Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File:                     24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier:          PpyPsdp4DHqd75PCXAX0K4RKhDOutWt7F7J00o5dkz8=
Subject key identifier:   38:C0:B3:0B:6D:44:39:23:B4:4C:B5:C2:08:03:A0:A8:17:83:66:E6
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer:       /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial:       019F190CE189933262A62B2F914B0019B8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number:          18B8
Signing time:             Tue 30 Jun 2026 15:01:42 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:42 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:42 +0000
Files and hashes:         1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: iEmlbOr0APbcq+BAaTjMSYmRsituGgM/cFUi3asXo2Q=)
                          2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e1:89:93:32:62:a6:2b:2f:91:4b:00:19:b8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
        Validity
            Not Before: Jun 30 15:01:42 2026 GMT
            Not After : Jul  1 15:01:42 2026 GMT
        Subject: CN=38c0b30b6d443923b44cb5c20803a0a8178366e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:7a:40:c4:12:3e:6b:ad:28:db:a6:82:af:
                    c6:f5:4b:ea:a5:0f:3a:83:98:87:ae:d0:16:b1:47:
                    8d:24:cb:96:2f:a5:f6:a2:4b:25:9e:c8:4b:84:81:
                    d2:23:69:cf:62:ec:05:31:36:6b:4e:6c:91:da:3b:
                    9d:e9:d6:e9:ce:e2:be:25:65:fc:1b:e5:a1:1e:ba:
                    fd:63:a7:6d:59:00:69:11:8e:44:2b:29:f0:1f:e9:
                    3b:16:fe:16:e9:dd:00:39:84:f8:fe:e5:11:68:4d:
                    c3:1b:05:62:b2:03:3c:cd:bb:c0:31:98:c9:de:9d:
                    ca:d5:02:d6:e4:f2:3c:fb:f0:a8:fc:db:da:1d:92:
                    9f:89:f9:6c:6d:96:23:d1:8a:34:af:69:f6:93:6d:
                    d9:32:e9:1f:57:32:b0:4f:36:8b:d4:a2:dd:11:15:
                    1b:6f:39:06:e7:98:22:ab:08:ed:77:78:4a:85:66:
                    f1:84:9d:96:39:f8:ee:82:06:a3:91:4f:cc:6e:10:
                    a7:0b:0b:a3:18:50:73:84:74:b0:82:55:14:54:43:
                    9c:16:47:46:97:b2:26:52:46:3e:15:bf:3e:bd:57:
                    34:98:09:c6:1a:d7:76:b8:a1:0f:49:9e:33:87:96:
                    5d:dc:23:d5:d7:d5:34:7a:b1:d9:63:b5:50:ab:50:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:B3:0B:6D:44:39:23:B4:4C:B5:C2:08:03:A0:A8:17:83:66:E6
            X509v3 Authority Key Identifier:
                keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:5a:43:75:cf:a8:fc:f3:cb:51:74:9d:ad:bb:2a:b8:ae:
         6c:fb:a0:f0:aa:b6:e0:7d:5e:1d:e9:22:b6:dc:e8:2a:0d:ec:
         60:95:64:21:69:d2:2b:ac:23:2e:15:76:58:62:f1:c8:15:42:
         9e:35:15:ac:c0:78:53:4f:a3:92:8f:0c:a8:6f:85:69:29:c6:
         a5:f4:6a:48:d8:f4:9d:e6:b8:8a:82:7f:f6:30:6c:19:92:55:
         5e:5c:d3:b7:92:6d:0b:0b:ce:1d:88:72:22:19:61:36:6c:d4:
         96:c0:a7:93:a5:d1:e1:9d:ed:26:45:58:87:a7:f5:c1:2e:7c:
         2d:72:6b:da:b3:18:98:64:d0:b6:43:34:41:47:f0:cf:22:c2:
         01:40:a9:3d:62:88:f7:fc:34:77:f5:8b:9d:09:32:86:7f:80:
         0d:66:44:b4:90:99:56:ec:15:fa:6d:8f:b3:9e:63:67:e3:da:
         80:5f:b7:16:3c:52:61:be:80:a9:fa:f8:03:0b:5d:5f:a6:f5:
         94:78:62:ae:08:68:f2:bc:a5:33:27:4b:53:ed:4d:36:76:d3:
         10:aa:b6:14:05:4b:e5:62:9b:16:25:a5:93:df:a3:34:06:8c:
         30:58:b5:2e:fb:5d:c2:06:2a:59:f3:c5:c7:20:53:d2:19:df:
         6e:07:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:44 2026 by rpki-client