ad:c0:40:eb:26:c8:d7:c8:5e:55:25:
                    a6:7b:87:3d:25:38:df:f7:6a:27:4a:3a:53:7d:f2:
                    1c:3d:e0:2e:a6:e7:21:bf:1a:98:b5:0f:70:d6:33:
                    7d:3c:c6:21:7a:70:b2:01:5c:46:a2:6a:c8:a0:e3:
                    8d:cd:0a:82:54:48:19:16:a3:7b:9a:55:06:84:8c:
                    d3:d4:98:a5:01:af:4d:ce:d8:bd:bf:e1:c0:0f:48:
                    eb:16:2e:d2:05:38:d4:ba:1b:eb:ca:0c:48:2f:cc:
                    d5:d4:cf:d1:07:22:de:59:df:20:34:dd:4f:29:7e:
                    62:5c:ac:bf:68:09:98:ed:fb:db:ac:d4:03:e4:97:
                    55:22:e2:0c:ed:65:29:0f:8b:a0:96:2a:29:40:fc:
                    53:87:75:04:16:d9:1e:5c:3b:3e:6e:69:d1:e0:2e:
                    f2:5f:eb:cb:ff:7e:14:ed:1b:f7:8d:3f:f8:ad:14:
                    79:e3:80:25:77:ab:7b:76:5d:c4:55:b4:51:3a:e3:
                    19:b9:25:f7:57:61:0d:bd:65:10:58:89:5c:f0:db:
                    e7:73:4b:f6:76:62:36:68:04:2b:60:b2:a8:b1:5a:
                    66:ea:55:8c:c1:80:2a:8a:b6:44:e5:25:2d:c2:26:
                    ce:58:df:7a:ff:80:33:a3:8c:0c:11:1c:fd:e1:86:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:94:6D:09:7A:88:0F:C2:99:5B:74:7E:02:91:5D:D7:15:CD:20:DE
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:9e:71:69:0c:5a:7a:2e:16:ea:c9:04:74:74:00:02:50:1f:
         7e:eb:89:21:11:99:58:a3:b5:36:be:f3:54:4a:a6:1c:87:ab:
         01:21:03:3c:84:94:32:8e:04:8d:7f:93:1a:9f:33:52:a1:e9:
         77:25:98:b1:c9:6e:6c:07:96:d5:bc:9d:c0:23:b5:36:93:ec:
         56:3d:b3:d0:08:e3:ea:3a:bd:e6:3d:43:fd:c1:5e:ab:55:a3:
         e2:ca:bd:18:c5:84:c4:8c:4d:20:a2:1d:93:fc:86:14:ba:6b:
         e0:bb:43:e4:b6:4e:79:76:f0:ff:c5:4d:02:9c:47:b3:c2:e4:
         53:5a:14:f1:75:6c:b4:bc:74:66:06:51:10:e0:17:49:75:58:
         93:ac:6d:64:ca:7e:3b:bb:c8:c9:3b:46:a8:6b:6e:c7:6f:9a:
         28:8c:0e:85:88:08:6d:48:52:15:93:42:21:fd:85:9d:49:61:
         16:8c:a2:16:47:49:fa:ac:20:8e:2b:c3:51:63:a0:c4:44:23:
         72:ad:2e:d7:cc:d9:35:45:76:ab:31:63:63:34:4d:24:88:2a:
         38:2d:14:1c:b2:99:ca:15:d0:e8:d2:31:11:c4:f6:e7:89:0f:
         fa:34:e0:69:df:c3:ff:10:82:3d:b5:8a:96:90:99:4f:b1:6b:
         c4:52:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:04 2026 by rpki-client