Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          L1Gcz+iGiXM5WEMPgB4Z6DTqVnmGj+8VL9hxLQQNZKw=
Subject key identifier:   CA:3A:92:14:B2:E0:9B:2D:36:CF:4A:9A:1D:1C:7C:20:D8:0B:76:02
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019ED2AAEDB9EE3964CEB50CDF3915B7DBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          18D3
Signing time:             Tue 16 Jun 2026 23:01:17 +0000
Manifest this update:     Tue 16 Jun 2026 23:01:17 +0000
Manifest next update:     Wed 17 Jun 2026 23:01:17 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: JKQniV0XcLxlslaynVXJJzld16MiYjNUjvZmHYtAm+8=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:aa:ed:b9:ee:39:64:ce:b5:0c:df:39:15:b7:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jun 16 23:01:17 2026 GMT
            Not After : Jun 17 23:01:17 2026 GMT
        Subject: CN=ca3a9214b2e09b2d36cf4a9a1d1c7c20d80b7602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:36:8a:eb:0f:a3:c8:ec:88:21:55:9a:7a:
                    d6:2e:f9:23:a8:e7:1b:79:68:19:d2:84:2e:3d:7e:
                    b7:7f:e1:2a:c8:6d:9a:2a:0c:98:73:ed:fa:76:e5:
                    fc:81:a5:ea:3f:db:ce:d9:00:3a:5d:65:73:d5:07:
                    a1:86:02:da:97:31:c3:a9:c7:60:39:9d:35:4b:92:
                    90:19:0f:2a:33:d7:7d:c3:62:0b:aa:63:4e:bb:a1:
                    80:3f:6e:95:51:ba:06:82:56:87:3a:36:5c:81:d8:
                    1a:17:2c:65:6f:5a:5d:5c:62:52:b2:29:1f:1b:df:
                    e4:c4:f5:8d:eb:13:92:c3:76:d6:74:7b:68:00:6a:
                    1a:5f:c7:fa:8f:1c:be:60:5f:57:0a:8a:7b:03:6b:
                    09:00:f3:5e:a1:2c:3f:30:d3:d7:67:6d:26:0b:68:
                    df:13:c6:91:56:f3:58:40:05:52:db:49:2f:ba:91:
                    2d:38:06:9f:ca:ce:09:cd:28:c8:ad:bb:34:f2:c1:
                    e4:17:b6:99:bb:61:4d:88:08:60:0d:26:45:98:42:
                    a3:9c:c9:57:71:84:80:67:16:a3:a7:f8:aa:49:d9:
                    7d:3e:a8:2c:c2:81:fa:4f:fc:68:92:96:99:db:14:
                    6a:a5:8f:b8:c5:f3:92:9f:bb:d8:0d:b6:0e:8e:94:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3A:92:14:B2:E0:9B:2D:36:CF:4A:9A:1D:1C:7C:20:D8:0B:76:02
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:2a:da:76:a3:84:7e:4a:a8:a2:e1:97:97:64:2c:84:dc:
         af:b2:1d:fb:0d:42:9e:42:6f:77:ea:6c:53:9f:09:59:cf:06:
         11:d8:78:6c:cd:8e:b2:26:69:78:55:6a:f7:69:23:63:ce:30:
         db:fb:14:0f:e6:6f:9f:9a:4f:77:bf:1c:75:76:88:7f:ca:a6:
         e9:91:08:46:f5:e0:db:88:4f:fe:8d:ca:40:b9:66:ce:be:61:
         a0:86:a5:5f:43:50:e1:61:e1:e2:ac:56:6d:4a:24:47:2f:97:
         e5:6d:fa:c5:ec:b9:64:bd:57:83:a3:3e:a7:6f:06:53:0a:ea:
         c8:91:07:25:8d:84:ac:90:ec:c4:d3:fe:22:b9:62:75:b2:c0:
         25:cc:77:fc:41:51:d9:5c:5c:13:17:40:3b:c6:69:41:3b:95:
         33:b1:e8:2c:bd:24:ae:4f:26:94:26:12:5a:bc:a7:48:24:62:
         f9:d8:f0:77:e0:25:91:06:e4:31:c9:b7:08:90:98:02:1b:b9:
         b6:e2:5d:ed:54:93:91:5e:9e:ec:b6:54:8b:ac:a9:b7:21:52:
         74:c3:c9:ba:e1:d8:cd:16:07:38:3e:fb:2b:67:16:c2:45:62:
         54:de:6c:04:11:17:95:bc:68:ca:25:ba:c8:e0:59:90:b3:0f:
         63:73:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:11 2026 by rpki-client