Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File:                     xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier:          dj3N7oU37ZTldoNSrUKhT/lkWWFVQ9jb058RYrbrOgA=
Subject key identifier:   75:B4:25:9D:57:2D:B3:AF:7F:CD:3D:7D:A9:B3:B6:50:79:B1:23:D4
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer:       /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial:       019EDCC04393748811060A94FA1AC60A432A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number:          18FC
Signing time:             Thu 18 Jun 2026 22:00:48 +0000
Manifest this update:     Thu 18 Jun 2026 22:00:48 +0000
Manifest next update:     Fri 19 Jun 2026 22:00:48 +0000
Files and hashes:         1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
                          2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 8g/IW2HRm4eQGZ9t0LiiKW7dCrVqT7uywWMoQbiyRm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:c0:43:93:74:88:11:06:0a:94:fa:1a:c6:0a:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
        Validity
            Not Before: Jun 18 22:00:48 2026 GMT
            Not After : Jun 19 22:00:48 2026 GMT
        Subject: CN=75b4259d572db3af7fcd3d7da9b3b65079b123d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:94:3e:b0:10:5d:c0:c9:93:63:bf:51:88:
                    1d:50:e8:75:ce:b1:d6:a8:ae:5e:4e:01:ba:b5:5e:
                    99:4d:93:b0:07:fa:43:9c:f6:ce:9f:50:a0:df:5c:
                    75:1d:27:0d:23:67:e8:89:54:ad:a3:1b:c8:02:8b:
                    5b:14:89:72:c1:61:a7:c3:83:de:be:5e:52:cf:f4:
                    4f:94:1e:dc:db:66:ed:66:2e:7c:39:be:bf:53:99:
                    2c:88:a8:53:b9:90:a1:e1:b6:10:68:9e:56:ee:6f:
                    e1:fc:38:11:d8:f3:32:93:66:57:cd:ed:48:f6:80:
                    9b:0e:3a:36:de:c1:cb:db:87:ab:d3:3c:28:64:2a:
                    64:48:09:8c:e0:f3:44:d0:d0:6e:9f:31:a3:a4:77:
                    7b:7e:fa:d8:c3:f5:9a:80:82:33:67:d7:a1:78:cf:
                    53:a5:0c:9b:83:26:5f:69:bb:73:67:ad:0e:24:cf:
                    2a:88:e0:32:81:25:54:da:90:d7:3b:c7:58:c8:80:
                    94:78:00:db:a5:72:db:db:1d:83:c7:8e:92:10:14:
                    a0:49:c9:e6:d4:54:4a:63:e0:b2:ea:b9:d3:b3:d0:
                    48:ff:b4:54:5e:00:67:d1:1f:22:75:e2:58:00:c4:
                    bd:bb:65:32:ca:31:bf:64:c3:a6:20:99:96:9b:d5:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:25:9D:57:2D:B3:AF:7F:CD:3D:7D:A9:B3:B6:50:79:B1:23:D4
            X509v3 Authority Key Identifier:
                keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:f2:cf:b6:36:54:43:3a:9a:ae:49:d7:50:4a:34:4a:bc:
         53:36:29:b6:dc:45:f7:f3:6b:35:27:44:16:10:c9:1e:65:67:
         eb:ae:49:c4:98:03:80:fd:61:81:11:69:7b:6c:13:93:da:ab:
         1d:08:27:47:60:f6:a6:e3:e5:d0:8f:90:bd:2f:2f:09:06:c0:
         e3:5c:52:d6:c5:a8:d8:a4:e0:e6:cb:b7:4d:e4:01:cd:23:58:
         d6:66:eb:88:0a:71:fc:71:22:d0:e7:3d:b7:80:8c:34:00:6a:
         95:52:65:87:a5:70:fa:87:c0:d9:6e:2d:b3:76:56:ec:fd:39:
         2f:51:0f:2e:68:61:d5:3b:db:85:9a:01:bf:e4:af:4b:ea:e1:
         c7:0a:38:f6:93:95:40:8b:cf:77:67:05:66:fe:5c:cc:fe:dc:
         07:fe:11:83:27:50:0e:ab:d6:8e:80:06:96:e1:d8:a2:61:bc:
         e3:d7:bf:7f:b4:6c:0f:41:a4:10:77:1f:88:1b:9d:51:68:c3:
         c3:ba:9e:20:e6:03:b3:ad:48:4c:2d:f4:cf:f8:1f:e3:4c:b0:
         08:3b:c5:0a:4a:c4:71:88:f3:26:66:9a:34:d2:5a:58:74:c4:
         82:85:76:65:c9:90:d1:e5:03:6c:a5:f3:c7:1f:47:0f:0d:88:
         69:2b:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:29:52 2026 by rpki-client