Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File:                     D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier:          MZgZBAnb9x6hIGzRet8rexvUUyNqXXwgls18TqpcEnM=
Subject key identifier:   18:CD:D4:02:0C:8C:7D:FA:F3:75:C0:D5:05:AA:F3:8D:DC:15:AD:A9
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer:       /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial:       019ED53E138E4A667CC8B6A61EE8FAAF7D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number:          0375
Signing time:             Wed 17 Jun 2026 11:01:15 +0000
Manifest this update:     Wed 17 Jun 2026 11:01:15 +0000
Manifest next update:     Thu 18 Jun 2026 11:01:15 +0000
Files and hashes:         1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: LfZ8MMNLnTyk819yLRXDy0cK7kEQtCC2IJrUWMXHlAk=)
                          2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:3e:13:8e:4a:66:7c:c8:b6:a6:1e:e8:fa:af:7d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
        Validity
            Not Before: Jun 17 11:01:15 2026 GMT
            Not After : Jun 18 11:01:15 2026 GMT
        Subject: CN=18cdd4020c8c7dfaf375c0d505aaf38ddc15ada9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:49:56:14:f9:a8:4f:8f:10:96:3d:d9:1a:0c:
                    5e:17:bf:9b:87:4b:45:cb:02:85:3c:8e:eb:1a:f3:
                    fd:33:aa:d9:ce:6d:63:0e:82:30:4a:0d:40:cd:15:
                    2b:14:79:cf:83:da:78:81:92:0b:35:9e:57:de:35:
                    d5:02:a0:71:c9:a6:49:2d:0b:86:53:38:fc:4a:d8:
                    19:4c:81:1b:d6:da:47:c8:89:5b:f6:42:14:a4:a2:
                    c5:db:bb:69:10:d0:f6:0e:7a:b9:a0:dc:e0:83:a2:
                    c7:66:80:3a:3b:f9:99:08:fb:11:12:e3:cd:dd:8e:
                    d4:2e:a9:a2:69:2e:ed:1b:e6:5d:df:93:65:80:e6:
                    a0:86:bc:c5:be:22:0d:e3:9a:fb:3f:fe:ea:cc:ec:
                    a7:ea:09:bb:1f:f3:f2:61:59:87:0a:02:37:8e:4b:
                    7c:40:80:c2:d7:a2:1b:60:bf:e5:d2:33:d0:d7:80:
                    c6:1f:4e:2b:8c:02:be:97:07:ca:fc:ff:72:ae:7d:
                    f2:09:fd:2d:3a:fe:69:1c:94:a9:6c:a0:98:df:3d:
                    f2:86:d0:c9:58:7e:b8:72:db:b1:53:0a:6b:a9:de:
                    1c:37:00:d5:f0:a9:4a:8e:d2:45:10:1f:13:6e:7e:
                    42:3e:33:d9:77:14:9f:12:de:a9:b0:34:e4:02:78:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:D4:02:0C:8C:7D:FA:F3:75:C0:D5:05:AA:F3:8D:DC:15:AD:A9
            X509v3 Authority Key Identifier:
                keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:4c:48:86:aa:f2:43:70:c9:48:2b:c1:63:fd:0c:8a:f0:
         b7:4d:f3:ec:3a:9a:a7:d0:95:e7:4c:e9:07:53:fe:bd:2e:fc:
         e7:af:f8:cc:b5:af:15:4b:7b:73:ab:ad:29:1a:6c:15:3a:e5:
         e4:df:99:53:e1:f6:82:d3:07:51:36:ed:b3:ae:dd:d4:24:77:
         c2:99:33:31:d2:21:b2:b4:2d:b7:4e:56:08:ef:7b:36:32:cb:
         2b:9f:f4:7c:0d:ac:2e:61:35:8c:fd:97:ae:fe:e4:61:6c:7c:
         d3:a8:e2:31:c1:49:68:44:ef:f7:d4:b9:fd:df:1c:75:2f:a4:
         d2:89:3c:24:1b:6e:f6:f8:3a:33:14:d6:1c:e9:36:e4:88:a7:
         14:a1:00:23:6b:3d:25:5e:b1:cc:f6:05:ae:b1:97:fa:89:80:
         1d:36:92:af:1b:04:69:45:c6:86:ab:a4:42:3b:58:bb:71:86:
         64:c5:4e:14:b4:ba:a3:3d:5f:e9:64:74:1a:19:c8:ad:9e:b4:
         d8:45:4c:7b:1b:6b:e1:5e:5d:b4:9b:ed:13:1d:76:98:69:ee:
         03:11:8f:4f:bf:f6:8f:b2:f9:4b:fd:b8:b6:47:fb:42:a6:39:
         54:b5:af:29:7d:d5:83:d0:f4:fc:ac:0c:4e:7e:15:ad:91:b6:
         68:de:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:38:50 2026 by rpki-client