Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          0ilBHkgCjC0xFMud20+6zwtIMCTM0HfK/kx8m0PoU9o=
Subject key identifier:   1D:E5:C9:C8:AC:C4:4E:4D:5D:C3:0D:53:DC:94:E8:49:92:30:78:9C
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       019E30732AC7FCCDE0D2B74AB77AD3599982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          18A1
Signing time:             Sat 16 May 2026 11:01:54 +0000
Manifest this update:     Sat 16 May 2026 11:01:54 +0000
Manifest next update:     Sun 17 May 2026 11:01:54 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: EieQKRbUUC+bbTCkZpxspZUDV2OnqeW/LYl+IU1/RaQ=)
                          2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:2a:c7:fc:cd:e0:d2:b7:4a:b7:7a:d3:59:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: May 16 11:01:54 2026 GMT
            Not After : May 17 11:01:54 2026 GMT
        Subject: CN=1de5c9c8acc44e4d5dc30d53dc94e8499230789c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:0c:bc:e6:fa:10:57:c3:67:76:7e:17:a3:
                    e2:60:3d:02:d3:bd:39:3b:15:b0:b4:ae:e9:cb:09:
                    b2:c3:86:fa:97:93:6e:ba:df:60:b3:5d:4b:65:20:
                    3f:e1:c1:20:79:3b:ab:12:09:79:8a:a6:57:32:9a:
                    07:de:67:70:fb:18:16:84:f4:23:fa:c7:91:6c:11:
                    a6:84:ff:8a:f6:59:63:c2:19:b0:c3:50:33:7b:8d:
                    7d:f1:d7:5f:de:67:8f:78:0d:bd:e5:a7:e0:b9:47:
                    3b:90:0a:59:68:bd:35:c8:a2:0e:5c:a5:42:34:3b:
                    f4:00:37:d7:ec:df:e9:8f:df:40:bc:6f:92:57:de:
                    9a:62:38:8d:ae:5c:6c:22:63:d1:f7:f1:a5:a3:df:
                    5c:cd:e1:af:11:c2:7c:c8:50:0b:7a:88:de:bd:56:
                    13:0c:93:40:c6:64:37:09:de:b7:fc:56:c3:b8:31:
                    71:a3:7b:05:4d:0b:3b:d7:7b:0f:ea:e3:10:63:a5:
                    ca:1d:ce:b8:bd:f4:d3:f2:98:5a:f4:a4:4e:59:71:
                    87:a6:25:88:9c:19:5e:c2:74:3a:dd:ac:2e:c2:53:
                    ce:d5:97:8b:ac:39:f8:37:12:d0:54:71:9c:98:ab:
                    17:8c:7e:1c:8a:15:1d:18:35:2b:57:11:eb:40:4a:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:C9:C8:AC:C4:4E:4D:5D:C3:0D:53:DC:94:E8:49:92:30:78:9C
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:5b:fb:b4:c1:59:20:48:a4:06:85:b1:ce:d0:d9:ce:86:
         c5:1b:f2:25:6a:22:0c:55:9b:4a:8e:bb:4c:50:2b:07:3a:34:
         be:48:3a:99:f3:e4:0d:4d:93:37:63:65:e0:7d:fb:ad:7d:b0:
         da:30:93:d0:53:e3:9d:32:70:25:b4:3b:15:94:1f:38:05:a5:
         52:a3:2a:fb:44:8e:56:dd:55:3d:80:c3:16:3f:b6:70:7c:d5:
         75:c9:2c:5b:e8:eb:3e:fb:da:b8:20:36:bd:7d:ee:2f:9d:7d:
         02:52:1e:e4:05:ef:ed:8b:f1:9f:ea:8e:a9:59:fe:45:6a:9b:
         ad:2c:fe:a9:8b:9f:4e:aa:97:88:5d:13:8a:8b:13:be:01:90:
         31:5f:ce:28:09:e4:61:6e:5e:51:98:aa:02:cf:66:4f:2d:bd:
         07:4a:42:ac:ff:ec:f5:4e:11:2b:aa:1e:fe:4b:3f:df:08:83:
         3b:fa:cd:07:06:f3:0b:ea:6e:dd:17:16:f8:3a:ad:d6:e5:ee:
         4d:ff:cc:b6:d9:4e:64:77:bb:7f:35:96:f5:af:e5:77:0a:f7:
         64:7c:6d:87:b2:37:d7:fd:7d:20:45:95:f9:d9:19:7a:52:8e:
         74:12:7d:d2:7c:59:a8:32:38:af:77:71:79:b8:32:b5:80:9e:
         10:61:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:05 2026 by rpki-client