Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          UIPkk8S2Fh5jAR3bKCilxVQOcOiSaqOOH81vvUI4/0U=
Subject key identifier:   29:F1:C1:DB:53:CD:AF:07:0F:48:4C:2A:E7:95:EF:69:93:CD:20:90
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       019EC0A4553B58776BF1D3681B3550D7C14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          18C3
Signing time:             Sat 13 Jun 2026 11:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:55 +0000
Files and hashes:         1: 4dIwW5at7FQWoB7Bcz_6uYRfLtw.roa (hash: mQop19T4ncECxQq+Z6Yf4kaQ7YiJVsFd1/CEXYQ60hs=)
                          2: WNpjH3SAwlYtzPBjNyIvkx5e4KI.roa (hash: nxW+eoJ0ZFBCN0p5URb6dreScxfM0xOZQgxSbn774Gg=)
                          3: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (hash: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w=)
                          4: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (hash: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4=)
                          5: egNs0fvR0rvTeNy38L9Ly5HNBxw.roa (hash: n+9hTIbfmjtYB8IlfS0V4nQrh2GVHp+ZwL3oJyr2kwA=)
                          6: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: 9X/tb5KnbBWZ+rjgl2efs4QXnS+890MSN4FftPbewl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:55:3b:58:77:6b:f1:d3:68:1b:35:50:d7:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Jun 13 11:00:55 2026 GMT
            Not After : Jun 14 11:00:55 2026 GMT
        Subject: CN=29f1c1db53cdaf070f484c2ae795ef6993cd2090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:e7:7d:bf:ab:fc:4e:4c:ba:42:0a:ac:50:
                    0a:34:0d:5f:dc:1f:35:11:d9:ea:52:39:3c:3b:1f:
                    18:c6:f1:9f:d5:44:9b:4f:a3:02:91:2e:8a:f3:15:
                    df:51:26:06:4a:2c:7e:bb:59:26:5e:e8:31:94:b0:
                    df:a9:5b:ca:05:d6:63:0a:40:8e:95:ab:cb:57:01:
                    c6:cf:73:a2:65:0c:a9:f9:01:cc:f2:61:c4:05:12:
                    43:20:f4:bf:17:eb:2c:aa:7c:8b:4c:b1:7c:b2:77:
                    b0:9d:f4:ab:77:cd:7a:c4:7b:b5:11:52:93:34:02:
                    c1:34:d7:6e:64:75:63:01:8f:21:fe:a6:e4:5a:20:
                    14:f3:f0:67:e2:4c:62:42:63:36:9b:e7:92:4c:24:
                    81:31:d5:3b:c4:7a:c8:25:6d:07:5f:86:c6:32:77:
                    ed:a7:25:25:38:bf:57:f0:ba:06:85:6e:5f:20:1a:
                    33:68:f2:83:80:72:e2:d7:f0:9b:f6:d3:66:3d:ee:
                    27:69:f3:9d:b4:29:eb:66:5f:16:2d:24:ec:db:bd:
                    2e:65:00:7b:1e:95:03:c0:df:58:b3:f5:e4:37:32:
                    bf:e3:a9:af:32:8d:f8:85:91:f0:68:ff:a6:c3:6e:
                    e4:be:e6:51:a1:7e:25:1c:60:7a:48:f3:7a:57:4d:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F1:C1:DB:53:CD:AF:07:0F:48:4C:2A:E7:95:EF:69:93:CD:20:90
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:b8:99:1c:b5:76:94:85:78:0e:cb:c6:2e:67:a6:ce:58:
         9f:09:b1:b1:9b:5a:25:8d:5e:75:c1:b1:79:b2:25:4f:06:a0:
         5e:d3:ac:e2:9b:1a:7d:b8:c4:8c:b2:fd:aa:a3:43:4d:23:91:
         f6:5e:10:69:ea:cb:5b:44:22:7e:ed:1c:b1:d9:5d:a3:cb:12:
         5b:60:47:a4:b9:31:f2:75:7f:7f:bf:39:44:e1:37:42:67:56:
         b2:45:f0:a6:38:41:b8:4a:33:b0:37:c5:49:a9:2e:d2:a9:0a:
         99:d2:12:a8:6b:3e:21:81:ae:09:99:1d:d0:6c:81:31:e8:99:
         76:5f:2b:6b:f8:4b:42:33:00:78:76:81:f1:2c:28:fd:a6:6d:
         61:da:80:cc:11:34:8b:42:9d:17:c2:02:ec:49:fc:cb:cd:e3:
         69:e8:ad:61:d9:50:ae:fb:9d:bd:e5:14:ed:70:47:67:b7:e7:
         07:00:45:ef:9b:24:5d:37:03:ed:90:19:2b:e4:de:f4:63:cd:
         fd:4e:79:47:b6:e6:8a:34:99:64:62:52:8d:f0:6b:fc:a6:33:
         0c:2f:01:b9:ce:a0:58:57:d9:40:75:fd:3e:b8:db:50:b2:b6:
         fb:13:fa:0f:5b:40:2b:cf:ad:3e:93:65:28:82:cf:db:30:ca:
         22:78:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:04 2026 by rpki-client