Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          OqArZjxdB/E/OcS/7gXecZEzOX+S8uV1ck7fZ2e5brc=
Subject key identifier:   EA:D5:16:EC:76:DC:C2:04:6B:73:61:26:A9:6D:97:7F:77:50:07:6C
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019F90FEA9225210961488205493DFA1902C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0FC0
Signing time:             Thu 23 Jul 2026 22:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:36 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: RqnyshS4B5gRDCwAwFDWpzvmkg4kjlcB+9dmOwPcGPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:a9:22:52:10:96:14:88:20:54:93:df:a1:90:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Jul 23 22:00:36 2026 GMT
            Not After : Jul 24 22:00:36 2026 GMT
        Subject: CN=ead516ec76dcc2046b736126a96d977f7750076c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:c5:94:bb:01:64:9a:26:88:76:62:5b:31:
                    1a:58:78:20:4e:ec:bc:b8:61:e3:72:79:f0:8c:82:
                    96:21:e6:69:7d:c6:46:a8:46:e2:b4:0f:95:9c:59:
                    d8:a2:07:8d:60:0f:3e:7b:7a:5e:ba:a3:fa:9d:50:
                    66:aa:96:50:d7:d7:c7:3e:6d:88:95:c0:fa:61:57:
                    d4:3b:d4:d2:80:95:da:7d:82:40:6c:9a:c9:b1:1d:
                    c3:ad:84:a8:c2:b3:9b:c1:73:b5:e1:9c:dc:ff:41:
                    ef:a1:bc:dd:92:bf:b3:92:87:b9:5a:f0:21:27:a0:
                    d6:76:e4:b5:c3:70:13:70:3e:0e:6d:07:e9:96:cb:
                    f3:1a:56:2a:a0:76:64:7f:bc:5a:d7:87:4d:41:db:
                    db:b7:b7:a7:22:4a:9a:a1:b4:b8:43:3f:7b:7a:f2:
                    e7:68:db:c5:70:27:7f:6b:b3:9f:68:5e:1a:71:f2:
                    71:29:ed:70:74:38:d4:af:9f:d6:35:37:ea:ca:d8:
                    8c:d2:45:e7:29:60:0c:99:91:d6:47:f0:46:5b:4e:
                    eb:f2:03:9a:73:74:94:e3:e3:25:26:40:c1:43:52:
                    19:ae:5d:53:da:63:0e:22:da:0d:ea:e6:04:46:68:
                    5b:cd:b2:22:2d:62:8f:b1:91:93:99:36:05:3f:47:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:16:EC:76:DC:C2:04:6B:73:61:26:A9:6D:97:7F:77:50:07:6C
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:01:3a:0a:af:36:56:26:15:2b:92:c5:e9:01:9b:9a:16:
         3e:78:c3:a9:3d:73:de:d1:31:48:aa:6d:24:cf:55:a8:13:5f:
         bf:58:09:bc:60:04:41:97:36:ab:fc:9a:b4:6f:f8:de:da:5e:
         34:ab:b1:b5:f4:53:eb:04:5e:9e:6b:e9:e9:9f:e4:b0:bd:3b:
         6e:2b:4c:0f:6c:71:7f:76:3b:89:1c:55:aa:66:6e:19:2f:4b:
         45:22:8d:43:a2:41:82:cb:5d:a4:3c:46:6f:6e:d0:55:17:f0:
         64:b4:00:0a:05:a3:e4:39:16:f7:42:0a:8f:62:97:6f:7a:23:
         21:b0:74:a3:02:bf:8f:ef:e1:89:6e:b4:82:2f:11:81:3b:23:
         4b:b0:2b:a4:47:3c:11:46:e9:43:c6:a8:49:e4:c1:3d:bb:1b:
         81:97:b7:39:2e:f6:9c:b7:0b:4e:47:6d:07:6d:7c:49:52:87:
         b4:7e:74:38:14:b5:b9:87:db:cf:44:02:3b:92:01:0f:06:27:
         32:01:ed:83:cf:90:be:9d:78:37:b1:4f:71:40:14:98:2d:4c:
         fd:93:69:f2:8a:4a:d4:1d:bf:8d:04:fd:5b:87:45:7b:1f:fd:
         45:93:41:a7:5e:4c:b4:62:0b:6b:09:03:ab:ae:f3:bd:2e:57:
         0a:ac:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:01 2026 by rpki-client