Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File:                     Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier:          TQt2UxxoOJn8aY5h96fqELjWeRDLx7yTjC3dn0itPvg=
Subject key identifier:   63:34:62:8C:22:66:E3:F1:BF:DA:6E:17:22:D3:91:D0:24:E3:0B:09
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer:       /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial:       019EB9FDB5A3EA23916178CF8E24317E47B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number:          18B0
Signing time:             Fri 12 Jun 2026 04:01:12 +0000
Manifest this update:     Fri 12 Jun 2026 04:01:12 +0000
Manifest next update:     Sat 13 Jun 2026 04:01:12 +0000
Files and hashes:         1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
                          2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
                          3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 2tlFPt5MmTigbuIy79UBqVUoizH+Fp9ZO6T3F6eV9d4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:b5:a3:ea:23:91:61:78:cf:8e:24:31:7e:47:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
        Validity
            Not Before: Jun 12 04:01:12 2026 GMT
            Not After : Jun 13 04:01:12 2026 GMT
        Subject: CN=6334628c2266e3f1bfda6e1722d391d024e30b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:11:61:d0:f6:eb:f3:97:e5:9c:04:58:3c:
                    01:ba:cc:c7:d9:ff:ac:0c:b8:53:86:fa:3d:16:d2:
                    4f:cf:c6:48:68:b2:8f:34:ff:99:fb:f4:bf:cb:bf:
                    e6:9f:9d:5b:2a:b5:9c:c7:18:90:64:cc:08:16:03:
                    c4:ad:00:d3:69:d4:27:51:54:94:44:c8:d2:59:12:
                    49:4e:d2:3e:a2:bc:0c:7d:e2:df:5d:1a:fc:14:2d:
                    33:c2:fb:d0:f6:c6:81:50:62:ce:ec:f6:a4:5f:45:
                    07:a7:d9:64:1e:a6:76:f7:15:61:d9:85:4d:d0:f8:
                    9d:97:4b:54:80:5e:3b:28:bf:c5:01:cb:24:fe:50:
                    e4:d8:93:c6:83:4f:89:78:bd:3e:ad:66:8d:1a:04:
                    1e:64:f0:e0:e1:6d:c6:34:33:9a:b3:b1:46:32:fb:
                    00:2a:0b:bb:17:43:63:a5:44:d7:00:3c:34:f2:f0:
                    2d:31:9d:a3:fd:00:b1:34:5a:37:1b:b8:30:00:9e:
                    43:87:25:15:44:84:da:0e:8b:3e:8a:3c:54:6f:b4:
                    ab:18:7d:f2:37:fc:79:f3:33:41:1a:15:0f:36:f0:
                    a6:8f:a3:8a:e6:90:da:89:f2:39:79:1c:29:43:3f:
                    fd:6c:24:e6:2c:30:4f:c7:d3:2e:f4:6b:04:b2:75:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:62:8C:22:66:E3:F1:BF:DA:6E:17:22:D3:91:D0:24:E3:0B:09
            X509v3 Authority Key Identifier:
                keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:bf:7e:31:83:cd:05:5c:57:12:b9:03:df:2f:12:87:68:
         c5:0f:d0:4c:f0:cb:6d:73:33:18:fe:b3:4e:2f:1e:dc:66:4f:
         87:52:ad:e1:b3:c7:86:bc:0c:07:27:e0:70:24:77:35:ba:5e:
         dc:22:41:22:5b:c4:f1:70:66:ea:42:4a:60:ac:13:fe:62:8b:
         04:56:ee:56:62:40:7e:e1:be:94:2e:75:27:1c:6e:4d:69:f5:
         4a:09:42:2a:53:4a:5a:66:8f:7b:f5:c0:70:e7:e8:9c:8b:29:
         db:c0:d5:60:19:39:a4:52:ce:0e:5b:a7:6b:27:39:fa:2f:58:
         63:91:6b:65:6d:6b:48:c3:51:f2:cb:06:d0:30:40:9d:d8:83:
         4c:55:7b:4e:92:22:4a:54:99:4f:98:aa:ec:84:82:c0:41:2f:
         ec:9c:0d:f7:12:82:ec:6c:a1:c7:28:f2:0b:6b:25:ed:ef:d4:
         45:db:67:2c:b8:e2:ea:1e:8f:16:c7:61:34:60:7e:cb:b7:59:
         bb:a5:f7:2e:63:70:5a:47:ad:0c:4f:dc:e2:e1:3f:7e:c0:51:
         17:d6:86:88:0a:cb:c7:59:ca:9d:14:6d:ef:e6:95:de:f6:92:
         6d:57:26:31:cc:da:ba:bd:cc:87:24:31:c6:bc:9d:44:36:6d:
         36:b0:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:43:50 2026 by rpki-client