Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File:                     TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier:          qRNcrEpQWXaApBTW+lbENexJMPIFCqXNOBXdqcZhM3E=
Subject key identifier:   4C:E1:06:AA:E5:9A:F0:31:B7:3D:FE:03:85:98:FD:2C:CE:CF:5C:EB
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer:       /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial:       019EC0A3B181A1E2F4A48C7EF2162F3AC757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number:          18EE
Signing time:             Sat 13 Jun 2026 11:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:13 +0000
Files and hashes:         1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
                          2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: Y8/sLSaNdyejY4J/r/cgVP3il76vbpMh75ptGLg1FtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:b1:81:a1:e2:f4:a4:8c:7e:f2:16:2f:3a:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
        Validity
            Not Before: Jun 13 11:00:13 2026 GMT
            Not After : Jun 14 11:00:13 2026 GMT
        Subject: CN=4ce106aae59af031b73dfe038598fd2ccecf5ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:f4:b6:cb:03:10:de:c0:14:5c:58:0a:1f:
                    3f:a6:81:a6:7a:5f:0e:ad:fc:b4:66:3a:04:5d:40:
                    2f:db:5d:8c:d6:c6:c9:d8:f7:08:a2:35:42:fb:6a:
                    1e:5e:69:88:63:53:50:82:4b:72:65:11:8b:5d:ef:
                    f3:68:1d:03:5a:b5:5e:e5:48:a9:22:49:c1:0b:44:
                    4f:4d:85:bc:31:ff:a8:ca:e2:f8:2d:9c:8e:47:fe:
                    ca:fe:07:a7:72:46:2e:de:82:c8:29:e0:61:83:34:
                    3f:1b:e2:33:4d:73:a7:d5:69:60:cd:f0:c7:fe:4c:
                    4a:14:76:5a:ca:fe:f5:41:69:a0:c7:ea:9b:87:8b:
                    8d:87:c8:35:ef:42:11:54:f0:72:9a:d7:1d:11:43:
                    83:82:76:0b:a2:81:8a:57:17:1c:85:85:05:38:48:
                    cc:d7:17:df:98:f5:b1:25:4b:21:61:b7:ae:01:eb:
                    c7:16:6b:28:52:8a:1c:13:ab:57:19:ff:e3:f9:04:
                    ea:f7:9f:a5:c7:c4:ba:f3:98:df:99:ab:af:39:ff:
                    ff:67:b4:74:08:46:4f:a8:3d:50:26:c6:5d:ff:5d:
                    06:5e:b0:25:17:5a:1d:e4:71:74:52:05:40:65:4d:
                    4c:d8:21:3e:25:ac:52:da:11:5e:23:ba:fc:8e:bc:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E1:06:AA:E5:9A:F0:31:B7:3D:FE:03:85:98:FD:2C:CE:CF:5C:EB
            X509v3 Authority Key Identifier:
                keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:55:6b:7f:1d:9d:db:a0:c9:2d:45:43:05:9c:25:55:ed:
         83:e2:54:40:73:74:9c:75:97:3e:4e:13:da:ee:34:a7:17:65:
         14:a5:09:8d:b8:6e:66:60:21:ee:dd:5d:16:52:43:a7:0c:c3:
         c2:15:d2:49:db:60:ba:34:65:e3:dc:59:18:7c:1b:f9:62:af:
         58:2f:97:46:de:9a:d5:95:ac:c0:81:2c:33:99:4a:a8:09:3c:
         ca:1b:d5:f9:39:37:cc:65:b0:a3:b0:42:9f:df:c1:e9:1f:1b:
         83:f4:c8:15:7a:32:a4:19:a4:e1:eb:20:c9:18:a8:1d:d4:f0:
         cc:e8:3c:4f:5e:bd:c7:69:bc:e6:53:b1:dc:36:f3:9d:ac:34:
         60:ef:ba:90:79:93:a2:2b:f6:ab:c3:d9:dd:bc:5c:e4:27:8f:
         31:d8:f2:14:73:bd:32:f0:11:25:c4:e0:83:42:3d:09:bd:c5:
         c6:95:e0:96:95:99:65:52:19:19:11:20:4f:7d:52:95:12:eb:
         24:7a:ef:8a:af:e7:c8:ee:a0:af:6f:44:fa:17:b9:8d:24:0e:
         02:ed:4d:33:0d:38:71:09:39:fe:54:65:5e:41:64:31:cd:3d:
         1a:29:29:91:89:94:c9:ec:98:a2:67:77:5a:f9:02:a5:0c:5c:
         7f:1f:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:13 2026 by rpki-client