Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          /2kIYI7tPJi51CUo3LayodAkBiaNld1STRYzSk5ZHes=
Subject key identifier:   0B:5C:EA:FD:9A:9D:FF:FE:54:0F:E7:06:B2:D4:CC:7D:56:E4:4D:B4
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       019D99D0B3CEE819DDE9AAF41CAF25A170A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          05F6
Signing time:             Fri 17 Apr 2026 05:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:24 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: 5vQ7TTwqZtdKzmVy0aCMLx1jEk/5OtbWihhMRembRFM=)
                          2: GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa (hash: BJA1H3BJte9PdHpAhJG8NebAV+K9kBOQF7cMdvjOdG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b3:ce:e8:19:dd:e9:aa:f4:1c:af:25:a1:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: Apr 17 05:01:24 2026 GMT
            Not After : Apr 18 05:01:24 2026 GMT
        Subject: CN=0b5ceafd9a9dfffe540fe706b2d4cc7d56e44db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:fb:0d:7b:0d:31:24:52:64:b8:e2:21:02:
                    45:42:0c:1c:be:07:04:84:fa:ec:0c:38:2a:3e:14:
                    2f:d5:ac:5b:f7:9b:34:0d:96:72:e9:ca:a2:58:e6:
                    06:61:30:82:40:a6:91:6d:5c:18:b0:77:9b:c0:ca:
                    5a:c7:f1:74:be:cd:31:2a:b7:72:67:06:7c:95:96:
                    38:cf:b1:62:2c:95:03:71:85:cf:c8:da:44:11:6e:
                    a9:af:35:6c:c6:e9:36:02:09:fd:01:7f:b7:e0:5f:
                    b6:22:7d:52:a7:43:7d:5c:d1:be:fe:b5:86:d9:ea:
                    db:65:91:20:00:f2:54:4d:e5:e0:25:b3:f9:4f:72:
                    ee:16:5f:b2:8b:f1:6f:10:e4:1f:46:44:79:bf:df:
                    57:68:0a:b7:44:74:2b:6f:93:0b:a1:a6:69:50:d9:
                    86:2f:11:53:06:b3:df:e1:36:c1:23:d5:64:2a:91:
                    6b:6c:21:f8:8a:43:e2:72:d0:a0:df:1f:47:82:47:
                    33:b4:b5:8c:94:e2:2a:f7:7c:31:e9:3c:ca:03:9d:
                    a9:a0:f4:e5:46:8b:37:1d:e1:c7:21:dc:a1:ea:84:
                    e7:a4:b8:6f:fa:80:ee:ca:06:74:b2:e0:9d:f8:61:
                    f6:64:ec:ec:c0:e8:df:ed:e2:f9:c7:91:11:dc:cc:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:EA:FD:9A:9D:FF:FE:54:0F:E7:06:B2:D4:CC:7D:56:E4:4D:B4
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:68:3c:1f:00:47:2a:e6:ca:a8:13:21:53:96:86:7e:da:
         7b:59:87:35:aa:dd:93:04:18:ab:b1:0d:9b:0e:3a:e4:a1:63:
         15:25:19:6e:01:76:1b:08:cf:d9:0a:07:98:26:cf:31:92:70:
         1f:8f:cf:ae:85:f7:34:b5:86:fd:ed:49:46:72:28:24:f0:ff:
         c0:90:62:f9:a7:5f:59:37:2c:40:20:bb:b9:10:a9:0b:3d:6d:
         d9:27:79:ce:cd:1b:2d:b9:01:6e:ee:95:5f:ed:fb:0e:8c:8b:
         41:81:0e:23:ae:00:e5:bc:ed:06:38:e3:37:e9:91:58:40:96:
         9e:b0:90:51:e3:c0:27:69:12:bb:df:26:f6:56:78:48:8f:eb:
         26:d2:67:46:63:a4:76:bb:2a:73:fd:31:6d:53:a4:d1:57:fa:
         a1:28:cd:55:86:ff:38:cf:9a:55:28:19:3c:22:b8:48:80:24:
         40:50:29:2e:21:ab:aa:41:c0:aa:5a:f2:fc:b8:c5:98:d1:ad:
         dd:eb:04:8b:e7:e5:11:ea:4f:4d:c4:2a:01:4b:33:65:82:27:
         b4:ef:d5:1c:e0:df:15:14:2a:77:46:30:5d:95:f8:42:30:d5:
         25:e4:88:be:56:ac:b0:3f:25:26:9d:ec:6f:8d:c7:b2:d7:50:
         f2:fd:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:42 2026 by rpki-client