Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          5a3cLwS4Rb5wEvpv8oG+b2TivHfz46ZHWTK6iUJNw88=
Subject key identifier:   30:92:0B:AB:B5:82:BA:19:DD:EC:39:07:BE:13:39:0B:25:35:D8:AB
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       019F8FEC8B3AFA207392A6880AE129456FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          0DD5
Signing time:             Thu 23 Jul 2026 17:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:11 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: zF/aePn7tQfhX9LarW9kIprK/f9s4V25TCjjbtb4MsE=)
                          2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:8b:3a:fa:20:73:92:a6:88:0a:e1:29:45:6f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: Jul 23 17:01:11 2026 GMT
            Not After : Jul 24 17:01:11 2026 GMT
        Subject: CN=30920babb582ba19ddec3907be13390b2535d8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:b0:ea:ee:76:d7:6a:b2:0f:a7:3d:7d:21:
                    19:86:b0:8e:48:6f:ba:3c:cf:48:4c:30:98:e0:00:
                    b3:6e:4f:08:56:79:68:48:b8:aa:a7:57:67:4c:a4:
                    83:27:b1:93:a7:b6:08:db:fc:e1:76:1f:64:25:d2:
                    2f:0b:c4:45:d8:8e:16:b8:cf:45:12:b6:fe:fc:91:
                    7d:44:2d:76:f2:2c:2a:70:14:61:ae:ff:73:04:29:
                    e9:57:bf:a9:9d:73:16:97:22:d0:61:81:cf:65:c6:
                    0e:53:2c:51:06:3c:3b:18:f0:dd:e4:5a:ad:8a:85:
                    54:b3:61:9f:48:c6:cb:4b:c8:3d:fc:95:68:5b:77:
                    f7:61:f8:30:dd:16:54:58:ce:d6:6b:fc:aa:1b:c4:
                    c9:95:42:6c:3a:57:28:03:43:44:0a:ba:f0:bb:9e:
                    2c:5b:54:11:97:49:bc:3c:88:ce:f3:90:ee:0d:eb:
                    10:fe:b4:17:2b:07:c0:fa:e2:3b:ec:1d:75:5f:c6:
                    fd:c1:6f:14:cf:2f:76:d4:e0:d0:cc:f2:c7:8f:dd:
                    01:27:e4:53:00:59:7f:94:fb:3f:32:e4:fb:14:ce:
                    fd:6b:6d:7e:2c:85:8f:c8:46:0b:10:d7:ce:44:72:
                    00:99:e3:b6:bd:a3:20:b0:e2:73:0a:aa:d0:d4:05:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:0B:AB:B5:82:BA:19:DD:EC:39:07:BE:13:39:0B:25:35:D8:AB
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:09:54:17:51:5e:11:51:6a:09:51:d5:92:7e:c4:36:03:
         b4:8e:a6:ec:a7:f5:a2:10:7e:f1:8d:d8:6e:06:87:a1:01:b4:
         a7:6c:f3:ff:0c:a4:4c:ef:ee:09:2b:48:e8:de:9f:ed:f0:f3:
         ea:13:57:4e:b0:f0:8f:c8:90:67:1c:ed:07:8c:13:a5:ac:ab:
         ac:f3:4b:22:3c:8b:27:e2:02:04:5a:cc:6f:c2:8e:e3:d6:1a:
         58:95:b3:64:3a:04:5c:55:dc:29:65:7f:10:af:c7:14:c5:5a:
         8d:7f:05:8c:f6:5b:73:4e:6e:44:6b:10:9c:da:82:74:6b:a6:
         bf:23:d7:71:51:5d:18:ef:e0:72:f9:30:aa:b2:ad:cc:3c:e4:
         9c:19:43:4a:c3:2a:a3:26:13:a5:f7:c1:ab:2f:55:73:fe:7b:
         f9:ad:88:f9:b1:4c:b8:29:2f:dc:2e:a9:ac:25:e8:9a:6e:87:
         6c:11:29:d4:b8:b7:d3:e9:52:3e:4a:3f:02:d7:2a:dc:64:e1:
         91:d7:4f:85:d8:5b:f5:8d:47:46:61:03:c0:77:54:e7:04:c1:
         ba:b7:e6:84:8b:d3:c5:0d:5b:88:6a:76:85:c4:72:32:a4:a4:
         60:8c:d1:95:7c:63:4c:73:d5:31:74:d6:a7:ef:ee:64:33:72:
         c0:f8:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:16 2026 by rpki-client