Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          mL8DRUwxg753+3ytFKQ6pnXgSlKE6ww2sqgKz/98COc=
Subject key identifier:   DA:F5:3E:AB:F1:40:10:00:79:21:84:7D:E6:2C:D3:34:52:4F:B6:5F
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       019ED499E6F8B08FFEF6B0F5075DCEC284C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          18F5
Signing time:             Wed 17 Jun 2026 08:01:56 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:56 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:56 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: fZQB6KwlSb1WlMK3LSHaVrzV7I9mKr0EhyAoY8XkoM0=)
                          2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:e6:f8:b0:8f:fe:f6:b0:f5:07:5d:ce:c2:84:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Jun 17 08:01:56 2026 GMT
            Not After : Jun 18 08:01:56 2026 GMT
        Subject: CN=daf53eabf14010007921847de62cd334524fb65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:62:3a:8e:8d:7e:48:65:6e:2c:11:bc:3e:
                    08:87:0d:b5:4e:ac:18:a1:69:86:b0:d1:e5:b7:16:
                    ad:56:6a:cb:96:a9:d6:b4:97:da:3d:3f:c2:2e:19:
                    5d:15:4b:2e:b1:25:f9:fa:c2:ae:8c:01:3e:df:46:
                    aa:b3:dc:10:74:fa:6b:9f:ef:d7:5e:13:09:3f:25:
                    a9:15:47:69:8d:8c:a3:d0:82:ef:04:f5:ab:6d:41:
                    3d:66:d9:93:6e:43:30:5f:6f:15:e2:a8:02:01:2e:
                    fc:46:9f:3d:1e:45:f1:16:68:ad:45:df:be:3b:3e:
                    a0:de:2a:1e:31:dc:8c:94:8e:1b:a6:3c:dc:bf:e8:
                    28:49:e6:5c:aa:00:8b:a9:aa:30:e8:1e:1a:8c:a6:
                    ac:8f:a1:69:5e:6c:64:28:40:3d:78:1e:b1:a9:37:
                    75:31:a2:ae:7b:08:c9:39:87:e6:a5:ac:4e:c9:77:
                    97:4e:ba:72:4a:82:69:80:ae:34:3f:26:85:ec:73:
                    9f:24:9d:83:45:b7:69:53:b6:94:34:ca:de:d5:9e:
                    7b:b5:6f:12:ec:6c:60:1f:cb:ba:65:96:4d:b6:e9:
                    d4:4c:a9:8d:ac:e6:0a:06:c9:22:ec:b6:0a:17:84:
                    f6:3f:15:39:75:7a:22:0c:23:15:a4:48:a3:a7:e1:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:3E:AB:F1:40:10:00:79:21:84:7D:E6:2C:D3:34:52:4F:B6:5F
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:67:d7:bf:0d:b5:a7:72:14:65:1d:52:58:27:ef:2a:66:40:
         b2:30:6e:2a:80:19:5e:d1:1a:da:fc:30:49:41:b2:f6:25:56:
         b3:2a:56:32:83:7c:ea:e6:7b:64:ed:02:6f:31:9a:70:6b:c4:
         98:4f:2b:bd:b4:bb:e8:22:21:d0:02:56:41:d5:5d:4e:1e:21:
         cf:1f:a5:82:91:f7:1d:40:f0:62:e9:50:16:68:b0:fc:72:4d:
         00:f2:31:98:b1:aa:44:31:d6:7c:e0:8f:05:43:0a:19:3c:3c:
         3e:47:2b:b6:0e:9b:86:f3:53:de:65:62:ef:53:7c:2e:fd:9e:
         58:70:5f:0b:7f:61:4d:ce:a9:a2:eb:11:e2:92:0a:ac:ad:1a:
         4b:6f:aa:4b:84:f2:6e:2d:5f:c4:9e:cb:9b:f6:e6:f3:1f:13:
         be:9f:67:0a:ac:ca:c3:9a:89:9c:49:9a:bf:3e:17:eb:80:14:
         fd:41:08:b0:9a:33:7c:11:09:a9:f5:5a:23:44:42:fd:d3:ba:
         fa:af:01:b0:8c:ad:77:ea:6b:68:4c:21:64:30:06:e3:ca:4b:
         6e:e7:80:18:24:43:52:d0:a3:89:82:49:36:d6:78:b2:d5:2b:
         51:50:43:46:a2:1b:db:4c:7e:8a:f8:ed:a2:ae:7d:04:6a:d1:
         9d:57:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:05:00 2026 by rpki-client