Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File:                     1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier:          2ofxGBAcwZN/ZHNrJrJ8z9NP+lB/jffkfuSJN67s8sw=
Subject key identifier:   2E:AB:00:9E:38:DA:F7:9D:19:29:BA:7C:B0:76:87:37:AC:67:F6:D9
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer:       /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial:       019F92EDB4DB3F20DDA147AC57BB7050B57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number:          0550
Signing time:             Fri 24 Jul 2026 07:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:19 +0000
Files and hashes:         1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: h7tacQ3mgy0qevgBohvHgEyL92K1G0kjR8hDJ9aPMhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:b4:db:3f:20:dd:a1:47:ac:57:bb:70:50:b5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
        Validity
            Not Before: Jul 24 07:01:19 2026 GMT
            Not After : Jul 25 07:01:19 2026 GMT
        Subject: CN=2eab009e38daf79d1929ba7cb0768737ac67f6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:53:78:dc:cc:9a:6d:75:ce:48:68:e1:9a:
                    ea:66:e5:a6:54:72:d6:d8:1e:b4:87:84:3e:46:22:
                    bc:59:b0:ec:f7:62:76:d8:9e:22:f3:2f:70:b0:ba:
                    98:09:ef:f9:b5:d8:64:3c:7f:29:ed:df:96:24:49:
                    f4:31:00:ea:cc:08:3b:a6:3d:9b:fc:9e:09:7a:56:
                    96:e4:7b:33:7e:9d:7f:e0:bb:26:cb:20:36:1d:47:
                    5c:7b:71:98:df:2d:95:cd:01:3b:c3:5d:a3:4f:7d:
                    8d:b7:39:1e:06:fe:24:f4:47:31:8a:de:da:56:95:
                    31:01:b1:a8:9e:a5:af:09:fd:5b:14:88:6a:e2:ed:
                    98:31:b3:44:79:6a:28:f4:de:9b:1a:a3:67:d5:1c:
                    01:d0:c5:04:8b:95:ce:9c:95:b7:58:ce:2b:bc:2d:
                    11:d9:5e:76:1b:66:b6:31:df:d2:81:77:fc:df:d6:
                    a5:f3:8d:9d:bb:57:6d:2d:08:3c:ea:25:04:dd:db:
                    f1:e8:80:0f:5b:db:2a:26:1b:5b:16:d3:49:ad:c3:
                    6e:74:e0:45:43:08:de:61:7a:87:75:a4:2e:d7:6f:
                    ac:c0:7a:a4:9e:2b:90:99:09:7b:71:39:93:52:a4:
                    24:56:59:62:8d:8d:f1:81:5b:bf:c4:50:cd:49:45:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:00:9E:38:DA:F7:9D:19:29:BA:7C:B0:76:87:37:AC:67:F6:D9
            X509v3 Authority Key Identifier:
                keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:f4:8f:3e:68:16:2c:5f:f0:15:a6:df:f5:a8:f5:22:0e:
         ca:63:6c:d2:3f:06:07:a6:f6:39:61:b3:a2:19:cd:49:a2:75:
         a8:9b:31:d1:cb:a2:f2:4e:ee:73:6f:66:87:52:f5:82:9b:ee:
         0a:1c:7e:f4:60:d8:6b:a6:f4:d1:9b:b4:95:56:b9:71:5e:a8:
         8a:79:d1:98:b3:b1:94:02:be:ff:17:2c:ce:bc:bb:f5:53:5b:
         95:ab:ef:da:6f:73:e7:aa:91:40:bc:7a:91:41:10:72:c4:9b:
         22:4e:c7:a8:24:98:3f:3e:2b:74:9b:54:4d:41:3d:93:32:f3:
         a5:df:5a:4d:fa:a5:69:5c:d6:8d:af:7e:18:cb:fd:6b:ec:c1:
         f9:d3:14:01:eb:cd:e8:cd:51:87:8e:a7:68:4c:50:1c:12:18:
         d1:7e:f4:c7:21:da:ed:cd:dd:cf:15:ba:a8:39:6a:4f:f8:b8:
         85:2a:52:06:12:8b:50:34:e8:6a:df:2b:4d:52:1d:6d:f6:8c:
         46:16:b2:8a:4c:62:29:f2:54:17:6a:87:8d:21:97:17:c5:df:
         f5:98:7f:b4:10:b3:0e:7f:24:bd:cd:f3:72:93:fa:97:18:c2:
         49:9c:2d:f1:66:6c:16:e9:5e:28:ec:52:18:61:82:94:90:22:
         64:fb:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:21 2026 by rpki-client