Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File:                     1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier:          JppYY5zJ6SrLj6cEqMZNel6p+XMP9vx2RsfY8cn6eXY=
Subject key identifier:   FC:56:B7:0A:F8:95:6F:71:42:40:C9:35:7E:18:A8:C6:F4:B0:06:DE
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer:       /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial:       019EBE1141361DD7DA09D0C0292C68651276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number:          18EC
Signing time:             Fri 12 Jun 2026 23:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:02 +0000
Files and hashes:         1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: 3e7at5Qyj7xlGaytUFI0mW/PCOkvvfiPNOHNUiS/uMs=)
                          2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:41:36:1d:d7:da:09:d0:c0:29:2c:68:65:12:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
        Validity
            Not Before: Jun 12 23:01:02 2026 GMT
            Not After : Jun 13 23:01:02 2026 GMT
        Subject: CN=fc56b70af8956f714240c9357e18a8c6f4b006de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:30:62:c3:df:c8:2b:79:6c:aa:35:63:e5:
                    05:49:b3:f4:01:98:09:95:58:55:b4:dd:a7:58:27:
                    a6:85:ce:d7:7e:4c:0e:b8:cc:7e:f1:cd:b8:ff:22:
                    ec:33:4d:55:76:ca:32:2a:e7:fd:f8:88:12:4b:15:
                    d2:59:40:10:ee:ea:81:26:73:09:f1:0c:1e:1c:a9:
                    27:36:d6:73:b6:15:ec:9e:8c:dc:fb:9b:6a:b2:ef:
                    54:c4:a4:75:b8:e5:7b:31:b6:d4:cb:36:d5:02:08:
                    d6:91:45:84:4e:85:e4:4a:11:2a:a9:67:94:09:77:
                    3a:85:2c:b6:57:0c:4e:49:06:93:62:a4:8a:a8:e1:
                    f7:93:46:1b:ee:ba:05:29:b2:e2:92:e6:4d:3c:e4:
                    aa:29:4f:9c:81:5a:ea:4c:ed:fc:f4:9b:1a:49:c9:
                    2a:da:a3:95:da:4b:4c:ff:c2:6d:1f:90:e8:73:14:
                    c1:40:ea:46:88:3f:ea:18:fd:5b:35:68:b6:29:2e:
                    00:34:79:70:36:06:22:54:f5:4f:0e:a3:31:87:d8:
                    fa:50:32:fd:4e:b3:ac:d0:58:af:ea:83:84:ae:32:
                    39:6c:ec:4e:b8:16:dc:c7:b2:94:5d:4e:8b:42:55:
                    81:34:e7:17:b7:9c:3e:8a:7d:db:c3:70:61:9c:3e:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:B7:0A:F8:95:6F:71:42:40:C9:35:7E:18:A8:C6:F4:B0:06:DE
            X509v3 Authority Key Identifier:
                keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:a8:12:25:2a:ab:cf:4d:8f:31:28:e8:7e:e6:e3:2f:d5:
         c7:40:f5:04:1d:cb:14:cc:cf:eb:3f:a5:fa:cc:0b:fb:1e:23:
         86:74:40:42:6c:e5:da:b1:d2:db:7c:a4:2e:ea:97:ef:35:d7:
         5d:79:71:93:ea:3c:d2:46:1c:aa:90:17:1b:8c:2b:1a:d0:a9:
         e0:77:fd:ff:87:18:c9:9a:18:d0:e1:0f:e6:f0:8d:ad:bf:df:
         3f:a9:f0:14:36:58:a8:dd:d0:36:b5:b6:0a:8d:87:b8:dd:f2:
         55:92:fc:91:7c:4b:59:87:7e:31:87:11:51:db:7b:be:13:6f:
         89:64:e8:c8:5f:67:cb:f8:4a:31:48:95:7c:33:8f:91:d6:ec:
         a7:4a:82:8b:97:ee:09:08:2c:b9:f4:24:37:6a:5e:30:ea:e8:
         c7:3d:dd:d8:37:c6:1b:49:dc:40:19:3a:f7:fd:58:dd:68:21:
         ed:24:4e:1f:61:6b:6c:04:00:54:55:7b:c4:e4:90:28:75:55:
         3d:d4:81:7a:5d:b9:af:77:11:1f:85:b5:e5:cc:5c:3a:0e:4a:
         93:99:f9:d7:b7:b4:3b:f4:f5:56:b3:cd:ca:42:c2:93:94:32:
         cf:b3:ad:c5:9a:68:5e:ad:e1:b0:42:04:26:c9:a7:d3:60:b1:
         3f:31:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:41 2026 by rpki-client