Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          9xCAW5GlVb1QvdsPemPdBDVfRf4xbl3SOyFJagKi/wE=
Subject key identifier:   55:DA:07:BE:BA:68:59:28:11:44:FF:AE:BD:24:E3:6B:C2:79:F6:80
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       019F13AEFCDCA1C8BA44BC7712A28349ED8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          18EF
Signing time:             Mon 29 Jun 2026 14:01:02 +0000
Manifest this update:     Mon 29 Jun 2026 14:01:02 +0000
Manifest next update:     Tue 30 Jun 2026 14:01:02 +0000
Files and hashes:         1: 4dIwW5at7FQWoB7Bcz_6uYRfLtw.roa (hash: mQop19T4ncECxQq+Z6Yf4kaQ7YiJVsFd1/CEXYQ60hs=)
                          2: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (hash: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w=)
                          3: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (hash: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4=)
                          4: egNs0fvR0rvTeNy38L9Ly5HNBxw.roa (hash: n+9hTIbfmjtYB8IlfS0V4nQrh2GVHp+ZwL3oJyr2kwA=)
                          5: gDfDao3a0Zdg1NjYg2DDNUy1-zY.roa (hash: 43Y4/29GJlvHmdmct51Gv0aODZGLSjRagV2dnZcmslU=)
                          6: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: ehyu2jFst5VtEWMFMnsGbkzthghVHpYMDjqc7tBJ6KY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:ae:fc:dc:a1:c8:ba:44:bc:77:12:a2:83:49:ed:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Jun 29 14:01:02 2026 GMT
            Not After : Jun 30 14:01:02 2026 GMT
        Subject: CN=55da07beba6859281144ffaebd24e36bc279f680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:4f:9c:d1:37:09:df:aa:0a:ce:92:56:64:
                    e6:b4:09:cf:ae:a6:64:59:3c:bf:71:44:0b:29:fe:
                    57:6a:43:c1:05:ce:d7:7a:5e:28:32:75:d6:76:b8:
                    a6:7e:e0:02:dc:95:4d:85:37:06:01:90:a2:70:a6:
                    28:4f:d4:d6:58:0d:74:51:06:1f:8a:61:16:c4:ef:
                    55:6c:85:bd:b8:8f:ab:11:12:d8:0a:25:a1:be:99:
                    60:d6:5e:4b:a1:ad:49:85:31:57:bb:25:6f:ac:08:
                    ec:58:61:f6:72:53:f8:11:1a:d7:9b:06:9a:05:cb:
                    1a:50:5d:b1:b8:60:17:08:ee:4e:2b:a0:ed:86:93:
                    9c:01:92:77:ba:65:ca:0b:63:27:c6:1e:d2:3e:14:
                    de:75:6e:2a:eb:f1:f6:66:4b:dc:80:ba:0e:25:95:
                    2e:79:72:22:ac:c8:5b:c5:d1:33:95:7e:27:9a:c3:
                    6c:29:9f:ed:80:4b:4f:c2:18:47:c6:2d:de:36:59:
                    13:a4:35:46:0b:05:99:34:08:21:ec:8f:c6:86:27:
                    17:6f:14:a7:dc:54:8e:89:0b:e5:c9:2c:b2:d3:9e:
                    da:3d:fa:02:a6:6d:9b:2e:57:d4:fd:00:e2:74:72:
                    59:d0:86:6e:4e:5f:6f:71:38:ff:d6:0d:9e:40:c4:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:07:BE:BA:68:59:28:11:44:FF:AE:BD:24:E3:6B:C2:79:F6:80
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:19:b1:ba:ab:53:6b:77:2e:15:a8:86:0b:16:da:e0:28:33:
         57:67:64:32:01:b2:0e:05:52:45:9a:41:50:15:86:96:fe:26:
         3c:b2:e6:4c:15:36:72:fe:d3:c6:5a:8b:f0:40:3d:a0:eb:b5:
         19:4d:7f:b8:d4:15:94:cd:4e:f4:70:fd:67:8c:0e:88:1f:51:
         05:f2:93:d6:60:1a:d2:d1:36:cc:7d:b2:c2:58:23:3e:14:ec:
         94:dc:de:a7:cb:f6:e1:63:a4:31:85:5a:81:75:59:4d:cf:ae:
         1e:92:a5:e9:4b:50:c0:e6:36:af:ed:9e:1e:92:8d:38:ae:d9:
         f4:74:b5:17:26:af:c4:a5:52:01:22:07:24:a7:5f:08:7f:9d:
         42:a2:9a:7e:70:9c:a7:be:fa:fe:b9:05:b2:ed:6d:80:cc:4c:
         d9:a6:c8:87:d7:e6:9c:04:4f:08:d2:3e:49:61:d1:d0:bd:65:
         cd:f2:d0:1e:f5:77:e8:1b:a0:7b:3c:04:1f:79:08:41:54:3d:
         30:64:4e:3d:f0:4d:80:17:57:6c:f9:19:f7:73:23:58:c7:b2:
         a1:af:66:78:ca:48:9e:82:df:d3:23:d9:0b:e5:b6:56:8e:dd:
         27:c7:9e:1c:66:a5:46:ce:e3:2a:79:a2:63:9c:8d:70:14:ce:
         d2:29:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:32:13 2026 by rpki-client