Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File:                     hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier:          fLWVZR8IfN0bq89WibWW6bV9PMwNDR/jKQguXL2l0is=
Subject key identifier:   C0:3C:6A:92:37:6E:7D:02:2D:EE:09:A8:1E:50:E4:F0:8D:E2:7A:99
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer:       /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial:       019EC0A41C92DAE77D5E130E3A6941146366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number:          18F0
Signing time:             Sat 13 Jun 2026 11:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:41 +0000
Files and hashes:         1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: +qQEzoy2T/d1WAKuts9zSfcNcZysDS2D5NX4iUdkPuQ=)
                          2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:1c:92:da:e7:7d:5e:13:0e:3a:69:41:14:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
        Validity
            Not Before: Jun 13 11:00:41 2026 GMT
            Not After : Jun 14 11:00:41 2026 GMT
        Subject: CN=c03c6a92376e7d022dee09a81e50e4f08de27a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:c9:91:da:5f:7d:07:16:dd:d4:de:f0:cd:
                    f3:fe:d2:76:a2:79:5a:56:e5:de:38:ad:6f:62:2c:
                    57:50:1a:a9:58:48:1f:0f:6e:5a:98:a6:1f:b4:58:
                    ea:9e:ab:b4:3e:c2:9f:52:0e:b7:f8:25:6e:77:dc:
                    c3:de:13:83:8e:f2:61:e5:1b:de:3f:76:7a:e8:b1:
                    48:62:5c:37:fd:c2:d3:20:da:70:b2:b4:83:73:b7:
                    03:1a:29:29:76:7f:fb:d7:5b:51:09:ca:7e:79:c5:
                    38:cc:fb:b6:5a:bf:5c:61:55:0e:9b:8e:20:d0:c4:
                    d1:66:23:01:1e:ae:f0:5d:bb:48:e1:18:11:32:b3:
                    0d:19:63:a1:f3:ac:4f:95:50:8d:4a:0f:ed:7c:f7:
                    40:d7:fe:35:d9:f9:99:b9:20:00:79:1b:6e:a1:96:
                    df:4d:7f:c9:f5:24:c8:18:45:ff:45:5c:11:dc:9a:
                    9d:58:7e:76:6b:66:7b:4c:a8:f5:88:ea:b8:4d:54:
                    dc:07:f8:75:fe:f0:c3:87:50:69:73:78:d1:1c:d0:
                    ef:79:3a:ca:0b:be:e2:c1:a3:51:65:4a:ed:d3:4e:
                    8f:19:2c:33:e1:ea:36:05:73:e1:11:f5:93:0f:d1:
                    84:7b:63:c3:02:c9:77:76:ab:bc:aa:e2:d5:09:6f:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:6A:92:37:6E:7D:02:2D:EE:09:A8:1E:50:E4:F0:8D:E2:7A:99
            X509v3 Authority Key Identifier:
                keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:25:f1:4e:d0:ea:3d:4d:78:3e:24:4f:21:4c:54:ca:67:
         2f:fb:f6:68:d1:4d:b5:0a:2c:54:ef:0c:a7:f5:d7:36:24:af:
         47:c3:29:43:07:23:34:10:3f:02:63:32:f9:f4:a8:6e:90:a1:
         69:23:43:f8:27:65:e0:e3:d3:c0:ca:00:79:48:68:f2:a1:4c:
         55:85:78:4a:70:3a:ee:66:d1:eb:3a:9e:a2:17:c6:d6:58:65:
         ef:55:24:b9:d2:bb:04:46:2a:27:a6:51:cb:44:7b:f2:f4:ad:
         d2:6a:86:48:23:d5:9b:74:32:e5:dd:ab:89:d2:9d:99:19:5e:
         b5:68:26:8e:97:dc:5b:59:62:71:46:43:65:c6:8e:4b:f6:f5:
         39:d8:96:42:bd:fc:0f:c1:7c:df:88:00:92:e7:e2:f8:99:6b:
         c2:65:79:99:6b:2b:71:49:52:e3:2f:95:99:85:64:c2:39:37:
         b7:dc:93:47:1f:71:eb:72:e2:68:7f:8c:7c:b3:d3:1c:22:9f:
         82:2e:3b:3e:ce:f8:3c:b0:2a:94:be:91:aa:c5:54:c8:ac:8a:
         31:68:da:a2:15:a6:80:73:f8:c8:05:13:9e:19:29:6a:6e:1b:
         a0:3c:4e:e7:4e:0a:52:67:1a:70:46:0d:41:2a:98:a3:c0:0b:
         eb:90:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:09:47 2026 by rpki-client