Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File:                     4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier:          n9+2V6fnPb7zO4T6zzOyMIh8D1I2t57s9Y3DNd1/8Z8=
Subject key identifier:   C6:43:CD:0F:8D:68:F3:D8:6E:85:2A:FB:67:ED:26:7F:F4:1A:34:FA
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer:       /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial:       019EC0DB7CF83F271D3C8F7EF889C6542771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 12:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:10 +0000
Files and hashes:         1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: n0g5MkPBROqZITbUMtqOeoNthZ6AaPBhJiOGdBuZN7E=)
                          2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:7c:f8:3f:27:1d:3c:8f:7e:f8:89:c6:54:27:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
        Validity
            Not Before: Jun 13 12:01:10 2026 GMT
            Not After : Jun 14 12:01:10 2026 GMT
        Subject: CN=c643cd0f8d68f3d86e852afb67ed267ff41a34fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:a0:73:31:e4:3f:85:24:c0:5c:a3:59:8a:
                    aa:34:d1:41:f6:31:67:87:99:77:4c:a3:70:27:43:
                    b7:8f:a4:7f:d2:78:9e:f3:ee:68:a3:7b:a0:fb:e5:
                    1b:a4:f1:fc:93:66:82:c0:17:9c:b9:ab:2c:38:f0:
                    92:a1:b4:bb:f4:e1:02:e6:09:38:50:d6:69:f8:43:
                    af:59:30:2a:c5:40:63:a4:63:ac:fc:94:5d:70:a0:
                    f3:ed:9e:dc:b4:b9:84:9e:14:d4:9b:5c:04:da:70:
                    ae:98:fd:01:6f:a3:8c:1a:e3:80:53:5f:d2:1d:0f:
                    23:ae:40:9b:70:29:49:4d:64:4b:33:4c:ed:0f:cf:
                    21:c8:43:13:c1:01:7c:60:f6:98:c6:f8:c6:98:8a:
                    7a:c7:45:c4:4f:33:78:b1:23:ea:f3:ae:02:25:d1:
                    47:1b:e5:60:0b:a5:0e:82:9d:34:cc:01:40:b8:e1:
                    3a:7a:e4:1f:9e:a9:42:3f:7b:0c:49:90:39:58:2b:
                    4f:33:9a:76:01:d8:2f:85:3b:83:0f:02:bd:6b:2d:
                    af:6b:60:c7:9d:86:7d:1b:65:f9:2a:c7:39:5b:85:
                    60:e8:82:d6:23:28:e0:9d:a8:4d:7f:ae:35:da:e2:
                    f7:18:01:46:76:33:03:f0:97:0a:95:c5:56:e3:bd:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:CD:0F:8D:68:F3:D8:6E:85:2A:FB:67:ED:26:7F:F4:1A:34:FA
            X509v3 Authority Key Identifier:
                keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:05:1a:42:8a:6f:5e:7a:fd:3f:ce:7e:00:94:30:b3:77:9c:
         23:d8:dc:4a:ca:8e:7e:00:0a:1f:a5:56:f5:8a:5a:90:9a:8b:
         13:3c:1a:5f:a5:22:5f:93:3f:3b:58:fb:dc:ba:da:1d:8d:62:
         2a:52:d3:01:f2:80:b4:92:fe:84:c7:17:27:d3:21:5b:ad:c4:
         a7:f5:67:24:90:3d:21:bd:04:0f:98:26:db:f3:2a:fa:01:73:
         b8:46:19:4c:05:9c:43:f6:75:78:99:e3:e3:50:a9:d6:e1:4a:
         9a:80:76:7a:fa:ba:75:7a:2d:00:2c:71:76:08:59:f6:32:e7:
         f7:ce:a3:2f:cd:7e:cd:f0:ec:45:6f:2a:a9:cd:be:34:36:70:
         fe:1c:76:69:58:d1:3b:ce:e5:8b:98:dd:73:6d:7b:bb:63:e9:
         71:26:54:3f:39:84:b8:ba:18:5c:9b:28:8a:98:1f:0c:6e:86:
         a4:4b:a8:fc:96:68:c7:30:86:b0:d9:aa:4f:f2:c1:69:f0:4a:
         b7:6f:0a:6c:89:ea:91:03:81:05:92:fe:96:18:dd:b4:c2:66:
         a1:a8:e8:93:9f:87:c2:df:91:bb:be:77:da:8a:ec:24:8d:e6:
         92:a5:2e:e1:2f:64:83:6f:e1:0f:18:c8:3a:e6:38:c7:4e:4d:
         fa:19:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:03 2026 by rpki-client