Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File:                     xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier:          qYS7GcmzYHA0NSOPnHTzu1IfTtyNiRWN5ODMO/r0k9s=
Subject key identifier:   8B:CE:A0:83:66:1D:B5:E9:FF:F3:82:F8:5F:9D:78:29:A2:EC:77:DB
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer:       /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial:       019EC0369F2FC1185DC70DCE75ECB5C99D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number:          18F7
Signing time:             Sat 13 Jun 2026 09:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:05 +0000
Files and hashes:         1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
                          2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: A3OBD/VMIzud8UYso2ksGxNfOiHMchyKgjpQBwgpTjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:9f:2f:c1:18:5d:c7:0d:ce:75:ec:b5:c9:9d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
        Validity
            Not Before: Jun 13 09:01:05 2026 GMT
            Not After : Jun 14 09:01:05 2026 GMT
        Subject: CN=8bcea083661db5e9fff382f85f9d7829a2ec77db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:09:d0:13:ee:9e:3e:c2:35:11:16:13:74:
                    f1:4d:91:9f:37:ac:e4:b4:2a:64:0e:9c:b2:86:c7:
                    93:24:38:92:34:65:a2:3e:12:93:1b:f4:b6:81:bb:
                    99:62:9d:0a:a6:d3:2e:f3:fb:1b:af:a6:e1:0d:47:
                    ad:58:b5:7a:d3:33:82:07:32:1d:a0:fa:63:df:ab:
                    64:9e:86:6a:1f:90:c9:73:81:52:4f:04:4d:ff:27:
                    0f:86:45:35:5b:ce:22:2c:eb:09:df:d6:fe:16:02:
                    9c:8a:13:fb:29:04:17:98:24:bb:6d:91:98:82:e8:
                    87:fe:e4:42:4f:a1:1e:b4:a3:c2:b3:0b:b8:cd:16:
                    c6:f3:97:18:de:17:88:2a:de:38:18:da:2b:bd:31:
                    0a:01:8e:06:da:43:80:40:51:fa:2e:6f:0c:4b:a0:
                    38:81:3d:4f:ef:59:b1:b7:ab:c5:17:04:40:83:aa:
                    79:75:bd:e0:43:c9:6f:77:eb:f5:ee:ee:55:30:1d:
                    d8:28:f6:47:1d:bc:c6:6f:a0:61:bd:db:5a:3b:30:
                    51:c5:84:f2:0f:bc:6c:5d:1a:74:a7:97:65:ff:db:
                    1b:34:4f:96:f9:39:6b:d7:aa:dd:27:82:80:8d:78:
                    c7:b1:b9:35:21:6b:2b:22:d2:fd:91:45:99:3b:70:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:A0:83:66:1D:B5:E9:FF:F3:82:F8:5F:9D:78:29:A2:EC:77:DB
            X509v3 Authority Key Identifier:
                keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:ba:fb:7b:79:9c:1e:51:e8:0b:38:ef:6e:b5:d7:93:b9:
         34:17:40:56:0b:2c:d4:f4:e5:2f:9d:a6:dc:97:40:6f:bb:65:
         a9:7c:06:81:76:ee:fd:c2:43:40:14:c8:12:9a:55:6f:c1:19:
         c6:25:9c:9e:f3:ff:ad:e0:c1:28:cf:2f:e9:c2:c0:7c:6e:3c:
         49:3e:6f:63:c1:bd:4a:9c:33:29:fa:7a:c3:c4:7d:00:4d:4e:
         f9:a9:94:e0:fd:96:32:dc:7f:aa:89:a7:eb:85:73:a5:51:4f:
         df:c2:80:0c:b0:8c:41:32:66:cb:f9:52:9d:02:87:0d:96:58:
         ae:c0:65:1f:0e:89:eb:51:1e:b8:68:bc:67:f8:bc:ef:78:ec:
         27:de:4f:2b:64:05:18:09:cb:08:b8:af:73:61:82:25:d6:42:
         88:96:19:ee:e4:6e:b8:0b:cc:f8:22:16:3a:06:6e:8d:d3:9d:
         a4:ca:ff:e2:41:68:a2:cf:2c:ca:49:15:dc:17:3e:1e:41:ba:
         4e:e2:11:e9:b2:02:17:f6:01:6d:ef:93:c6:2d:12:72:89:29:
         a7:ca:58:88:94:1a:3f:02:14:d9:a6:31:55:76:30:12:87:b7:
         ae:31:c5:5c:dc:69:8c:d1:d6:43:7f:b4:23:96:45:cb:e4:30:
         32:48:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:00:49 2026 by rpki-client