Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File:                     tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier:          +C3zwzeeLFvUyTw7s9n4qOL2rdRecubQl8I5f+bMULY=
Subject key identifier:   6A:27:10:B9:B7:E4:84:91:D2:02:3A:12:84:DA:4E:4D:66:DB:D4:CE
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer:       /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial:       019E31853CD486C4FA9F49B238297F680065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number:          18A2
Signing time:             Sat 16 May 2026 16:01:15 +0000
Manifest this update:     Sat 16 May 2026 16:01:15 +0000
Manifest next update:     Sun 17 May 2026 16:01:15 +0000
Files and hashes:         1: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: StR48pepUe9DkhZD1wxZBem4aLaQlWa3rZFzbbDrGj0=)
                          2: wFX4ltKD_gZlOj3Qf_Lnn0NhN4U.roa (hash: pjVKRqlOO9z+7mcPGp3goRgbyLNPwv20Ps3g73hf4MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:3c:d4:86:c4:fa:9f:49:b2:38:29:7f:68:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
        Validity
            Not Before: May 16 16:01:15 2026 GMT
            Not After : May 17 16:01:15 2026 GMT
        Subject: CN=6a2710b9b7e48491d2023a1284da4e4d66dbd4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:cb:7e:f0:e1:b3:b6:bc:2b:0b:79:95:85:
                    69:bb:5b:ed:d0:c1:8d:d6:29:bf:d9:64:cd:c3:42:
                    6f:fc:3f:ff:18:a2:f8:69:82:4c:72:6f:af:2b:5d:
                    54:7b:7c:69:2f:03:10:49:03:29:ba:38:8d:e5:ba:
                    05:78:f1:54:a7:25:c6:c8:d8:82:02:d5:f8:f0:51:
                    8b:a3:c0:9e:43:f4:8e:64:3f:54:f7:2a:ad:62:b0:
                    2b:10:11:5c:cb:25:3d:82:0c:3d:c8:75:ba:72:21:
                    04:0a:88:7f:8c:19:f7:62:74:18:86:da:e4:b7:7f:
                    32:40:79:de:65:27:fb:bf:49:55:e8:98:5c:f6:61:
                    f3:ca:78:d8:dc:0a:36:f2:aa:b4:03:c8:1e:cc:9d:
                    d2:10:80:ee:fa:ad:70:84:66:a9:31:13:af:5e:12:
                    de:03:02:21:1b:c3:5e:f4:18:4c:f9:6e:80:c8:cc:
                    91:62:80:2c:b2:0a:bf:07:f0:ed:e2:2a:ac:6c:30:
                    00:4e:34:6b:4d:5b:cb:99:aa:97:bb:fa:91:44:b0:
                    75:71:fd:94:66:4a:c4:c7:55:63:ad:d1:2e:ce:a6:
                    f5:36:2c:5b:a5:c4:8a:a5:8e:d6:d1:e2:6f:00:cb:
                    09:93:e8:fd:28:76:72:1b:6b:0b:72:2e:e3:7d:84:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:10:B9:B7:E4:84:91:D2:02:3A:12:84:DA:4E:4D:66:DB:D4:CE
            X509v3 Authority Key Identifier:
                keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:32:28:29:fc:48:ae:87:00:21:b0:4a:5a:25:1e:61:e8:
         2f:15:60:5c:1c:51:12:01:62:2c:9c:26:e9:a7:bf:30:46:1d:
         a0:79:8f:dd:eb:ec:bd:e7:ea:a7:38:ee:7a:a8:41:81:76:c1:
         2b:ad:f0:f0:e6:c3:cd:45:7f:d8:3f:b4:45:05:d6:e0:d8:f0:
         6a:be:c6:a8:e3:56:ea:1c:b5:db:50:9c:91:b3:5e:39:c2:fe:
         59:26:3c:6d:c5:28:b4:a1:04:08:2e:cd:db:7e:7b:90:59:2a:
         32:40:26:49:08:04:02:62:74:a0:3a:d8:bd:d6:93:36:07:a9:
         16:92:e8:c3:3b:34:ad:3a:83:9e:5d:1a:22:9a:02:20:ba:34:
         6c:38:25:65:65:f5:a3:a1:e6:5e:ed:aa:47:f9:06:2d:c1:55:
         c2:e6:39:36:dd:e2:6b:26:a4:2c:19:96:86:c6:ce:00:9d:be:
         bb:e6:3b:d6:ed:b2:ee:4c:ed:22:1f:79:ae:6e:a9:45:df:2e:
         f1:02:76:3b:0d:9f:ad:1f:8d:6b:70:3a:df:18:ce:65:2b:03:
         ff:90:e1:f0:95:e2:5e:ca:e4:d7:89:77:c6:20:84:c8:42:d2:
         bc:bf:b0:d5:65:19:66:1f:7e:7d:9e:e7:20:c8:ef:e6:8b:40:
         12:e3:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:07:35 2026 by rpki-client