Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File:                     NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier:          WsOwBiEkO0UYz7lFmfmJo7C7CAgTaS2PIepavN3iTf4=
Subject key identifier:   E0:24:E8:F1:97:0F:69:B3:FA:77:8A:41:E1:8C:E9:FF:33:9B:A5:0A
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer:       /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial:       019EA977D57B5A39BB960B803395DC9DB46E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number:          18E1
Signing time:             Mon 08 Jun 2026 23:01:03 +0000
Manifest this update:     Mon 08 Jun 2026 23:01:03 +0000
Manifest next update:     Tue 09 Jun 2026 23:01:03 +0000
Files and hashes:         1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: qoQpHh1yHHyybdmgqyGOMN5ELZfzksTv4XhwrnvYQbs=)
                          2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a9:77:d5:7b:5a:39:bb:96:0b:80:33:95:dc:9d:b4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
        Validity
            Not Before: Jun  8 23:01:03 2026 GMT
            Not After : Jun  9 23:01:03 2026 GMT
        Subject: CN=e024e8f1970f69b3fa778a41e18ce9ff339ba50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:33:cc:d1:34:85:b3:26:00:a9:ad:c6:c7:
                    6c:c9:25:31:92:14:cb:90:a4:70:3f:89:63:10:24:
                    6a:8f:3e:a5:52:4a:df:0f:f7:91:57:7f:d4:fa:c8:
                    43:aa:5a:55:b2:30:d7:f0:46:a9:60:c5:04:e9:5f:
                    bc:0f:1d:f0:29:d7:af:42:8e:96:30:51:cd:c3:d0:
                    c5:ed:f8:5e:61:2d:28:a3:58:14:9a:77:b4:97:5f:
                    a1:12:08:dc:f6:18:b5:ad:2b:b2:65:16:d8:6c:fa:
                    9c:73:20:b2:56:3d:36:06:ae:74:a7:57:aa:f3:7a:
                    cf:35:8d:58:1e:f0:1b:4d:38:fc:97:04:26:ed:f9:
                    61:c7:ee:6c:75:98:65:c8:6a:e6:13:67:70:ff:f5:
                    8d:80:0c:45:69:8f:24:70:f0:29:88:22:be:bd:26:
                    a9:eb:78:68:bc:73:22:ca:dd:ae:c2:97:a9:b7:df:
                    26:f0:41:cd:fd:cf:c1:8e:e9:1c:9d:8a:0a:02:ef:
                    51:27:24:67:b7:b6:02:1e:d9:58:62:59:6d:69:f2:
                    c6:91:f5:a1:0f:7b:41:2c:4a:79:8f:26:c5:39:4f:
                    1e:f5:bc:20:70:e1:de:dc:2c:e9:76:49:8f:fc:ed:
                    94:d3:b4:fc:6e:43:b4:01:6d:a5:51:7c:50:d9:f0:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:24:E8:F1:97:0F:69:B3:FA:77:8A:41:E1:8C:E9:FF:33:9B:A5:0A
            X509v3 Authority Key Identifier:
                keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:65:eb:7b:d5:0f:ab:fe:39:44:07:f8:e2:ff:1a:c1:1b:ed:
         d6:25:f1:81:5a:e3:ae:12:70:00:c1:aa:cb:42:f8:f2:49:00:
         6e:38:83:b8:d9:31:5b:dd:0c:3b:57:64:6a:bf:c4:e2:0d:56:
         29:6a:83:ec:72:f2:39:72:b2:38:96:ec:dd:1d:a5:ef:89:a6:
         96:bc:7f:f7:71:10:ac:ba:12:cf:15:f1:ad:ba:a5:67:29:41:
         0e:a1:ad:8d:04:4b:0d:d2:c3:2f:ec:cd:96:f9:c7:c4:a9:a1:
         e9:69:2c:0c:a7:dd:37:b0:3c:b7:28:26:b1:37:a2:f0:c4:ae:
         f4:d8:ae:a8:21:9f:97:04:f9:e2:48:1e:09:78:9d:8f:70:cb:
         28:37:ee:2b:43:ce:0f:5f:fc:1b:8f:ab:32:94:27:64:fb:89:
         f9:86:ac:1f:b4:9e:bc:e3:ae:68:1d:91:eb:9f:d3:cd:16:af:
         05:63:ac:2f:1c:1d:eb:ce:04:09:e5:83:41:f4:97:18:f6:13:
         34:46:9d:80:26:02:7d:e0:1d:95:04:e8:62:8f:f2:25:34:6f:
         f4:3d:63:6e:12:2b:8b:e0:2e:9a:b6:7f:a0:c9:ae:bd:e4:7b:
         92:5e:57:63:08:41:81:2b:91:f9:6a:89:ff:36:95:f5:fe:4f:
         7c:b9:40:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:26:15 2026 by rpki-client