Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File:                     1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier:          C0vCl1U8wRrcN6NgGmkLnx2gnK4Q0Xasz2kwdoXoqAo=
Subject key identifier:   F5:58:30:12:DD:1A:89:7F:AC:F3:AB:DB:AF:99:A0:F6:80:C8:DE:A8
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer:       /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial:       019EBDDA365BF2FC07D42A9F8AB985779A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number:          18EC
Signing time:             Fri 12 Jun 2026 22:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:55 +0000
Files and hashes:         1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: xry95uUmvHpu1XGOgECtyLuHpxjTvUIvNdWEMlfBQJg=)
                          2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:36:5b:f2:fc:07:d4:2a:9f:8a:b9:85:77:9a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
        Validity
            Not Before: Jun 12 22:00:55 2026 GMT
            Not After : Jun 13 22:00:55 2026 GMT
        Subject: CN=f5583012dd1a897facf3abdbaf99a0f680c8dea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:e5:a8:30:bd:81:b9:21:28:2e:68:e1:34:
                    46:f3:5d:87:c5:68:a8:11:82:5e:e5:91:45:1b:7b:
                    7b:58:ed:00:a6:b4:9b:d0:a1:ad:e1:23:21:59:0c:
                    c7:34:5e:7c:3d:59:1c:49:85:6d:b6:e9:da:98:62:
                    b9:ff:77:4d:90:41:ee:e6:33:08:25:51:81:86:6d:
                    da:e6:d1:66:df:aa:a9:7f:d6:52:7f:ce:1e:88:2a:
                    68:5f:af:eb:b6:01:9f:74:78:20:a0:a7:be:99:9f:
                    d8:b6:04:7f:90:17:41:d9:67:51:20:06:45:a0:78:
                    04:03:2f:9c:ab:61:5d:ae:c3:6e:3f:d2:8b:cf:c0:
                    2b:28:0d:96:19:8f:3a:f6:b8:af:31:b3:32:e1:43:
                    24:95:59:90:db:59:a3:ea:14:e7:bf:e6:cc:4c:1d:
                    37:14:10:f8:68:9d:dc:0e:28:cf:05:31:34:71:e6:
                    d7:6b:3e:09:74:b0:b0:36:dd:2f:20:e4:26:ec:ff:
                    6e:41:60:61:53:0e:34:1f:91:54:59:69:0d:41:72:
                    b0:8e:a5:fe:4b:b5:52:40:0d:bc:29:52:19:fa:db:
                    ff:f6:80:ab:42:bd:13:d3:c2:9b:0e:46:a1:06:9b:
                    0c:3a:0c:fb:8b:6a:e2:8d:af:f3:ff:46:a4:9b:d2:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:30:12:DD:1A:89:7F:AC:F3:AB:DB:AF:99:A0:F6:80:C8:DE:A8
            X509v3 Authority Key Identifier:
                keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:82:3b:24:ab:f7:4b:21:aa:af:5c:9a:27:13:55:2a:b1:a7:
         c0:10:01:ac:af:2f:d2:8c:2f:f7:db:f0:20:46:b3:97:91:a4:
         ad:97:0b:1d:7a:92:4d:71:7b:7a:37:e8:67:94:7f:46:21:3f:
         72:b7:c0:c8:d8:70:0d:f4:b3:b2:f6:e5:ec:cb:3e:08:92:75:
         13:b5:d5:98:95:1e:73:5b:50:17:97:4b:06:73:e4:f6:66:53:
         92:8a:70:74:55:8c:59:f0:f1:06:38:78:9f:0c:c1:96:8b:95:
         9a:b6:49:80:44:89:1e:b4:4b:ec:26:4a:d1:f9:6f:7e:d5:20:
         28:32:fa:6b:d1:ba:b4:2e:7e:b9:d4:4a:f0:72:6e:c6:20:44:
         be:05:5d:17:0b:a0:a1:61:c5:21:f8:bd:72:9b:94:cc:a7:5d:
         99:4f:57:9c:ec:e8:ab:73:40:70:9d:07:7c:40:08:61:af:12:
         ed:2c:c5:05:b3:74:88:e3:66:ed:ff:26:99:ab:e7:91:d5:2a:
         cb:86:3e:7c:a6:7d:6f:3b:9b:51:cb:cd:14:52:86:2b:49:6b:
         06:e0:36:3a:fa:f1:cd:71:f7:43:4f:d3:f7:d0:e6:6c:4a:9b:
         9d:c5:7b:d2:5e:7d:56:f1:bd:b9:18:71:7f:38:54:4a:6b:15:
         a4:44:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:33 2026 by rpki-client