Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          Ylk8JVCMVVDTkxw/gyWT79hJBzeA5yUfpgkvTQqikvU=
Subject key identifier:   93:A6:B9:BA:A4:7C:02:F0:E5:8C:01:A8:6B:64:45:58:B9:3A:EE:AE
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       019FAAF5F0C23EAAFA9B350A6A3B73E4B8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          0FD1
Signing time:             Tue 28 Jul 2026 23:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:12 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: OVWzH5xCCPy+oiBHEfZy1zZtREMtrqtgs5MW/HSZOYc=)
                          2: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (hash: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:f0:c2:3e:aa:fa:9b:35:0a:6a:3b:73:e4:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Jul 28 23:01:12 2026 GMT
            Not After : Jul 29 23:01:12 2026 GMT
        Subject: CN=93a6b9baa47c02f0e58c01a86b644558b93aeeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:a0:8b:27:2d:11:e4:4d:29:1c:05:be:68:
                    8c:3c:90:ac:11:59:ce:77:28:3d:b4:0e:f6:8f:df:
                    04:bc:b9:e1:61:40:2a:11:27:06:98:15:61:4d:15:
                    c2:e9:a6:d4:47:54:65:1c:57:10:54:84:b9:e6:3c:
                    85:7c:77:11:3b:ff:4d:c7:a8:b0:12:8b:0c:5e:cb:
                    3e:61:9b:95:6d:01:8d:9b:aa:25:23:43:e8:29:c0:
                    84:97:f3:dc:a4:cc:7c:9c:c3:20:ba:34:48:40:c3:
                    9d:30:78:84:1f:ae:59:69:ce:b4:b6:b8:10:54:2b:
                    b8:de:b5:73:fa:bc:29:3e:9a:d7:12:ad:6c:2f:3a:
                    bb:51:74:7c:4a:54:aa:16:e7:63:32:7f:05:1e:4f:
                    59:94:8a:62:a4:ac:7b:56:c4:78:86:e0:ae:ae:91:
                    00:57:3b:54:83:b9:1c:8e:53:0b:fc:09:1c:20:1c:
                    4a:87:ba:2a:13:4c:78:4e:25:5b:fc:ef:bd:59:9c:
                    ff:ab:16:00:d9:82:e6:6b:01:88:c8:b4:f2:49:d4:
                    e5:0d:00:7d:7f:fa:a7:7a:42:fd:6d:d6:73:a5:5b:
                    41:4b:d4:99:61:b9:09:9f:50:4a:71:1a:05:de:d9:
                    51:2a:17:b6:b6:75:bd:12:4b:2b:a0:b1:74:95:10:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:B9:BA:A4:7C:02:F0:E5:8C:01:A8:6B:64:45:58:B9:3A:EE:AE
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:79:42:6f:3c:c0:90:89:62:b3:06:c7:1b:e5:0c:ea:8b:f7:
         d5:75:98:54:06:3d:f3:ad:e6:c4:a8:c5:7d:1e:5d:7b:3f:48:
         69:5b:8a:7e:9b:6c:61:47:46:13:40:e5:5f:76:63:e5:32:e5:
         18:5c:63:d4:66:ad:d0:63:84:10:8b:5e:45:37:62:d5:ba:fc:
         ae:b5:f3:dc:2f:a9:15:56:3d:72:e3:f7:7d:3a:ff:37:66:4d:
         ae:98:f1:85:b4:60:98:fa:fa:6b:4f:78:69:19:2e:b8:d7:91:
         6a:65:d4:cb:d4:eb:7b:0e:05:56:48:1a:f9:c4:63:2a:de:ff:
         d3:06:8b:4d:24:64:18:20:6f:7b:7d:e4:72:3a:01:d0:0a:49:
         d4:60:91:79:2f:6f:e9:92:19:c3:f8:a2:09:b9:0b:70:87:6b:
         db:b3:e1:c4:d4:45:13:8e:72:af:85:99:25:c1:13:db:1e:da:
         ff:8c:67:21:65:99:59:e5:2f:df:38:09:60:79:e4:26:d9:59:
         1c:19:4b:c8:52:0f:ef:89:87:a5:b1:52:87:ed:80:fc:1a:b3:
         f2:db:be:7e:ea:8b:76:55:f6:ee:8d:ca:f0:07:b6:1a:0b:a1:
         49:af:a5:84:79:db:cc:0c:c7:bb:20:54:ae:48:59:a1:ed:30:
         13:ca:66:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9fDCPqr6mzUKajtz5LjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjYwNzI4MjMwMTEyWhcNMjYwNzI5MjMwMTEyWjAzMTEwLwYDVQQD
Eyg5M2E2YjliYWE0N2MwMmYwZTU4YzAxYTg2YjY0NDU1OGI5M2FlZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSagiyctEeRNKRwFvmiMPJCsEVnO
dyg9tA72j98EvLnhYUAqEScGmBVhTRXC6abUR1RlHFcQVIS55jyFfHcRO/9Nx6iw
EosMXss+YZuVbQGNm6olI0PoKcCEl/PcpMx8nMMgujRIQMOdMHiEH65Zac60trgQ
VCu43rVz+rwpPprXEq1sLzq7UXR8SlSqFudjMn8FHk9ZlIpipKx7VsR4huCurpEA
VztUg7kcjlML/AkcIBxKh7oqE0x4TiVb/O+9WZz/qxYA2YLmawGIyLTySdTlDQB9
f/qnekL9bdZzpVtBS9SZYbkJn1BKcRoF3tlRKhe2tnW9EksroLF0lRCgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOmubqkfALw5YwBqGtkRVi5Ou6uMB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3lCbzzA
kIliswbHG+UM6ov31XWYVAY9863mxKjFfR5dez9IaVuKfptsYUdGE0DlX3Zj5TLl
GFxj1Gat0GOEEIteRTdi1br8rrXz3C+pFVY9cuP3fTr/N2ZNrpjxhbRgmPr6a094
aRkuuNeRamXUy9Trew4FVkga+cRjKt7/0waLTSRkGCBve33kcjoB0ApJ1GCReS9v
6ZIZw/iiCbkLcIdr27PhxNRFE45yr4WZJcET2x7a/4xnIWWZWeUv3zgJYHnkJtlZ
HBlLyFIP74mHpbFSh+2A/Bqz8tu+fuqLdlX27o3K8Ae2GguhSa+lhHnbzAzHuyBU
rkhZoe0wE8pmjw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:04 2026 by rpki-client