Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          l6zB5C+/mv+UeRtcHmI4/ng6F/pJgs3XDUnJF2hAtm0=
Subject key identifier:   78:78:08:99:03:4B:B7:10:C4:52:54:3A:40:E4:71:C6:16:A2:A6:8A
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       019EBF5A24843FE7852D0DB1C6ABC54B8C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 05:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:16 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: FByLrgwxKmExxaVc5/vvEa2Cgj2fmMVUdiXnCgfhW7Q=)
                          2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:24:84:3f:e7:85:2d:0d:b1:c6:ab:c5:4b:8c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: Jun 13 05:00:16 2026 GMT
            Not After : Jun 14 05:00:16 2026 GMT
        Subject: CN=78780899034bb710c452543a40e471c616a2a68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:fa:7f:74:24:09:6d:9b:19:26:ae:74:30:
                    52:3b:48:58:63:24:a7:e7:01:e8:96:3b:9d:9f:8f:
                    b9:3c:b6:39:84:7e:2d:ba:42:49:f1:a7:50:3b:c7:
                    d2:68:90:bb:17:a3:95:f7:dd:45:51:26:dd:bf:69:
                    44:38:d4:c6:df:78:55:d9:2f:80:56:78:90:d8:fa:
                    b1:08:b2:b4:89:01:ce:54:26:79:6c:7c:29:ae:50:
                    7b:30:8b:a5:52:9d:89:f0:9d:10:93:cf:ad:29:c7:
                    44:99:69:b5:fc:2c:4b:41:3f:18:37:f8:3f:3a:42:
                    17:36:21:1e:07:1f:85:56:6d:14:cc:f2:ab:8b:e2:
                    c5:89:1c:9c:59:c8:03:d5:e2:74:b8:66:ca:09:6b:
                    26:03:78:61:ca:73:98:fc:07:1f:79:c1:fc:4d:53:
                    0e:c5:ab:f9:07:e7:63:d7:f4:be:88:56:39:13:88:
                    65:8e:48:af:48:ca:14:a9:fe:41:67:e9:93:67:ec:
                    b8:21:99:35:db:d6:0a:3d:0c:58:73:49:de:c1:6b:
                    20:4a:39:2f:ba:36:98:bd:28:26:3a:5b:1c:ce:33:
                    53:78:12:6b:be:9e:b9:e5:33:e5:69:73:3f:d9:7f:
                    01:99:d9:52:1c:37:a3:ae:9c:2a:30:89:a4:6f:08:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:08:99:03:4B:B7:10:C4:52:54:3A:40:E4:71:C6:16:A2:A6:8A
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0e:37:0f:6d:69:d4:17:a7:a6:ea:63:5b:32:40:30:a3:df:
         69:84:e7:cd:dc:42:44:f0:28:de:09:b0:c4:0e:48:63:f8:b1:
         b0:72:44:96:4e:ba:cf:7f:9b:8a:b8:a4:f2:d7:57:40:04:dd:
         d9:9b:a0:f2:cc:12:16:81:5c:b9:1d:72:e3:7d:d9:35:d0:3b:
         48:c5:bc:bc:4f:c0:7d:4c:17:31:2e:a4:67:54:ba:9c:5a:3d:
         51:28:6f:95:18:2e:ac:6b:67:98:f6:1c:5d:7a:99:ec:e4:e3:
         0e:8c:24:e4:f5:4b:c8:49:fc:6d:80:c3:5d:ba:1b:90:f3:d2:
         2e:b9:4b:a0:26:a9:88:5f:35:21:57:bd:9b:24:36:30:f5:e6:
         a0:8d:eb:ef:02:90:fb:42:61:46:a3:b5:53:63:2d:f3:df:b6:
         f9:08:34:b1:07:bb:0b:fd:20:e5:b3:5b:0e:8d:c3:c9:d3:a2:
         30:fb:ed:9e:6a:9e:c0:04:2c:f7:79:5f:97:57:fb:82:c3:80:
         27:06:19:fa:f4:3e:c4:ff:5e:fa:8d:84:de:1d:5d:a7:d5:a5:
         5c:3e:18:58:25:02:8c:95:cd:1d:3f:82:09:d8:11:b4:b8:56:
         4f:99:ac:8e:5a:3e:55:d1:ab:2e:d0:4f:79:df:67:9e:f0:38:
         e0:e7:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:42 2026 by rpki-client