Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File:                     IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier:          TiW9cBzguFfPscgoTP2LA35uEen1R+e93l+0NWPMrzM=
Subject key identifier:   32:69:7B:2E:F1:C7:FD:8F:84:81:F2:9A:5C:42:D3:A9:AE:1D:CA:E3
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer:       /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial:       019E3F7825E7B3EEBC40EC6330696F8B22B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number:          18A0
Signing time:             Tue 19 May 2026 09:01:39 +0000
Manifest this update:     Tue 19 May 2026 09:01:39 +0000
Manifest next update:     Wed 20 May 2026 09:01:39 +0000
Files and hashes:         1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: wfMUlViAcTdGYivu1+d1xklnhoxdoUAw5wRm6wdHbeU=)
                          2: huWAMVD5OszFJjEyZMJGyZnVtD8.roa (hash: GrjeMdAe8buThfTaZfxv43GTKukIwEfBZ4IJ+OfmdQY=)
                          3: tHyYlmCt8b_w6qmDnfmJNsi4fgg.roa (hash: kaLv44KKvA/h97d8YwPeGLLWQK0x8whGbJscB5eOBiw=)
                          4: vHIrFpXjJbBEQLCFk5449-qqOs0.roa (hash: fu+mos6wV/3DS80C/FDLDSbQMT9S0fJqCvMfKTRbzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 07:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3f:78:25:e7:b3:ee:bc:40:ec:63:30:69:6f:8b:22:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
        Validity
            Not Before: May 19 09:01:39 2026 GMT
            Not After : May 20 09:01:39 2026 GMT
        Subject: CN=32697b2ef1c7fd8f8481f29a5c42d3a9ae1dcae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:2a:40:6f:65:84:2a:21:02:34:35:dd:ce:
                    a4:12:16:b2:56:ff:c9:c6:a3:9c:78:82:22:0d:12:
                    a7:c9:b9:fc:20:82:59:00:4a:f0:82:db:32:dd:28:
                    46:4a:dd:93:b9:98:f1:85:31:d7:87:7d:3b:ab:ab:
                    3d:cc:14:a4:eb:53:b6:87:b1:08:21:60:ed:12:65:
                    be:de:c8:af:b5:ea:40:5e:42:80:cc:d7:37:3d:59:
                    57:55:42:72:73:e1:f4:77:05:5d:ca:74:a9:8c:7f:
                    2c:96:25:57:2d:e7:39:69:92:75:35:43:5c:c5:d9:
                    66:56:9b:fe:cc:02:30:da:6d:35:bb:88:9f:67:1c:
                    1c:cf:15:6f:8f:be:13:71:b9:d3:44:6c:4b:5d:25:
                    fe:ad:9b:f3:7c:82:a1:d1:cb:18:0b:20:8d:cc:13:
                    14:33:84:06:b3:bd:69:73:a2:63:99:b0:cd:b8:c1:
                    6b:d1:29:85:e0:ec:ae:f1:26:a2:0a:92:ed:51:ea:
                    83:f7:fd:2c:92:e0:82:d3:3e:3e:13:36:1b:75:63:
                    df:a5:4a:c4:55:86:53:6e:8c:7f:37:84:ef:9a:23:
                    c8:45:e3:42:17:b2:03:f5:68:0f:b1:54:d9:6e:ce:
                    62:ec:02:51:1a:75:5d:9c:7c:43:bf:4d:64:99:e6:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:7B:2E:F1:C7:FD:8F:84:81:F2:9A:5C:42:D3:A9:AE:1D:CA:E3
            X509v3 Authority Key Identifier:
                keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:cd:cc:34:41:fb:66:7b:e4:2e:4e:26:d5:2d:ff:03:ef:
         de:ef:0f:0e:4f:45:cb:69:a9:c4:6d:b8:5d:ec:67:91:b6:6a:
         8d:1e:5d:9f:6f:86:63:52:10:0a:98:1a:01:1b:da:16:3a:20:
         6a:1d:8b:a7:30:32:4b:53:ed:84:21:a2:0b:df:2c:b0:81:0f:
         95:da:06:72:19:c6:df:94:4e:99:05:84:34:f0:05:83:69:67:
         68:f5:df:51:a4:09:b2:41:1a:17:bd:48:41:e9:cf:5a:04:18:
         8b:cb:26:33:e0:b4:09:6c:9f:91:57:1f:ab:f9:c7:b9:da:c0:
         d6:e4:b7:ba:9a:e4:0d:ff:62:16:16:af:d9:86:74:9f:ff:cc:
         d4:90:45:13:73:8f:53:85:2e:44:78:82:b3:57:ea:d9:57:30:
         24:f6:80:38:fb:ef:c0:18:2c:99:dc:30:69:5e:06:bb:e9:cc:
         77:ac:be:e6:eb:e4:3d:49:e2:5c:c4:d4:9c:4a:57:51:05:43:
         81:83:77:19:c8:f2:e9:9f:80:8e:da:13:7b:80:68:1e:f3:f6:
         85:d7:c3:b0:b6:05:b2:e4:76:e5:bf:e4:1e:b1:84:2b:8f:36:
         66:0a:fa:2a:c7:0e:87:da:12:bd:34:76:16:d5:4b:ea:f2:1b:
         20:a8:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:44:30 2026 by rpki-client