Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File:                     5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier:          lwz3H/PlSfP6UZDHdsMgOQCSlM120P9K+z7iyH8/dV0=
Subject key identifier:   E8:86:74:3E:05:C2:DF:03:DB:4A:A0:D6:7D:63:18:5E:AE:6F:B1:E7
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer:       /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial:       019EBFC9010BD195946655CBE87DA9C2BF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 07:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:21 +0000
Files and hashes:         1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: SZLqtjj3xUbHehTiDPthhkDnVlt2TRv2gY8c+jTSzic=)
                          2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:01:0b:d1:95:94:66:55:cb:e8:7d:a9:c2:bf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
        Validity
            Not Before: Jun 13 07:01:21 2026 GMT
            Not After : Jun 14 07:01:21 2026 GMT
        Subject: CN=e886743e05c2df03db4aa0d67d63185eae6fb1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:00:e1:04:b4:18:62:ab:cc:87:98:1f:11:
                    1d:f4:09:e0:47:01:4d:bd:9e:4b:a0:2c:81:e6:6b:
                    b3:fe:7f:de:4c:ba:4e:80:f7:87:7d:31:82:26:f5:
                    c7:46:bb:5c:18:0c:40:a1:fd:e3:70:04:4a:60:b9:
                    8f:ee:59:5a:2b:3e:d3:2d:35:04:bf:13:54:b6:5c:
                    b2:8e:ce:a6:0b:57:4d:47:d3:22:4a:23:61:d8:54:
                    8c:ca:dc:4b:7c:bb:10:e5:b9:f6:bf:b0:45:f9:ae:
                    7e:8b:56:62:e2:ea:c4:46:9e:78:08:a3:12:2f:47:
                    75:b8:21:12:bd:f1:f1:d9:13:d0:f7:fd:c2:0c:0a:
                    a7:93:7d:7b:59:e0:4d:4e:c2:3b:c7:bf:22:15:63:
                    03:26:93:e4:b0:4c:b9:48:b8:da:13:d7:a7:bc:19:
                    9c:dd:5b:0f:d2:22:f5:14:7e:65:ed:a8:07:17:aa:
                    cd:fb:ff:5a:4c:02:a6:fb:5c:9e:4a:27:c4:dd:a4:
                    42:69:d2:2e:d9:71:3b:e7:35:dc:bd:27:ed:5b:4f:
                    2b:b1:f6:5e:c1:22:04:dd:29:a3:7d:c6:fd:34:a2:
                    96:25:97:d6:e9:82:19:33:8e:30:85:7f:37:2f:49:
                    cd:22:ad:21:ff:df:d8:8f:e0:f2:7f:4f:ea:2d:15:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:74:3E:05:C2:DF:03:DB:4A:A0:D6:7D:63:18:5E:AE:6F:B1:E7
            X509v3 Authority Key Identifier:
                keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:20:e5:cb:54:8a:cc:95:02:f6:bb:a8:8b:f0:8c:e2:82:
         c7:bd:4f:27:a4:df:fb:40:15:29:46:30:0a:36:98:07:3f:d8:
         ca:c8:13:32:c8:c4:b7:61:39:69:8c:36:a9:db:cb:9b:71:cc:
         33:67:39:ed:87:cd:f2:d1:00:80:b1:b0:d9:e6:46:35:26:6d:
         30:a4:1a:bd:70:04:11:c4:2c:5a:cf:e2:4b:11:7e:55:0c:7c:
         92:cb:19:1a:3a:0e:0b:aa:1b:05:b6:e0:fc:59:08:bf:3d:7d:
         e7:60:93:af:26:39:c8:9c:67:d1:50:2e:06:87:cb:6c:23:5c:
         d5:85:b0:20:91:c6:eb:e4:9e:19:aa:03:08:78:15:df:65:f5:
         f6:fa:93:97:a7:40:0a:8c:31:a5:28:a0:87:39:92:ab:2a:19:
         e6:35:01:0b:cc:8b:0b:74:a0:a4:8d:a4:78:d9:f7:56:d5:48:
         5c:c5:72:92:61:53:b7:ff:e2:96:ae:2d:42:0d:4c:58:1f:6d:
         b1:59:15:68:13:04:53:ee:42:22:ac:db:34:55:1b:43:aa:70:
         5f:21:28:83:41:3b:4a:1c:2a:05:5c:68:f2:39:f3:5a:ab:2f:
         4f:8c:e3:56:9a:48:8d:30:05:d8:63:01:4f:c7:50:65:5f:03:
         67:60:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:26 2026 by rpki-client