Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File:                     67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier:          fRgqUSP8Hlq6c7VJqTWH1tSUQUP3Uook8EOpqPUt4Z4=
Subject key identifier:   18:19:1C:8B:46:05:A6:5E:64:C5:31:C7:DF:73:F4:7B:84:AC:58:6C
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer:       /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial:       019EB5B2C004B62E052DC918FC0EC6E2F4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number:          0479
Signing time:             Thu 11 Jun 2026 08:00:51 +0000
Manifest this update:     Thu 11 Jun 2026 08:00:51 +0000
Manifest next update:     Fri 12 Jun 2026 08:00:51 +0000
Files and hashes:         1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: aa6CsmaXVRDp9nJI7UT9mrD6qkrgVt7FIbgMyiZDJ98=)
                          2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b2:c0:04:b6:2e:05:2d:c9:18:fc:0e:c6:e2:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
        Validity
            Not Before: Jun 11 08:00:51 2026 GMT
            Not After : Jun 12 08:00:51 2026 GMT
        Subject: CN=18191c8b4605a65e64c531c7df73f47b84ac586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:96:78:2a:86:c0:df:dd:e8:79:6a:4d:60:
                    84:0f:ff:c3:14:31:3d:d7:bf:ee:b0:91:4d:28:22:
                    cf:e2:61:56:ad:6d:af:a7:ce:7a:29:cc:3f:a0:a6:
                    f8:31:34:cf:d5:c5:a3:c3:7a:8e:f0:44:fd:24:dc:
                    e8:a0:32:18:6c:48:93:36:5b:20:f9:fa:88:ce:66:
                    17:32:3a:b5:51:21:68:54:a1:a7:5b:6b:1a:cd:b8:
                    03:b6:ef:66:1e:f1:ba:16:9c:e5:cf:1a:f9:ef:a0:
                    57:cb:c6:40:32:75:ca:dd:b5:80:64:ac:36:a1:30:
                    bc:fa:05:f8:c9:99:88:76:2d:b8:86:ee:67:90:50:
                    8b:d1:25:a5:1b:1c:7e:23:35:1b:22:1f:5e:1b:f5:
                    7a:4f:04:cb:5d:53:a4:54:af:77:4f:55:f8:88:59:
                    75:8f:ad:62:de:ca:4f:dc:0f:db:d1:6c:b1:ad:93:
                    a0:27:8f:ab:f5:7f:18:97:f2:e3:28:95:8e:0e:79:
                    85:13:87:22:1c:b8:c5:61:c5:79:c6:b5:5b:84:2b:
                    7d:cd:e0:cc:ca:f3:ba:6d:9e:82:d8:48:43:4e:88:
                    62:b8:76:0e:5d:60:26:ed:01:b3:ae:61:e0:c1:41:
                    e3:6a:bd:a0:e0:3f:49:b3:ce:7b:82:00:5a:92:4e:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:1C:8B:46:05:A6:5E:64:C5:31:C7:DF:73:F4:7B:84:AC:58:6C
            X509v3 Authority Key Identifier:
                keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:03:12:dd:88:03:34:d8:a4:8d:56:65:62:9e:d6:1f:79:
         bb:c7:72:66:60:42:38:89:3a:a3:c4:3d:59:73:68:45:88:2e:
         cd:bc:2c:69:b0:f2:a2:3c:33:bf:ba:3d:ae:39:52:fc:6e:82:
         87:c7:84:f0:99:01:91:b7:1f:39:79:0d:c5:b1:51:52:19:6c:
         21:d5:ae:64:fb:9a:e3:e9:5f:6a:ff:78:3b:b1:21:e9:da:11:
         60:6b:6a:06:28:0e:e8:bd:2e:08:4d:97:ff:13:dd:b2:b9:0b:
         db:fa:18:a0:f0:c9:a1:38:8f:31:42:c4:f8:bf:73:71:40:f2:
         fb:93:8f:99:22:3e:f9:95:2e:7e:85:1c:5a:fb:d5:da:2b:9e:
         9e:13:3b:bd:a9:c4:c5:86:ee:7b:af:e4:65:a0:28:fb:50:be:
         c0:84:53:7a:89:43:64:24:3a:2f:12:72:72:44:83:7b:4f:ec:
         00:92:75:2a:a8:99:d3:96:01:34:7b:1f:45:c7:5a:ae:b9:56:
         da:7f:f4:42:ce:65:59:a8:83:6f:81:ba:cf:88:7d:63:d7:30:
         be:29:5d:87:48:4c:d1:af:50:ac:4f:8f:8e:e4:d3:55:40:61:
         8e:d5:55:78:b6:f2:4c:53:d7:1b:aa:54:57:59:fc:ec:ca:fb:
         54:58:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:44 2026 by rpki-client