Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File:                     tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier:          YHUPUfbmQs8mX8Z7c4hkA0RI3njKl/a08O17MCHoX1E=
Subject key identifier:   BE:02:F9:55:8D:D5:11:BB:F8:7A:18:3E:92:ED:B1:E9:C3:EE:05:D6
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer:       /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial:       019EC3A5C013EA5B49091385BF709D63AB0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number:          18EA
Signing time:             Sun 14 Jun 2026 01:01:20 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:20 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:20 +0000
Files and hashes:         1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
                          2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: SVQHE6w1Vo6r0LQNGldPoYDwrOqujKf2UhdsREiz6VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:c0:13:ea:5b:49:09:13:85:bf:70:9d:63:ab:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
        Validity
            Not Before: Jun 14 01:01:20 2026 GMT
            Not After : Jun 15 01:01:20 2026 GMT
        Subject: CN=be02f9558dd511bbf87a183e92edb1e9c3ee05d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:7c:51:9f:3d:fd:db:db:47:dc:f3:ee:1d:
                    81:ba:c8:ca:8d:c9:ba:48:13:64:d8:4b:cf:81:ed:
                    c1:3b:f6:64:13:a5:9d:bb:c2:f6:f5:d8:7f:31:e4:
                    f3:b4:34:f9:4e:d4:d3:d8:0e:50:bd:38:59:f5:97:
                    d0:67:ad:8e:dd:96:30:3b:01:9e:14:36:0c:f9:e1:
                    3f:00:9b:45:95:dd:42:38:a4:89:61:31:cf:13:1b:
                    9d:31:67:20:02:5c:91:9e:e7:d3:c3:d9:25:83:ef:
                    46:d4:7e:1d:3e:31:bd:03:7f:71:93:5a:54:89:34:
                    9d:49:b3:e0:c9:1f:95:51:70:6b:c5:40:c8:c9:ec:
                    a1:f2:43:50:3c:4e:bf:18:0e:a1:bb:ef:38:ab:bf:
                    28:02:11:82:ed:16:73:1a:27:bc:4a:af:9e:68:71:
                    97:2e:c6:41:c6:16:82:ab:04:49:05:26:97:68:f9:
                    1b:ea:e2:61:3c:85:45:4a:48:b2:2d:42:6e:db:09:
                    3a:76:23:03:27:2e:8e:2b:6c:5b:43:0d:ec:d1:65:
                    fb:f8:09:35:64:ff:a5:e4:2b:30:28:90:d3:2f:aa:
                    b2:f6:fa:5f:9b:56:ee:fa:2d:e2:38:f2:aa:1a:63:
                    81:a2:09:68:b0:26:91:06:6e:4c:bb:2d:d3:3f:60:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:F9:55:8D:D5:11:BB:F8:7A:18:3E:92:ED:B1:E9:C3:EE:05:D6
            X509v3 Authority Key Identifier:
                keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:b6:83:5f:8e:c2:cb:e3:04:95:67:2d:43:62:47:44:35:
         43:e4:a0:30:7d:65:82:30:f0:16:a0:59:06:86:fe:db:02:03:
         61:76:a5:34:45:8e:f7:19:78:92:4e:d0:28:4c:e2:74:33:bf:
         ce:d9:7b:e0:22:f1:c2:e2:e5:0c:c4:f3:a4:a5:c1:70:e6:2b:
         87:2a:1b:88:56:1d:5e:a3:6e:40:53:2f:b6:98:af:08:c3:56:
         29:a8:da:1c:ba:60:6a:2f:d6:50:12:92:cf:04:e5:9d:69:50:
         06:ee:24:07:47:9b:d3:51:b6:0b:94:03:eb:b3:fc:ff:b9:82:
         b6:3b:42:33:9f:6f:6d:5b:47:5c:ab:bc:6e:b4:d9:15:5e:20:
         86:41:3c:2b:9d:db:0f:0c:77:58:d6:a4:dd:12:eb:04:08:d9:
         0f:27:61:22:f1:14:26:10:8b:17:9d:8e:27:79:49:e9:e2:09:
         b9:67:21:e4:0b:da:76:61:9b:28:6d:f7:15:fa:65:1b:ec:79:
         5c:db:59:13:41:23:ea:ea:7b:7c:e0:83:1f:73:4d:25:3b:d9:
         ba:2a:22:dc:a5:37:86:54:30:82:8f:03:59:c3:d8:39:1f:9b:
         85:c8:8d:a4:4c:44:01:78:1a:b9:2b:59:46:bd:38:c5:b7:33:
         df:76:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:16 2026 by rpki-client