Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File:                     dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier:          EpjdhPAJY/4ulJP93Cu/2koJXZtc2IYc+LTe0xjELM0=
Subject key identifier:   B4:FE:92:BE:BD:FE:F3:E0:AD:08:0E:B8:83:47:82:51:E7:58:4A:98
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer:       /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial:       019EBF91A0519C80FADF5AF7AFC2F4FAFCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 06:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:52 +0000
Files and hashes:         1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
                          2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: uK7fVl+ffhQ+U2XT7Zy8tQBHhGNmatkeTgO8aZc1UtQ=)
                          3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:a0:51:9c:80:fa:df:5a:f7:af:c2:f4:fa:fc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
        Validity
            Not Before: Jun 13 06:00:52 2026 GMT
            Not After : Jun 14 06:00:52 2026 GMT
        Subject: CN=b4fe92bebdfef3e0ad080eb883478251e7584a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:00:7a:a7:e0:c1:2a:85:6a:d7:7a:2a:13:
                    b3:56:a1:0e:33:74:6f:a2:76:2e:48:d5:2a:2a:45:
                    da:40:09:44:35:fa:f5:5e:bb:bb:67:ed:4f:ce:a4:
                    77:82:0d:1a:9c:dc:ad:43:d8:99:86:9d:63:e8:4c:
                    f0:1c:ef:2c:a5:68:ea:65:bd:a5:c1:13:50:66:0e:
                    aa:a5:3a:ef:5b:ae:dd:c0:76:9b:30:c6:95:38:99:
                    7f:b8:ba:55:80:db:c5:8d:f6:c4:68:ce:eb:32:65:
                    22:b5:db:6d:53:d2:01:f8:34:aa:20:db:db:7f:2a:
                    e8:01:d0:a4:42:f2:66:f0:a3:cc:39:41:1c:1c:9c:
                    f3:07:6b:dd:e5:f1:7b:8c:31:31:7b:c9:14:50:20:
                    cc:c4:8c:91:cc:eb:ec:1b:ef:27:78:0b:f2:c2:ff:
                    3c:6b:01:16:8e:81:02:3b:71:72:7a:f0:f7:3a:9d:
                    df:64:a3:ef:66:51:29:78:a8:83:76:7b:a6:f3:34:
                    16:ba:b6:5c:0f:bb:6d:d2:01:4b:e9:35:24:69:e1:
                    55:fb:50:6f:2e:89:54:ce:11:7b:08:ad:a9:f9:d4:
                    37:1e:12:cc:85:f9:6a:de:4e:62:1e:ee:d4:bd:1e:
                    88:f7:86:65:63:f8:51:cd:60:d1:7a:ed:a9:fc:94:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:92:BE:BD:FE:F3:E0:AD:08:0E:B8:83:47:82:51:E7:58:4A:98
            X509v3 Authority Key Identifier:
                keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:fb:05:fd:d6:45:8b:9f:26:17:96:ff:d9:8f:dd:a1:6b:
         2e:99:a4:12:52:c6:7f:26:bf:c7:17:fd:ff:e4:10:4f:b5:c4:
         aa:72:03:bf:50:7c:b8:13:9f:72:f0:e9:f7:84:37:4b:b5:55:
         c8:13:65:19:eb:2d:23:0d:3a:84:44:e7:0d:7a:bc:68:98:1e:
         bc:85:ff:51:99:46:02:fe:82:9b:a6:97:62:02:64:da:70:ae:
         a8:4d:f6:f5:15:f8:33:a0:95:9b:81:f4:8b:f7:6b:a1:8e:26:
         60:a4:fe:6c:c4:77:8a:c5:b9:16:56:d9:3a:c8:2d:95:f0:56:
         93:47:8e:d4:94:9e:24:ed:20:fe:4c:dc:de:a7:0f:2f:13:89:
         35:55:61:87:62:cb:83:f2:6e:d6:0f:7c:ab:4c:38:b8:c5:a2:
         81:1c:01:02:59:62:24:72:d5:5d:41:8e:3f:cd:b2:de:a8:6c:
         29:37:52:20:6e:ed:70:83:75:d4:3c:c6:71:6c:11:f8:98:7a:
         72:b7:17:b9:43:1a:7e:b1:3e:d1:f6:6b:b0:70:fe:68:92:b1:
         55:b2:f0:01:b7:e3:07:39:dc:f3:c6:b9:d9:4b:b8:ff:24:d9:
         75:db:0b:18:05:0e:39:c3:03:e8:88:46:7d:7b:2d:54:4a:3b:
         25:78:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:39 2026 by rpki-client