Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File:                     x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier:          fd/MfJvFcDTIDwRGULVCrsvs8roRXTjAAnmJJh9XX9Q=
Subject key identifier:   8C:76:50:F7:A4:3B:26:CC:04:3B:9D:8A:8A:41:35:B4:51:A3:D9:00
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer:       /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial:       019EC413305EAA2BFF44D39DFE3995CD37D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number:          18DF
Signing time:             Sun 14 Jun 2026 03:00:52 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:52 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:52 +0000
Files and hashes:         1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
                          2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
                          3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: HdznCYafSDeRWzmhV2LBY0w07hUBFWD9OQdYWEpHcI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:30:5e:aa:2b:ff:44:d3:9d:fe:39:95:cd:37:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
        Validity
            Not Before: Jun 14 03:00:52 2026 GMT
            Not After : Jun 15 03:00:52 2026 GMT
        Subject: CN=8c7650f7a43b26cc043b9d8a8a4135b451a3d900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:9f:a7:75:40:8a:b4:3c:c1:2f:36:d4:0b:
                    52:f1:83:12:9d:84:62:7b:6f:d7:7a:fb:07:37:86:
                    ab:cf:79:13:56:4e:51:7f:0e:e8:9d:c3:fd:60:1e:
                    5d:72:b9:9e:5a:61:9c:49:76:30:1f:a9:31:fa:0e:
                    59:5a:57:8f:1a:67:59:59:78:74:c9:01:d3:d4:88:
                    3a:4f:ff:d0:f2:87:d1:8d:29:f7:c6:ad:17:5d:a7:
                    a7:e7:39:06:a5:c8:da:db:74:45:73:44:ab:a5:a8:
                    0b:53:e8:d9:6d:7f:64:0e:9e:2b:2d:9e:b3:e3:c0:
                    a2:9e:07:0a:e0:0d:da:d1:73:9b:58:95:1a:21:ef:
                    a3:c0:50:b9:62:1e:12:e2:ea:b2:f3:28:7d:c7:d8:
                    b0:6a:85:ab:a1:d5:b3:45:7c:da:28:6b:0e:5e:f5:
                    a2:70:22:f7:1f:52:3e:75:ff:75:99:aa:54:ef:83:
                    46:43:e6:5f:69:f5:01:9d:9c:66:5c:f0:7a:62:49:
                    cc:f8:13:f6:b2:e1:a1:0e:22:5c:83:60:ba:d5:ee:
                    eb:b4:3d:d4:e0:4e:b7:bd:50:09:09:c4:19:f6:24:
                    4e:4a:c6:9c:27:b7:8d:6f:bc:77:8d:d9:1d:dd:42:
                    b5:11:18:fa:ac:aa:b6:6d:4d:18:50:3a:c3:0b:7f:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:50:F7:A4:3B:26:CC:04:3B:9D:8A:8A:41:35:B4:51:A3:D9:00
            X509v3 Authority Key Identifier:
                keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6d:96:b6:97:84:37:ea:56:a1:fc:2e:a7:09:fb:2d:8c:e1:
         50:cd:ea:7e:ce:e8:78:dc:c4:28:40:83:aa:a2:82:22:c1:f6:
         49:b2:f8:44:bb:19:6d:df:5d:8c:1c:00:ce:c4:bc:30:d6:14:
         bc:6e:18:18:a6:d5:b3:23:3c:b5:32:2a:d2:bd:37:ac:e7:e2:
         67:f4:0c:66:11:a8:2f:51:cd:80:f2:2c:67:9d:0e:ee:19:e0:
         4d:a7:77:97:9a:c9:31:3e:02:b7:1e:70:65:82:d5:e2:a6:3f:
         90:8f:5d:19:c2:1c:d5:0d:6a:67:3a:ec:9a:15:3b:93:db:6d:
         ae:f3:88:33:cf:91:79:ca:c8:1c:17:5c:08:3b:d1:22:1f:8a:
         a8:3b:88:ca:bb:fd:ee:be:70:13:f3:71:50:f8:b8:bc:37:a8:
         86:31:26:96:a7:8e:61:77:b6:d1:66:7e:9e:8a:24:7a:30:cd:
         fe:94:7b:20:08:13:ad:35:d4:8f:c0:43:4c:d1:a9:12:a3:b1:
         61:e9:d1:03:31:5c:36:0a:14:7c:14:e1:73:6d:97:18:0c:a5:
         5e:03:ea:47:fd:12:13:d3:18:88:78:85:47:f0:04:92:f7:94:
         de:e2:48:ba:26:f0:07:18:25:18:5d:60:1b:a9:32:e3:c0:2b:
         1c:7c:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:42 2026 by rpki-client