Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          Qe+nSXrwzOI189RqBh3YcTgS2yAPdpDe2KOW1Kn98tc=
Subject key identifier:   62:3E:8F:BF:2E:96:6F:BC:D0:6D:E1:8C:33:E1:86:51:40:62:CB:23
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       019EB95889BF7CD2734EFF53475B0ECEAD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          18E8
Signing time:             Fri 12 Jun 2026 01:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:47 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: nvY9IdgjFUuUSK6dKXFDYZCfLnYMJJ+Zg7L5U7gYOZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:89:bf:7c:d2:73:4e:ff:53:47:5b:0e:ce:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Jun 12 01:00:47 2026 GMT
            Not After : Jun 13 01:00:47 2026 GMT
        Subject: CN=623e8fbf2e966fbcd06de18c33e186514062cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:ec:22:93:dd:ed:b9:5d:77:3e:18:73:f2:
                    ef:6c:d8:09:8e:2f:27:18:bb:bb:cc:ed:1c:2f:19:
                    e0:66:9a:63:e3:8a:f4:ca:f1:58:37:9d:39:46:d6:
                    0d:4e:95:d1:3e:b0:07:12:c9:58:b1:e5:bc:da:48:
                    19:fe:82:4d:37:70:ee:6a:9a:3b:20:8d:ee:e9:70:
                    9d:8f:c0:6d:18:d9:68:ae:e6:60:f5:bf:b4:e8:a6:
                    98:28:18:3d:7d:af:e7:50:24:da:7f:5e:cb:c7:51:
                    27:bc:f2:f8:41:09:34:e5:c1:9e:60:34:7c:b0:c3:
                    43:d5:0d:7c:d8:bd:23:ab:c9:90:11:8e:18:e5:d4:
                    83:23:ff:7e:49:a6:d1:f3:38:ce:26:19:fa:4c:66:
                    b5:90:35:7f:ad:16:c1:c4:77:bc:32:9d:ae:6e:20:
                    41:ee:92:6f:b1:23:5f:90:d9:3b:62:0d:32:61:10:
                    76:b8:f4:5a:61:0f:c5:0d:71:2f:0f:b1:ff:e1:d8:
                    c2:5b:bf:da:9d:61:95:d1:f1:7a:56:4b:94:bd:44:
                    78:d7:7f:ff:b2:83:68:56:38:9f:9b:f7:53:ac:43:
                    37:8b:9a:44:bb:e8:52:5e:de:25:b7:0b:bb:6f:18:
                    5a:b1:7b:77:3f:b5:2d:15:f6:70:32:27:3b:55:a1:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3E:8F:BF:2E:96:6F:BC:D0:6D:E1:8C:33:E1:86:51:40:62:CB:23
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:8c:8c:6f:69:42:76:ef:b7:10:db:d8:36:00:2e:cf:c0:
         b3:fa:1c:b8:87:62:f1:ac:f0:3b:fb:38:72:f3:04:ad:a6:04:
         ed:ba:8b:e8:ca:07:b1:ec:c6:e7:f6:cd:d9:1a:8d:fa:26:a9:
         61:e7:e1:59:d1:90:c1:47:ad:86:fa:61:45:24:72:8d:f4:f7:
         52:ff:cb:bf:56:d5:a9:94:07:a3:54:60:65:0c:8a:0d:bf:c1:
         07:96:75:52:d5:dc:70:18:b7:a8:0d:1c:8f:59:11:c5:b8:49:
         96:a9:43:78:e7:5f:f9:8d:d9:98:d1:5a:e3:29:9d:38:4e:ba:
         fd:3d:28:85:0a:f9:32:a4:a1:aa:06:cf:08:0f:28:0c:f9:94:
         98:93:99:e0:9c:9b:58:8e:27:f9:73:8a:6e:e1:6d:bf:20:98:
         86:07:da:86:ae:50:38:7c:da:be:67:7c:8a:20:48:9a:c1:73:
         12:7a:56:2b:f5:da:02:cd:19:80:63:13:c6:6c:b4:db:3d:63:
         64:04:68:8e:dc:65:d8:52:ed:bb:4e:3d:91:b4:48:b6:90:c1:
         6a:85:d2:71:07:3d:d2:5e:34:f1:0e:8c:c4:47:78:bf:c4:bd:
         e8:22:d3:12:b2:b5:2d:fd:eb:82:fa:5e:7c:5d:f7:a1:3f:d2:
         f9:40:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:46:51 2026 by rpki-client