Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          TnW04Rl+CEpaXte7PTckvqW0bL88gvo0z2VynVh4l+I=
Subject key identifier:   EF:E2:CD:DE:15:DA:AC:53:35:3E:69:BD:08:98:B9:27:28:8A:D9:E1
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       019E314E309AFB492C5640142253BF61E422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          18A0
Signing time:             Sat 16 May 2026 15:01:08 +0000
Manifest this update:     Sat 16 May 2026 15:01:08 +0000
Manifest next update:     Sun 17 May 2026 15:01:08 +0000
Files and hashes:         1: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (hash: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s=)
                          2: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: XF9cwvGkzsPrUr0w0+kpFoMvjVUrf5e8t3VXFM7yxc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:30:9a:fb:49:2c:56:40:14:22:53:bf:61:e4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: May 16 15:01:08 2026 GMT
            Not After : May 17 15:01:08 2026 GMT
        Subject: CN=efe2cdde15daac53353e69bd0898b927288ad9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:a8:7d:4e:40:30:b0:2e:eb:61:dc:7a:6e:
                    1c:85:43:51:6d:03:45:c9:34:a9:7e:d4:6a:e2:dc:
                    78:8d:2c:ec:05:24:f9:40:22:55:b9:aa:c1:3a:f9:
                    79:7a:33:7c:2a:fa:fb:fc:3c:31:92:55:a8:87:ad:
                    4b:f8:52:a2:27:f7:d7:e5:0e:ad:18:37:90:4d:e7:
                    36:16:c0:56:1f:6d:c3:1a:a0:09:08:3b:ce:06:6b:
                    02:11:2c:c5:f1:01:2e:24:d7:4a:ac:03:3f:44:79:
                    96:1b:00:77:6c:3b:45:26:c0:e4:77:12:5c:ae:de:
                    15:42:7a:6a:2e:42:fd:01:6b:ff:b0:0b:11:7d:3a:
                    26:bd:6e:da:92:db:a9:67:21:a1:a3:a6:65:57:af:
                    cf:56:a7:8b:25:b2:d3:c5:80:64:28:93:0d:58:56:
                    f4:25:d1:20:f6:b3:0a:03:6c:9c:4b:f2:50:cd:8f:
                    fb:82:88:b5:67:33:4e:83:2f:e6:55:0b:3e:5d:98:
                    bf:8a:73:1c:9d:1d:1f:b2:2d:53:36:65:ac:37:ce:
                    bb:68:ba:b7:bc:54:d4:1f:00:be:04:ed:d9:9a:26:
                    6f:7a:4a:03:e0:f3:da:d9:c6:60:9a:e2:34:e0:79:
                    17:19:8d:f0:f9:f3:64:d3:0d:95:c9:0b:8b:a2:d2:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:CD:DE:15:DA:AC:53:35:3E:69:BD:08:98:B9:27:28:8A:D9:E1
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:57:8f:a3:9f:1a:50:64:11:59:47:ea:99:ce:17:cd:cb:
         8e:0f:71:fa:5b:89:2c:46:44:a6:fb:6b:e9:5d:37:34:a0:f2:
         37:29:6f:4d:c3:7c:f0:bc:48:46:72:4d:a4:c7:6e:c2:ec:9c:
         92:e8:5c:f6:25:1d:8f:4a:e6:74:47:57:c0:be:dd:3e:0b:65:
         c9:20:b7:dc:b1:22:f2:2d:00:26:b6:12:e8:6c:75:df:08:24:
         a4:64:74:51:b2:33:f7:39:a6:34:17:a4:bf:f3:7b:f7:2c:6a:
         f3:75:3f:8e:90:f1:f7:92:57:9d:b4:a3:82:2e:3b:bb:f8:18:
         46:10:5d:06:25:98:73:b8:92:55:a3:19:3d:65:dd:cf:52:72:
         ba:bc:45:5d:66:4a:cc:39:8a:21:4b:85:46:a3:3c:ef:9a:3c:
         af:4a:d2:43:24:aa:25:9e:cf:15:3c:6b:16:1d:c2:15:03:67:
         fd:7a:b1:cb:f7:0c:16:58:3b:e6:36:15:58:16:f3:02:18:da:
         49:8c:40:52:d4:e9:9a:d6:f5:78:da:e4:40:b1:ed:7b:70:bf:
         d8:ca:da:33:89:16:bd:ef:24:3a:df:7e:16:a3:4b:52:48:58:
         60:59:dd:5a:6a:b9:72:7f:3b:29:75:88:67:19:cd:6e:56:44:
         73:7f:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:38 2026 by rpki-client