Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File:                     0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier:          YzxTRbZSgruLSIyjhhiYqQFq8NZ2oVO5WU73wZggvYA=
Subject key identifier:   67:A2:66:14:BB:BD:FE:0F:21:02:14:44:2D:22:B1:8F:45:A2:6F:40
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer:       /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial:       019F18305935526A61250A15E27BD9708E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number:          1839
Signing time:             Tue 30 Jun 2026 11:00:49 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:49 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:49 +0000
Files and hashes:         1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: Mlv7iq6u2Xoayn07WcJAxsm5fCf/jyJNT1DPEr2Rz4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:59:35:52:6a:61:25:0a:15:e2:7b:d9:70:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
        Validity
            Not Before: Jun 30 11:00:49 2026 GMT
            Not After : Jul  1 11:00:49 2026 GMT
        Subject: CN=67a26614bbbdfe0f210214442d22b18f45a26f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:da:ae:31:63:da:22:69:85:24:f4:c8:58:
                    15:82:6f:f1:2b:00:b3:25:33:53:c1:0f:31:37:5e:
                    97:27:19:72:d6:bd:30:5f:13:45:5d:da:5a:6d:1c:
                    d7:5d:e7:a6:2b:93:ae:e9:2a:2d:72:a8:25:42:ab:
                    1e:77:cd:09:5b:12:bf:c8:91:3d:92:97:23:1c:a8:
                    c8:8a:64:a0:f7:e1:65:d7:79:44:e0:22:25:7a:fd:
                    35:04:f5:a7:41:bb:9c:d1:c0:73:9e:df:12:13:f0:
                    d9:f4:c0:c9:b2:2c:f9:e4:91:a9:01:71:6c:9c:0e:
                    d0:a7:27:b1:60:30:24:6f:a9:a3:4b:7d:3d:df:d0:
                    42:6a:98:79:a4:db:4d:cb:d8:d8:1a:41:c4:74:0a:
                    5c:bc:b0:7c:8e:b6:28:d6:da:27:0c:21:4b:41:cc:
                    5d:d3:b4:60:d8:f0:1a:20:4e:33:cb:63:8d:41:90:
                    ae:47:63:13:9f:4c:ce:7c:85:2f:a0:1b:b6:19:d1:
                    a5:17:69:df:61:cb:f1:ea:3b:f3:09:d7:23:19:07:
                    9b:3d:44:7e:34:bc:6a:66:c1:d8:76:5d:3b:31:fa:
                    b1:44:67:1e:70:9a:4a:3f:d3:ce:4a:37:b5:f4:f0:
                    10:6e:90:4f:2a:ab:70:0f:88:3e:3f:1d:cc:b1:6d:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A2:66:14:BB:BD:FE:0F:21:02:14:44:2D:22:B1:8F:45:A2:6F:40
            X509v3 Authority Key Identifier:
                keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:81:2c:2b:3a:ad:28:89:c3:dd:26:89:0c:0c:02:42:3b:
         e0:bd:a0:ff:e6:fc:86:28:95:ef:e7:8d:6b:26:45:c0:fa:dc:
         d8:87:bf:95:4b:39:ce:01:9e:23:2a:40:26:0e:f9:96:94:08:
         c4:c9:c6:13:76:6c:b1:76:58:00:3a:81:22:12:5c:09:0b:b8:
         ab:57:ff:60:a3:65:2f:ae:9d:60:b4:7d:33:b9:66:3c:6e:ff:
         1d:bf:68:14:f8:32:17:89:fb:69:65:10:af:32:d6:da:8c:d4:
         81:9e:d6:59:8b:f1:96:74:fc:51:f6:14:d2:59:8c:52:ea:75:
         d3:b0:f5:b9:95:57:68:3f:f9:18:36:0e:7d:9c:0b:ef:78:f4:
         8e:55:4b:a1:81:84:d6:a7:20:51:4a:f5:3d:c1:14:01:ac:36:
         66:e7:58:ba:9c:7e:63:02:e4:68:e2:b8:4b:6e:8c:51:6a:89:
         48:a0:83:34:df:92:28:fa:9c:e8:2f:b3:40:9d:a0:3c:c9:b6:
         39:e2:5d:60:a8:b5:fa:bd:56:3d:e0:e1:10:3a:79:03:dc:0b:
         d9:1e:3a:b1:dc:f2:96:83:49:76:9f:53:d2:08:fc:71:58:7d:
         d2:2c:23:72:4b:88:a4:e9:9f:63:dc:1c:24:02:ed:7a:3e:1c:
         a3:07:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:45 2026 by rpki-client