Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File:                     PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier:          Mvre0KJ6nM37RJ+XsiCXwTw7fxMxce0UIcsbAjrlZs0=
Subject key identifier:   48:F4:DE:F9:B2:BD:C3:3C:5D:19:FF:D7:2E:B0:3E:6E:C8:1D:F6:F6
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer:       /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial:       019F19438DA20C230B504AE83950C719B3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number:          18E8
Signing time:             Tue 30 Jun 2026 16:01:25 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:25 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:25 +0000
Files and hashes:         1: 30JCy0OML-aej9HWtOYjdVh3Y58.roa (hash: hP6Mk/u93EteMPnPTXhr0EjSwhq+2k3+uAkB+TauqHk=)
                          2: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: rPIX+6MxwbfmSViNvLT5LBrYVlmNjL86qU+8gBx/jjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:8d:a2:0c:23:0b:50:4a:e8:39:50:c7:19:b3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
        Validity
            Not Before: Jun 30 16:01:25 2026 GMT
            Not After : Jul  1 16:01:25 2026 GMT
        Subject: CN=48f4def9b2bdc33c5d19ffd72eb03e6ec81df6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:ed:38:8c:f0:5c:6a:c3:21:2f:33:ad:57:
                    f4:fb:da:6c:9c:ff:21:16:2e:b8:57:ae:a7:19:ed:
                    81:ec:9c:aa:7c:ed:bc:b1:b8:25:92:12:6b:58:4b:
                    c3:17:22:6f:49:29:04:3f:04:7f:31:2b:b0:ad:cb:
                    40:d8:28:23:06:5f:b7:b3:dc:4d:e3:ed:cc:ea:da:
                    02:a6:61:cc:f9:b9:55:6c:59:7f:bf:0f:5e:d7:f4:
                    af:ad:b9:45:db:f3:22:cd:59:44:d8:0f:a1:49:53:
                    e3:b9:79:eb:39:d5:87:53:37:25:0c:26:51:d8:57:
                    16:0f:20:9c:c9:b8:7c:dc:f5:a0:74:d6:59:20:7a:
                    04:5e:b7:ef:28:0e:b2:92:7b:a9:6e:97:35:d4:20:
                    cd:96:af:01:d4:95:bb:48:92:1d:9e:14:f4:35:ba:
                    c3:ef:fc:ef:89:18:9f:9e:5f:1a:42:1b:98:fd:4d:
                    b1:c2:b0:88:03:aa:ce:3c:b0:d0:b8:4c:b7:db:18:
                    b1:37:16:54:09:e1:d5:23:03:40:b6:4b:87:f6:10:
                    a3:b9:8d:18:18:1e:60:ea:2d:fb:aa:8d:18:61:9d:
                    1b:ed:9f:51:0c:82:eb:a2:3c:97:f5:bc:7d:2c:e1:
                    8f:69:ac:20:0c:74:45:a2:78:5d:bd:63:6d:4f:44:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F4:DE:F9:B2:BD:C3:3C:5D:19:FF:D7:2E:B0:3E:6E:C8:1D:F6:F6
            X509v3 Authority Key Identifier:
                keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:0d:ac:e1:a5:87:bb:87:2a:23:ac:38:b4:36:a0:6f:a8:
         35:99:25:b3:5c:8e:7e:cd:20:ec:22:4f:5c:d5:55:e9:33:01:
         ec:b1:9a:9f:93:ff:1f:fe:47:fc:5e:12:fe:07:e6:c2:e3:97:
         2f:f9:f9:14:c8:a6:e6:7f:61:cf:d5:ee:69:cf:a4:5a:33:aa:
         8d:b0:44:7f:b3:c9:98:80:7e:de:12:65:c6:fc:b2:e7:22:d9:
         4c:8d:30:ac:df:dc:f1:1f:f1:16:f1:82:7b:24:c5:a2:e7:22:
         6c:2d:1d:b7:e1:ee:60:ad:2c:88:58:e0:84:c6:14:68:9e:b0:
         7e:6f:20:98:15:26:99:17:2c:1d:e5:51:2a:51:d3:ad:77:e8:
         47:02:10:f5:91:b7:b8:f8:0b:b2:4a:e2:7d:ed:e3:25:0d:3a:
         bd:74:7c:5d:19:fc:4a:26:78:97:7f:2c:f5:f5:c2:e4:22:ed:
         b0:91:38:c9:c0:bb:fb:d6:b2:be:d1:23:71:8c:47:ac:36:c6:
         33:54:f8:b9:1f:44:06:ef:e5:8c:b5:65:51:2f:ab:c9:16:78:
         f5:94:47:fa:0c:13:db:7b:f7:c9:e1:70:c9:a5:41:33:67:7b:
         61:4f:7d:5f:f8:11:53:d4:b2:e3:5d:60:e2:89:94:dd:4c:02:
         b0:04:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:36 2026 by rpki-client