Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          b6LVTNaNReb3YgHElLzJkiTKwoIV4Ijlpydk90okYhE=
Subject key identifier:   DF:9F:DC:F8:20:59:28:EA:E2:16:52:1C:78:AC:74:8E:F7:28:33:DB
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       019EC03614CABECC332ED8A6693AABD04313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          18F4
Signing time:             Sat 13 Jun 2026 09:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:30 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: dVgW5edVjdTx4ARefsj1KvXlrTMmZXy42CYb6Pm5HRE=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:14:ca:be:cc:33:2e:d8:a6:69:3a:ab:d0:43:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Jun 13 09:00:30 2026 GMT
            Not After : Jun 14 09:00:30 2026 GMT
        Subject: CN=df9fdcf8205928eae216521c78ac748ef72833db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:68:8a:6d:86:1e:77:5a:d5:70:3e:c0:aa:
                    3e:5c:c6:ac:16:e8:ba:83:04:3b:fd:69:2b:7a:2e:
                    eb:bd:c0:d4:e4:00:d3:0f:dd:76:1a:78:b3:1f:1e:
                    bf:b0:6d:41:75:90:9a:6e:de:9a:7e:14:f0:22:34:
                    d2:02:8d:17:79:82:e1:6d:78:7f:ea:09:76:01:38:
                    f9:b7:0f:bd:19:f7:62:34:40:40:27:10:8a:2c:da:
                    05:cc:36:d4:65:08:d2:15:5d:3d:6d:0e:a8:6e:61:
                    7a:91:65:75:08:13:49:26:c6:cf:73:a6:d6:39:11:
                    f7:cf:e4:03:a6:48:83:f9:6d:88:19:ca:0d:4b:4e:
                    ec:85:ad:75:bc:e5:f9:56:f4:bd:ff:6e:7a:75:bd:
                    53:09:6d:95:24:85:54:0e:9b:fb:2d:cc:64:d2:00:
                    01:91:ba:d2:1f:1c:cf:a4:b6:d5:be:8b:74:01:a0:
                    ca:16:95:4c:cb:3c:3d:91:96:88:7f:4c:a2:dc:27:
                    60:ea:aa:95:e5:5d:6d:11:9e:16:44:67:bf:39:d8:
                    66:c9:58:74:9e:a6:c9:d5:5b:85:c0:f8:ab:d1:46:
                    c9:90:11:75:fd:5b:e1:85:7b:b3:fb:56:31:56:c8:
                    e0:fe:58:58:b0:fc:db:38:6f:67:dd:1d:76:41:35:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:DC:F8:20:59:28:EA:E2:16:52:1C:78:AC:74:8E:F7:28:33:DB
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:16:c8:87:12:5e:9b:ed:ce:f8:8c:fe:f3:eb:cb:b5:dc:e6:
         63:bd:0a:7f:91:16:75:a2:ac:60:56:53:e5:9b:fe:5e:a1:a0:
         3b:f4:7e:2c:9a:f4:05:2d:70:74:ae:72:cc:30:69:3e:9b:ee:
         77:ba:5b:85:6e:ba:86:85:2b:08:87:7b:64:ed:2a:72:2a:19:
         1e:4a:15:38:a2:19:73:bb:f4:fa:a5:0d:67:e1:11:9f:8a:8c:
         5d:36:d9:99:31:f1:9e:17:1f:a4:4f:b6:80:cc:45:8b:8c:58:
         3c:d8:38:6b:c4:b3:bc:b7:cc:72:3c:b0:69:7d:95:2b:55:99:
         36:7e:2a:7b:ae:06:2e:20:e5:43:b4:64:03:34:ac:8a:5a:cc:
         92:80:09:63:a1:d5:25:9f:50:0b:68:ec:10:b7:8c:d2:f8:2a:
         36:d2:7c:68:c3:31:0c:88:52:73:6d:83:4d:73:cb:d4:30:07:
         9f:94:21:45:5d:f3:51:2d:2d:a4:64:c2:03:62:3d:75:c5:94:
         6d:34:2a:d5:8b:33:b3:e5:07:2e:65:85:18:04:e5:2b:23:04:
         9a:aa:02:3a:10:c4:6c:08:99:4e:b3:75:ba:d8:46:6b:1d:05:
         6d:8d:0b:cc:7f:a2:fc:e8:d7:98:1d:25:ba:69:5a:2d:64:ba:
         e8:96:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:28:41 2026 by rpki-client