Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File:                     L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier:          xMXEXlJda/E3WUyiWAUWfqKatFERM3+IqeaVU8V1LwU=
Subject key identifier:   18:F8:51:AE:EC:7C:BF:CB:99:35:27:B5:52:57:2B:07:31:70:84:38
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer:       /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial:       019EC0DB9FB7907622CD21F15B56BBD07610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number:          1478
Signing time:             Sat 13 Jun 2026 12:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:19 +0000
Files and hashes:         1: JNmXvrsL4QUvDHkICJz6m5Up78E.roa (hash: BLhtsTAWR9XcWaxVCBS42M+LRcERJIfM10IC2M3COIA=)
                          2: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: EQ49GGcv4DVnzGQPUU3if5WANW0bi8YZX9O40XuTzXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:9f:b7:90:76:22:cd:21:f1:5b:56:bb:d0:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Validity
            Not Before: Jun 13 12:01:19 2026 GMT
            Not After : Jun 14 12:01:19 2026 GMT
        Subject: CN=18f851aeec7cbfcb993527b552572b0731708438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:50:3f:54:97:36:b3:1b:50:1d:2f:9c:65:
                    b5:3d:6c:a9:e2:9a:ef:39:a8:cd:fc:2c:b4:a1:0a:
                    5d:9b:72:74:b4:dd:4c:aa:6e:2d:8b:46:88:71:05:
                    f9:e5:58:2e:7e:51:35:30:72:fb:77:2e:39:84:72:
                    5d:d5:31:5e:13:c1:d5:7d:36:49:f9:d5:22:96:cd:
                    20:42:03:e9:d9:57:51:db:f5:a4:55:0d:20:2e:eb:
                    a8:08:a5:e6:1d:02:4f:75:2a:7f:33:75:da:fb:9d:
                    58:60:39:57:ec:18:af:26:c8:7e:cb:40:f5:6e:81:
                    5f:7b:8a:2d:1a:f5:78:f3:df:83:06:39:57:9b:33:
                    8e:83:be:44:1c:5d:3a:37:34:47:ae:94:b8:02:67:
                    d7:e9:77:bd:3b:de:7d:9a:1f:fa:1f:44:c1:90:33:
                    f5:c8:ea:fa:91:d6:09:82:43:2d:34:1a:a2:9c:15:
                    a9:72:c9:cd:ba:b5:e2:aa:74:37:eb:22:0a:f6:5a:
                    74:d0:15:8e:db:c0:45:fa:cd:ec:2b:a1:53:c9:6c:
                    35:2e:64:a8:8c:2c:c2:cc:0d:87:c0:4e:09:b1:60:
                    15:5d:7b:db:16:98:99:bc:f1:b8:e4:05:05:84:2a:
                    eb:fc:b9:94:92:b9:77:d0:92:4e:d2:04:cf:8b:4d:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:51:AE:EC:7C:BF:CB:99:35:27:B5:52:57:2B:07:31:70:84:38
            X509v3 Authority Key Identifier:
                keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:da:47:0c:42:95:ad:4a:3d:0a:88:58:db:98:b9:80:a9:
         ba:5f:48:42:b6:ef:8f:da:56:11:a8:5f:4c:c5:eb:83:a6:f5:
         59:e6:3e:88:38:7c:99:b3:62:2f:61:ca:07:19:54:10:68:f7:
         0f:81:ec:49:ee:20:e6:a6:51:bb:38:08:00:45:be:ea:f2:a9:
         0d:aa:58:63:5d:fd:25:21:38:ec:ee:12:b3:07:e6:7c:50:ca:
         88:5b:4d:a0:62:ff:be:13:23:23:e9:6b:a9:9c:78:ae:93:7f:
         1b:4e:d2:10:73:8a:a7:47:e6:35:35:2e:2b:64:f8:01:b8:7a:
         1b:97:13:82:af:60:4b:54:91:88:3f:ce:9a:80:e6:02:88:0a:
         c4:83:fc:6d:12:5f:e8:f8:8c:a4:5f:1c:28:b9:51:72:0e:86:
         c6:cf:95:53:ed:f7:6f:5b:ef:f3:38:69:59:65:d0:f3:11:ab:
         74:e8:75:b4:3e:99:12:ea:e6:3d:f6:f0:8a:62:3a:1e:7c:5f:
         a6:06:c4:46:65:72:35:b8:3e:5a:d9:ef:da:af:2a:01:da:59:
         8c:c2:05:18:fb:bb:4a:c0:02:4c:47:f3:1c:27:d3:b7:53:2f:
         f8:56:dd:ec:18:67:8d:51:67:79:da:fd:e5:e2:aa:1b:4b:0b:
         23:ee:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:46 2026 by rpki-client