Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File:                     i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier:          IhQQvNAb3Gw6nRCLxXKmyZGW4DUgLjiAMDk+Qb7ZFUs=
Subject key identifier:   6C:07:D8:05:B8:4C:7E:D8:ED:6E:4F:FC:54:0C:A2:05:4A:DD:53:A1
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer:       /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial:       019EC06E0AC34875092C1A9F7BB4870587C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 10:01:37 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:37 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:37 +0000
Files and hashes:         1: KEVzLpiIlZvYuzak8r2VEN0lblo.roa (hash: vPPG7HusI8DfbdkDC9LeEMSZP0GfYBRUhRWHNDe+9aA=)
                          2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: Jpo+uAc3w7Y1AO/UBjppTLTw90G4BhxZ4ch53DeSWn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:0a:c3:48:75:09:2c:1a:9f:7b:b4:87:05:87:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
        Validity
            Not Before: Jun 13 10:01:37 2026 GMT
            Not After : Jun 14 10:01:37 2026 GMT
        Subject: CN=6c07d805b84c7ed8ed6e4ffc540ca2054add53a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:f7:22:d7:3a:de:12:3b:24:de:73:a9:f8:
                    1c:1e:d6:cd:e7:eb:c8:bc:48:57:b2:77:b4:31:f2:
                    2a:ce:a7:53:3a:7c:8d:96:c8:8a:37:04:36:e9:f1:
                    64:17:f4:52:ac:59:dd:41:82:c9:20:17:47:ff:56:
                    89:a4:95:19:4d:72:a9:69:c1:e9:bf:fa:d7:b6:81:
                    4c:6a:e6:b4:0e:7b:d0:5c:b4:76:a6:aa:a8:1c:f9:
                    b9:4d:30:5d:e1:51:26:66:53:1f:a2:35:be:96:c9:
                    0e:68:e2:da:63:e0:99:7b:15:10:b5:09:af:3d:c9:
                    14:a1:4a:02:4a:58:cb:8c:73:af:0f:22:2e:48:d1:
                    d5:b8:48:1f:65:a0:80:14:ed:2e:29:80:03:08:85:
                    1d:ee:d9:73:f7:b1:bb:f6:7f:3a:ec:f2:db:0c:c0:
                    6b:f4:f0:cd:11:7b:ec:f2:90:cd:4a:53:2d:9f:3a:
                    e8:b6:c2:08:d1:5d:92:de:2e:68:45:9a:8e:41:66:
                    7d:8c:6c:59:3d:7c:bc:65:c8:96:38:a5:68:d2:d6:
                    96:56:a0:41:d9:05:d1:ff:c8:28:cd:1b:bc:69:2a:
                    11:6e:70:4e:76:2f:1d:dd:08:39:5d:8a:a2:3d:1c:
                    ca:8b:26:7f:de:51:42:f4:d0:51:68:de:31:06:44:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:D8:05:B8:4C:7E:D8:ED:6E:4F:FC:54:0C:A2:05:4A:DD:53:A1
            X509v3 Authority Key Identifier:
                keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:f3:c8:b1:ae:5b:c4:f4:25:64:1f:4a:a4:dd:09:cc:d6:
         a0:43:40:52:c2:48:7d:42:c2:04:84:5f:df:82:ff:09:16:43:
         1f:9c:92:fd:ed:fe:cf:c1:91:c2:98:aa:84:1f:ff:f1:02:4e:
         b4:bb:28:09:13:46:39:72:94:e1:3a:07:7b:43:aa:08:85:8e:
         96:4d:99:53:9d:aa:07:0f:b1:05:b6:3a:75:c8:77:47:a5:df:
         24:87:df:d4:c0:c5:27:95:c1:6f:52:90:ce:d4:fb:ae:e1:20:
         82:79:e0:77:1f:ed:43:fb:8f:d4:b4:06:fc:8d:55:44:35:a3:
         4b:34:e3:6d:c9:02:46:aa:75:d5:79:f0:b1:b4:85:15:7e:e0:
         c9:3b:2c:d2:0a:64:ed:0f:a1:25:11:ca:3a:53:c3:cd:8a:ea:
         78:6d:78:80:20:63:68:7c:27:6a:f2:9d:11:12:81:2c:b4:36:
         d7:2e:9e:5c:2f:cb:2d:31:36:a3:e2:cd:55:b1:6d:ed:af:8f:
         90:99:5b:24:b4:66:ac:39:a0:42:49:aa:b1:2c:5b:71:e4:d1:
         15:11:de:a7:19:ea:66:01:e1:b5:64:09:e5:9a:04:a5:22:43:
         d8:cd:97:65:66:8e:b7:54:da:d3:d8:df:17:0e:8d:d7:50:11:
         89:66:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:27 2026 by rpki-client