Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
File:                     3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json)
Hash identifier:          bSdy1DMngpiDUvFQoBRV5d11sXVCfssCVbyNMbasw54=
Subject key identifier:   17:DF:C8:09:25:54:59:44:C5:1A:12:BB:38:A4:6E:77:61:FA:BF:F5
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Certificate issuer:       /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial:       019EBEEC46A422F29B8B1EBDC633443B21CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
Manifest number:          18CC
Signing time:             Sat 13 Jun 2026 03:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:16 +0000
Files and hashes:         1: 1-gX6qbETIIttBQf3NGjlhSo5a40.roa (hash: UW2uFSR1KC4UlPwX8F178+KvKc01uMjxgEJ5QQoAtmc=)
                          2: 1-sLuOUAWdw4gGuyAdDDNO5R3knY.roa (hash: UwJHgy6hiFG+CS5eWBzCb6KdVKW08xdJRDA4sajHgnA=)
                          3: 28w3148cO6lb1X7ebO0uJL6_jSA.roa (hash: /RvdIaEAOvXEUcZ/8C4+ae+9cR72KRnISKVr0yoxpuM=)
                          4: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: HfvIv7tqnbZOW2kHkSlq5wAuHorAGpwimsKEUQSPhxk=)
                          5: 3nWcd2m6s6bBzM_QYoygo0Ze6w0.roa (hash: htxDxHlHgU8dQkoVd6zcmNYRmFdbpmcNklfsUpe9Ix0=)
                          6: 78EB01J4WgTKHPdcf3EVHTeuc8s.roa (hash: AEd0Bl1EvO9i526KOfk+4Yr0kpyHuNMccILjVfMb8ds=)
                          7: 7u4rgz4l09r-eJqaQbI2EBriaRA.roa (hash: zlTV4eAW718JNR0mXym0vLWTb030NL8qDVFSJoistdw=)
                          8: BHSiCUrFc-TEdSEPwjcFCNQnGR8.roa (hash: hkVbYU9rreHO+iPmRQJ/E53L6MLfLKmzXEGQtgni27o=)
                          9: CHNXC3Z7q99hc7adVoxJZxDHWcQ.roa (hash: J59ogE/mSWqNwSaq5zDJFpLck2CQta+up20YJBmZqb0=)
                          10: FxInXR4DyqQT6DlyBPj_QGb3Tac.roa (hash: IFL+h0KaA01oNLzGyeAHHUWDYmIL4MN6R8/eqH6wmqo=)
                          11: MP6MyJ6JGT0Qd4fuNuAz8iDFiNo.roa (hash: JCKZg5aviqvu7Z76Faoxn9dtcsunUKEMHmwZGg/KRw0=)
                          12: MPnt1Ig40nuVBqADsEn8dObr5rE.roa (hash: LN3oJQmX/zwIzND61FwWanHfUPQZt6FmbQdO3LMJ4oI=)
                          13: NmTQqlVS4gvcDPcirwbd6QLOVW8.roa (hash: LMiHoX5P+lxgXfAq1o1ofUm+DKjY+GVzWYYvknBSyow=)
                          14: P89VxKlNGfRRMcSuDRi9zH0r-u4.roa (hash: m3Eb7tBEhi4jXpT2iac2bbRuZRo0+dNZTqs68H5Q/F8=)
                          15: QE4mWlynJcIb4WilZerciyCNIrM.roa (hash: O9hvkcBv0v7y2K1dBWJ4Vo0JgVG4Safg6I/3GHzMudQ=)
                          16: TTJbmeKN4OVpmVuz_9sVlDJ2-Qo.roa (hash: 9sn1cXj9PO9ABZhQTgF9fcIiZgMJttBAVbmqJSaXZvE=)
                          17: bGv-g5_Nq1lLtgwZjdzPyrknk9w.roa (hash: tFnnk/Nq81EttMG2a3kvMmGtdurbGz3xRmf1Xa0yg94=)
                          18: fH8Dmn4VQed_Qx1Vb_WAZiWK9No.roa (hash: jS9yGbolsVVkM6D04tMpgm8DxgjSbem+4eIOd9cAi6g=)
                          19: fmkJzH3NkUCcJph7bWlPwTvK1as.roa (hash: 5sVDquLqlQZjsrPg0UHa9viYVxRAjcZdLVAKXAnlaOQ=)
                          20: lVZUPTWkrcD9zWV0d6GRZgTVVtY.roa (hash: wqHHRXTgzV5U05gKB+m5zqGdaleWNQFqgG+iBB1QzNE=)
                          21: n2yklqPTbZScECuvP8sdtw1dqJs.roa (hash: XUl4EOZ0ACrcilwccYybYvigPaj+N+oRT70pMBR6/n4=)
                          22: nN_vAAZMEXdGpiLTZSquGYgk0ks.roa (hash: kiwSwAJEtUNKm6ywQc/ev4K8fjQGdo+U4PEggQj3XM4=)
                          23: r-BZPpfjArLuq-BQOY_DpWlcEMI.roa (hash: TJP0L3M3YkBnX+yCeWtuHnSFQJHToZMzD9dO3r+rF7Q=)
                          24: shInVxnETptNhYG5ctgG1wBa_IE.roa (hash: b14rKwCriv8+d3rzjVPCL7UyXFm3J/o38M8wbLSbZig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:46:a4:22:f2:9b:8b:1e:bd:c6:33:44:3b:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
        Validity
            Not Before: Jun 13 03:00:16 2026 GMT
            Not After : Jun 14 03:00:16 2026 GMT
        Subject: CN=17dfc80925545944c51a12bb38a46e7761fabff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:52:cf:ab:a8:24:d8:af:93:2e:4d:31:e1:
                    9b:dd:4b:e2:a1:a7:f7:83:16:d2:9c:98:eb:89:25:
                    2e:5b:ce:7f:83:b8:fa:91:fd:89:25:97:20:46:a3:
                    59:30:7d:3f:9d:55:37:ff:3d:8d:0c:32:ed:1d:3d:
                    4e:bd:b5:49:66:71:00:c0:66:07:fa:87:30:fe:71:
                    89:dc:aa:07:c4:c8:1f:02:1f:91:9d:02:5c:ab:61:
                    39:cb:3a:fc:1e:41:2b:37:73:9f:94:03:dd:42:8a:
                    88:42:6b:28:d8:d7:e5:94:07:98:06:5f:45:6d:23:
                    8a:9d:fe:71:90:c1:46:90:88:52:b8:39:a4:4a:94:
                    ca:f5:f3:38:82:6e:62:89:b8:7d:1d:55:8a:50:1e:
                    54:71:7e:d5:c8:c0:80:91:df:8b:46:18:d6:eb:db:
                    b0:24:3b:91:5e:99:59:b9:f2:06:fb:c1:36:eb:01:
                    db:4f:5b:db:aa:93:39:32:36:50:e8:74:39:d6:94:
                    57:24:2a:a5:aa:c3:4c:3e:c8:db:c3:ca:bb:e3:97:
                    eb:39:cd:46:71:3e:48:71:a3:e8:25:c6:c9:d5:2b:
                    5a:cc:be:9f:4b:d7:98:b7:f0:dc:1c:bb:ec:28:74:
                    49:06:29:1a:e0:7f:cf:c2:f0:2a:d4:35:6d:be:c8:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DF:C8:09:25:54:59:44:C5:1A:12:BB:38:A4:6E:77:61:FA:BF:F5
            X509v3 Authority Key Identifier:
                keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:c3:d7:9d:29:fe:59:6b:6f:ef:b0:a3:36:76:c2:43:3e:0c:
         97:74:be:d3:a3:ff:30:9b:48:74:dd:c1:c7:e1:61:c1:aa:8b:
         25:a1:f8:94:53:4e:04:9d:dc:43:a5:c6:ca:6c:f1:7d:6f:bb:
         fc:03:44:4b:cc:43:60:fa:d9:01:0b:27:bb:ac:e7:84:9f:f4:
         b1:7a:bb:f1:72:6b:45:1e:e9:f3:b7:69:0c:33:ba:19:cf:01:
         2e:3a:9c:a4:d6:31:73:83:7d:38:c6:97:01:d2:ac:95:a7:82:
         61:eb:0f:86:27:b2:c0:a6:d0:2c:e5:c2:49:e2:9a:86:97:a5:
         47:11:be:c2:5b:07:ed:10:20:09:62:56:f1:fa:21:83:c6:89:
         f8:7d:cc:37:e5:f0:54:fe:fc:f9:b9:11:ed:c9:64:9c:08:1a:
         04:df:80:4b:2a:8e:0a:e2:4e:5f:6a:c0:c6:4a:60:75:77:ff:
         2f:b1:f8:8c:24:6b:a8:28:bd:63:df:fa:b2:a4:a2:4a:72:6e:
         b1:b0:fa:56:df:46:c6:2b:b2:91:a7:de:55:4d:88:8f:ba:e8:
         ce:57:fa:ad:93:76:27:13:68:06:91:6d:46:41:de:f4:a5:9c:
         cb:1b:4f:e4:d6:f2:ef:8a:44:bf:bb:ba:1a:82:be:60:8b:54:
         c4:29:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:10 2026 by rpki-client