Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          jUtqf72AXmZyn4yemVft++olZYy5anh4MxWbmKn3VV0=
Subject key identifier:   56:25:B3:71:1C:82:CF:1A:89:85:D5:02:2F:99:F0:21:C2:E8:68:07
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       019EC0A3F5608E0D11340AE2682F3F2FCB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 11:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:31 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: lTiLjreHZzjSOVWVR8MUunaR0VrhTgT1YK17O2sp7tY=)
                          2: F1ia1Weaubn8eKzVn8s3JrMAdx4.roa (hash: N+hr1h8NlI+FxivU5QhlJspaJlXj+zDKR5ugxOa3HpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:f5:60:8e:0d:11:34:0a:e2:68:2f:3f:2f:cb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Jun 13 11:00:31 2026 GMT
            Not After : Jun 14 11:00:31 2026 GMT
        Subject: CN=5625b3711c82cf1a8985d5022f99f021c2e86807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:9c:ed:e3:e3:f3:66:e8:7e:a7:64:32:ae:
                    fa:cb:c9:0e:08:79:4a:c5:e6:bf:dd:48:30:09:fc:
                    f6:b1:02:67:1f:a8:16:35:d6:0e:4b:a8:fb:2f:b7:
                    ae:5f:2d:28:93:96:0a:cc:ac:46:a9:98:36:a5:b0:
                    20:0a:b8:66:c3:a7:32:88:9b:18:e6:57:d9:0f:15:
                    61:78:b4:ee:e7:2b:6c:ed:b7:92:5e:b3:c3:b7:55:
                    ba:e4:2c:28:69:8c:b3:99:62:be:3f:94:a7:09:bd:
                    6f:38:84:7e:35:68:d2:25:f1:7d:18:39:1a:87:10:
                    36:d5:fe:72:68:b3:c2:a7:2a:fb:ae:04:3c:aa:8d:
                    a5:ad:a1:23:c5:8d:52:21:14:ad:cc:70:10:0d:63:
                    35:8a:bd:07:41:c2:ba:65:60:85:dc:a8:7a:1e:c8:
                    37:47:a8:b8:70:ed:3a:84:7e:0d:7f:e0:64:a0:27:
                    4d:51:f5:d6:44:73:78:29:d3:b8:37:f1:23:b6:ef:
                    5b:65:13:9a:39:5e:19:35:a5:fd:bc:0f:fe:79:f2:
                    76:33:09:ab:e0:05:b1:1a:87:d4:be:dd:0a:4e:bb:
                    c2:36:3f:8f:e8:b3:a5:bc:5a:8e:8c:cc:df:ff:66:
                    05:9b:db:d2:a3:bb:1a:57:01:d4:d0:7c:3c:46:46:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:B3:71:1C:82:CF:1A:89:85:D5:02:2F:99:F0:21:C2:E8:68:07
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:78:3b:f0:f0:ee:40:b9:fd:6f:1d:0f:18:86:10:12:29:e9:
         48:a5:73:c9:72:0e:25:7e:6e:de:d9:e4:1f:44:d2:91:f8:a9:
         20:f3:40:ac:a7:0d:27:05:3d:b7:cf:e4:60:b2:0f:f0:c6:cf:
         57:3c:52:7a:93:f7:4c:ab:4e:95:7d:da:1a:90:a4:c4:11:51:
         34:0a:ef:61:f2:2c:68:93:ae:ff:09:43:c7:ac:a1:89:5e:25:
         ee:5b:97:62:5b:7e:d3:78:e0:0a:5c:4a:43:d2:4a:9f:2b:15:
         8a:d9:d7:96:a2:dd:5c:f2:51:46:00:6a:7e:43:25:43:b1:4e:
         20:3f:2d:1a:c8:94:af:9d:c0:a1:ac:bc:fe:90:e3:2f:73:06:
         91:01:f7:a3:e8:c9:94:6d:a7:d6:de:ea:cb:ac:c5:0a:a1:72:
         66:44:f2:fb:39:06:4f:06:a5:e4:e1:4f:35:b0:c5:c2:b8:80:
         d4:42:e5:53:fc:bb:7d:8d:ad:4e:bf:2d:ec:2a:7c:31:db:eb:
         39:21:f5:6f:1d:e3:b7:75:fc:23:16:36:d2:5c:f9:cc:2a:ea:
         94:dc:dc:c0:b2:03:0c:3a:32:b1:53:2e:29:95:aa:bc:f9:b3:
         36:b1:3f:67:21:f5:c4:b0:dc:f2:3a:2a:9d:cd:76:fe:26:db:
         87:03:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:23 2026 by rpki-client