Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File:                     spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier:          9QcHtWUq36I502DdM1Nt2wAIp+QbjoIAQRU4QYKbXsY=
Subject key identifier:   55:21:18:B4:49:BE:0F:06:18:BB:70:77:DD:52:FC:DE:5C:42:4B:79
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer:       /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial:       019ED42B0C799711D7CF60674217755A75DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number:          186A
Signing time:             Wed 17 Jun 2026 06:00:51 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:51 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:51 +0000
Files and hashes:         1: 0E-nyOZ29zT4VlvH5MYeOKciQqI.roa (hash: n1KClvottVe9Rxjk6bmhkUknz6tneHeORGIxNcy3VKk=)
                          2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: YEAXQyPNV2ZZKzNgVWZbDj/rNu2qbrXkb4fT77BEwtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:0c:79:97:11:d7:cf:60:67:42:17:75:5a:75:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
        Validity
            Not Before: Jun 17 06:00:51 2026 GMT
            Not After : Jun 18 06:00:51 2026 GMT
        Subject: CN=552118b449be0f0618bb7077dd52fcde5c424b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:b6:69:af:8b:d1:6e:43:89:f0:91:50:9d:
                    76:2b:f4:d7:33:64:aa:0d:f9:1d:97:da:8f:27:4a:
                    89:ae:03:37:c4:c6:91:3f:a1:dd:69:74:6e:cf:b1:
                    3b:7f:d8:0a:b2:5f:5b:d4:37:96:68:cd:a0:85:60:
                    b8:d3:c8:b4:f7:25:d9:04:74:c6:4f:f1:46:e4:c1:
                    26:24:52:c2:32:e4:16:6f:e4:ee:d7:f3:43:3b:a3:
                    7b:2b:7b:8f:0b:4c:c3:2e:4a:fe:c6:8a:b0:2d:4c:
                    df:ea:7d:6d:e9:b5:32:f5:d0:db:01:51:2c:1b:c8:
                    60:c6:c5:84:d7:7e:bf:77:dc:5a:46:f8:39:4d:cc:
                    22:52:93:75:c6:0f:75:7c:d9:08:b9:15:d0:f3:af:
                    be:c0:c7:de:61:0b:45:9c:06:1a:45:32:31:89:96:
                    89:36:d7:c6:49:1c:3f:09:6e:1a:13:14:78:44:5b:
                    b1:9e:50:fe:3a:ec:12:ac:b7:ee:b0:0e:61:fc:03:
                    23:2a:3e:98:99:66:68:ff:8a:72:2c:4a:9c:47:60:
                    3c:dc:6f:1d:56:28:86:74:c8:ec:25:c5:d5:29:35:
                    ac:2a:41:40:e9:32:1c:d8:f4:fc:aa:ff:17:98:9e:
                    70:c1:d9:2d:36:3e:b4:55:2c:ce:21:ed:37:77:60:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:21:18:B4:49:BE:0F:06:18:BB:70:77:DD:52:FC:DE:5C:42:4B:79
            X509v3 Authority Key Identifier:
                keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:f9:2e:c3:4d:3c:94:59:a4:f8:5a:c5:13:c3:1d:46:64:
         c5:3b:f4:66:75:7f:b6:1a:ed:b0:e8:b1:a5:a6:b8:d2:81:bb:
         98:e0:20:02:aa:77:f3:bf:08:cb:8f:e6:03:76:8a:16:73:93:
         3f:da:bf:cc:24:2c:9d:57:63:83:27:10:77:63:06:2f:1d:0c:
         ab:b8:19:be:c2:6d:99:7a:68:32:05:60:b6:09:03:ec:f9:63:
         61:19:4e:4f:fc:38:00:92:c4:e1:ee:17:56:ee:7d:44:df:90:
         c7:c1:d0:6f:20:36:d8:94:cf:4b:e9:df:28:57:68:17:24:76:
         5e:c8:37:fc:03:8a:a5:a4:66:b4:91:b8:b0:3f:fb:3d:b4:0c:
         a2:94:a5:97:d3:02:25:0f:ce:e2:96:f4:c0:42:b2:35:b4:73:
         fe:0a:28:46:b1:f1:0a:ac:06:82:75:4e:9b:20:f5:c1:7a:97:
         c7:a9:c5:7c:fb:54:29:7b:e9:a3:05:a9:dc:92:24:4f:11:46:
         9e:3d:33:7c:16:9d:25:7d:aa:53:3b:8d:b0:77:ed:8f:d3:13:
         2c:c1:8d:0e:04:1c:02:32:43:49:75:b8:e8:87:03:06:fd:f4:
         07:b7:8a:54:cf:81:0f:a7:1e:22:88:d6:2e:46:78:66:79:eb:
         bc:ae:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:06:03 2026 by rpki-client