Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File:                     18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier:          efYTVH518d3ZjqazVYIl3myy3Nu6xs3Jdo0FwQ3HHZE=
Subject key identifier:   B3:2C:82:F2:89:2A:81:F9:27:43:B1:B0:88:A8:3E:48:A4:57:56:CB
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer:       /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial:       019EBEECAAA7D726A2C964C350A379BEBA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 03:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:41 +0000
Files and hashes:         1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: EHeSXR0F3EE4WfSVFwgvIT+sC/FGp1Dw89tc31bIMNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:aa:a7:d7:26:a2:c9:64:c3:50:a3:79:be:ba:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
        Validity
            Not Before: Jun 13 03:00:41 2026 GMT
            Not After : Jun 14 03:00:41 2026 GMT
        Subject: CN=b32c82f2892a81f92743b1b088a83e48a45756cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:c1:d5:9e:83:ec:c9:8d:f3:2b:ac:44:7c:
                    87:4b:5b:82:cd:48:0d:bf:72:60:35:33:d9:92:62:
                    2e:01:2e:82:6a:8c:ac:f0:14:35:13:8c:a5:d3:2d:
                    c0:8a:57:70:15:cc:f8:f5:e4:ca:19:be:ed:c8:65:
                    44:73:be:50:da:6c:63:1d:c5:78:ec:48:7e:9e:02:
                    9b:43:a5:4f:97:65:a9:fb:fd:f1:30:f1:1b:cc:2b:
                    de:63:46:ff:38:e4:fd:03:3f:0c:23:7d:f8:f2:bc:
                    fb:a7:67:50:2c:3a:c7:7d:a5:1e:e0:ce:09:20:7a:
                    4d:eb:71:d9:83:1e:7b:1c:f7:ff:7a:d1:bf:6e:f4:
                    b2:cb:de:72:44:fb:51:5e:f4:c9:57:05:f7:db:ce:
                    16:31:e3:34:18:c1:db:bb:2b:11:f4:6b:40:36:aa:
                    a8:9f:ab:81:e2:87:9c:15:f7:1f:7a:60:65:34:b0:
                    62:65:de:ea:d0:5c:2a:8f:f5:43:c2:d8:1d:95:2f:
                    84:e2:17:93:3e:25:0f:67:ef:6f:1c:14:32:a1:d5:
                    a3:35:4c:72:31:5c:36:ff:50:40:2f:a3:5a:5f:95:
                    74:98:08:2b:0b:38:ee:5a:36:bd:3f:47:cd:72:e8:
                    35:cc:a6:b1:66:a8:21:49:49:6a:60:e2:77:57:7a:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:82:F2:89:2A:81:F9:27:43:B1:B0:88:A8:3E:48:A4:57:56:CB
            X509v3 Authority Key Identifier:
                keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:15:92:56:ea:02:74:f5:f0:e0:b8:77:b1:21:13:7c:43:
         ab:47:1a:90:f8:e2:09:c8:f7:83:f2:20:3a:0e:5b:93:00:f7:
         83:8a:24:60:f0:b7:59:51:2e:0a:c7:c7:a9:3c:98:d8:97:04:
         d7:d5:99:13:f1:d4:dd:81:13:01:b6:3c:b0:79:8a:9d:e5:5d:
         b1:35:7a:f3:2d:f3:be:96:15:9c:e6:f8:41:15:22:eb:e5:fe:
         df:e0:c2:17:74:d5:04:a3:73:74:21:c6:4f:47:96:70:61:71:
         ab:ed:e4:57:72:6f:bf:2f:ee:b4:40:1d:9f:15:8d:5f:9f:e7:
         a7:3a:28:41:89:ff:f5:18:75:9f:e5:e3:20:8d:9f:ea:54:dd:
         2c:77:e0:7c:56:f7:c9:35:b2:e8:89:dd:8a:71:90:a5:4d:a7:
         87:78:74:ae:cb:e7:39:ab:11:74:7e:dd:01:8a:dc:c8:68:04:
         34:41:78:66:90:1a:29:e2:9a:f6:de:4a:7b:0c:72:40:c3:93:
         54:13:27:4b:71:ef:32:e2:71:10:f4:44:ca:9f:a5:07:5a:0c:
         bf:fb:4b:0e:7a:9e:57:38:26:ab:de:d3:dd:ac:f7:c3:92:2f:
         b2:cd:1b:a4:4b:6b:4d:0c:f6:b2:3c:f5:9a:f0:27:20:43:7e:
         b9:1d:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:01 2026 by rpki-client