Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File:                     IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier:          7hIeHAYyfckpLJUCnXEmUAuTyNEJDtxkJbDM/hpQgPg=
Subject key identifier:   AF:CB:20:1B:6F:3D:33:E7:8E:CA:EF:B1:1A:F9:A4:95:B2:90:7E:0B
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer:       /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial:       019FAB9A7127B72B3997809A576D6D541669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number:          18B2
Signing time:             Wed 29 Jul 2026 02:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:53 +0000
Files and hashes:         1: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: 5lWIIcH1BB8F/RxiVy7Q0gOmOLN95vt+RGAWWS0VyQ0=)
                          2: _1uT-dJdB4zjdJrrsneMD7wKcvI.roa (hash: ZF972oLTFfsetFH5TGdur7PAWOAqIPiOxk86Q4SVB40=)
                          3: lj_OVhtyzOOGAl8O2ZX2b9-uYP4.roa (hash: /IN+PkswpcNIMIACvoERnunbvdFhIwO4BCUWqEEWkVE=)
                          4: r6UENQfHPYPsytR3ZmZk92OeJYw.roa (hash: cC+pFefGw9rN2/Aqknuk+KBy4ay7V4pHstE2Pj94BJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:71:27:b7:2b:39:97:80:9a:57:6d:6d:54:16:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
        Validity
            Not Before: Jul 29 02:00:53 2026 GMT
            Not After : Jul 30 02:00:53 2026 GMT
        Subject: CN=afcb201b6f3d33e78ecaefb11af9a495b2907e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:d9:12:fc:6a:cb:d4:00:12:ae:5c:a9:c0:
                    d7:ac:37:df:79:7f:74:b4:2e:0f:ca:10:31:b3:7a:
                    a6:15:2f:16:a3:b3:2b:98:8a:9d:6a:3b:2a:20:aa:
                    9b:83:5c:3d:33:9e:81:17:73:bb:ae:0f:f1:94:e8:
                    89:58:8d:3d:89:26:8c:50:aa:4e:ae:2b:75:e5:14:
                    6d:b8:1b:96:de:44:05:67:1e:5c:c1:20:7a:5c:b6:
                    57:84:3f:3e:67:df:b2:b1:39:9f:54:be:57:f3:e4:
                    9b:5c:05:5d:bb:2c:31:e1:21:f4:30:ad:32:e5:59:
                    87:ac:75:db:da:a0:12:12:07:af:de:73:cf:ed:08:
                    6e:01:fb:6a:20:e6:68:9d:3a:95:4d:52:63:18:0b:
                    38:17:ae:00:5c:32:e7:20:67:8d:7e:49:76:c9:e5:
                    b8:85:67:a3:71:d6:a5:7f:7b:fd:3e:5f:04:17:a9:
                    de:13:34:05:d1:c2:af:bc:e5:7f:c3:9f:a2:5f:58:
                    0e:87:a5:a5:8f:50:2e:ff:cc:37:fb:78:ad:17:be:
                    b3:71:0b:a5:8e:25:73:3b:47:95:84:fb:0d:4b:4b:
                    11:06:37:0d:6e:27:df:d0:ec:1d:73:ac:cd:fd:4c:
                    96:ec:c3:ac:08:12:6f:65:ab:1e:52:3c:48:9d:fa:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:20:1B:6F:3D:33:E7:8E:CA:EF:B1:1A:F9:A4:95:B2:90:7E:0B
            X509v3 Authority Key Identifier:
                keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:bd:66:72:b7:7c:93:86:40:de:c8:5e:05:88:ff:f0:a9:
         67:ac:91:a2:51:09:ac:ad:be:a0:05:73:20:1a:a5:3c:a0:ce:
         ee:c8:ae:8f:e2:8b:ce:fa:03:8c:cf:4b:7b:c6:a3:ca:5d:d5:
         d1:d7:22:0b:81:a9:fb:7e:32:5a:a1:47:20:01:86:f5:f4:58:
         8a:1c:f4:de:c4:13:d0:0e:b9:a4:80:33:45:7a:2e:54:34:be:
         70:f0:51:2c:37:24:a3:b0:3e:4f:5e:96:b1:10:4a:0e:a7:e6:
         f7:2b:09:10:fe:71:9c:03:e6:53:36:48:57:c5:ff:8c:04:b7:
         c7:6d:d7:51:fe:bb:a7:95:33:97:9e:e3:78:a5:a8:34:b6:73:
         ad:59:c0:40:53:27:93:9d:a9:63:31:35:5a:30:c9:2e:3e:ed:
         dd:86:87:3e:d0:76:05:fa:43:c9:ae:4d:fe:99:a4:dc:3c:58:
         34:0a:f7:51:54:ab:0a:3e:93:15:79:b3:2d:52:c8:dc:88:50:
         05:7f:29:4e:66:2a:90:e1:02:dd:f6:36:0d:02:85:b2:80:c9:
         16:78:b5:63:50:e8:3d:5b:7e:da:b1:8c:2c:f2:0c:ce:21:dc:
         43:13:59:75:ae:fe:6a:67:8e:93:3a:4d:73:43:31:62:79:fc:
         a4:24:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:32 2026 by rpki-client