Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File:                     EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier:          5lmf+x069NtTldKuuTDgpBThxWSKnkxVZc/SL2adsYY=
Subject key identifier:   E6:6F:4A:5B:31:36:2C:55:08:4D:DC:1C:D4:C8:E5:4B:41:05:4C:36
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer:       /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial:       019EC17FC54DE3050EA2B6482E20614F558C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 15:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:36 +0000
Files and hashes:         1: E1_qOVvH8nrOWTOLw8OYuG7I7l4.roa (hash: pIFcjaUirrK025T2zVEMwQTVwHipFJl67DIxSrVxIxo=)
                          2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: 5ntHw6uhMo1R9oD1jfTh1y7+KvaHY32z52TFzx07auI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:c5:4d:e3:05:0e:a2:b6:48:2e:20:61:4f:55:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
        Validity
            Not Before: Jun 13 15:00:36 2026 GMT
            Not After : Jun 14 15:00:36 2026 GMT
        Subject: CN=e66f4a5b31362c55084ddc1cd4c8e54b41054c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:19:d9:c0:67:6d:c1:1f:0c:20:cf:25:06:
                    6c:09:0e:ab:8b:1e:1e:1d:c7:8b:3a:d7:54:dc:cf:
                    3c:b0:2e:4a:5c:8c:2c:6b:df:fa:da:8f:70:01:66:
                    d4:1d:64:9e:32:d7:00:f0:ef:5b:8b:ba:9a:47:39:
                    c1:1c:63:33:97:bf:a4:6e:3c:53:18:f5:10:b4:0b:
                    a1:66:bf:84:60:04:ac:d0:6b:2f:32:0e:31:df:0d:
                    f8:f6:93:d6:4b:c5:a8:94:58:af:07:9c:08:6e:cd:
                    41:fa:33:4a:6f:28:45:7a:7d:36:7c:f7:a4:23:9b:
                    5f:18:86:6d:83:b1:84:7d:c5:3a:7b:6d:33:72:75:
                    30:a4:c7:f1:bf:5e:7b:8c:6d:0c:5e:cb:4a:b3:d6:
                    bf:05:72:76:b9:31:7e:3e:eb:3e:96:e8:14:89:a3:
                    3e:90:0b:99:43:ca:6a:a0:5f:1e:8b:5e:6f:71:fb:
                    73:1d:8b:4e:00:1a:dd:54:b7:7c:66:09:de:15:e4:
                    f7:c6:a0:51:91:8d:8f:04:d3:5a:24:00:cf:62:c6:
                    56:1b:41:e0:7b:82:0f:6b:8c:45:79:e2:70:32:fb:
                    0c:2c:5e:2f:33:1d:19:5c:03:03:2f:89:17:a9:62:
                    c2:30:98:2b:34:b0:b0:ad:42:0d:ec:bc:83:2d:f5:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6F:4A:5B:31:36:2C:55:08:4D:DC:1C:D4:C8:E5:4B:41:05:4C:36
            X509v3 Authority Key Identifier:
                keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:bc:c2:dc:6b:09:75:77:6d:d8:8a:c3:b6:cc:40:1d:e8:54:
         64:ef:87:40:33:e1:4e:10:fc:b7:2e:62:de:95:de:b0:42:9c:
         7c:84:55:61:16:17:d2:25:21:5d:52:28:1e:fd:9b:3c:64:2a:
         ce:f6:38:72:d4:55:05:52:60:a5:36:de:55:34:b5:f0:41:75:
         e0:c9:c9:ec:96:ca:cc:f5:b7:43:ec:e3:16:18:7e:bf:4e:fa:
         ce:9e:5c:6d:12:2d:86:16:d7:0e:43:3c:7d:96:28:80:1a:ab:
         24:34:64:93:9c:14:78:ca:9e:70:47:2e:23:65:bb:16:bf:c2:
         f7:9b:63:2f:7c:92:49:a5:62:b8:ed:8f:06:d4:3a:98:d9:d0:
         65:ee:14:85:d5:71:1c:de:0a:e2:ab:61:31:ed:3b:c6:18:23:
         84:2c:4d:27:4c:4c:dc:ca:24:7c:b2:ce:ba:11:89:0a:ae:b2:
         79:e0:88:34:d1:52:17:6f:af:6b:70:c4:11:ca:0b:6b:95:bd:
         6d:aa:e5:4c:ac:bc:79:e1:ff:9e:c3:ed:57:07:0d:dd:2b:46:
         b5:3b:55:cc:3e:f2:59:a1:92:b2:3d:3b:ab:40:bb:c1:f7:93:
         6d:82:b9:4a:ba:23:82:59:49:8e:b4:b8:da:7a:08:df:f0:b9:
         35:6e:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:08 2026 by rpki-client