Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          k6UXAWjD3T5Kvx9AloCAjWC7dgFiTlAVABjxNhvjvOM=
Subject key identifier:   01:5B:29:E3:ED:BF:3D:11:B7:A8:14:84:B0:60:CE:93:10:18:17:47
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       019F1266046E05F071C0E69580DA22F5F3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          18C3
Signing time:             Mon 29 Jun 2026 08:01:43 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:43 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:43 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: iYy9StZGmKyV5dwaEB5/9p5rJHzdHiWdcQhsgXnQgbA=)
                          2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:66:04:6e:05:f0:71:c0:e6:95:80:da:22:f5:f3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Jun 29 08:01:43 2026 GMT
            Not After : Jun 30 08:01:43 2026 GMT
        Subject: CN=015b29e3edbf3d11b7a81484b060ce9310181747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:19:32:f4:f8:eb:fd:83:6b:18:16:fa:25:
                    08:3a:0d:69:06:c6:73:f4:4e:5b:b1:5a:4a:84:f3:
                    0b:81:57:e4:ea:8b:f0:75:26:b8:6c:bd:a1:67:bb:
                    b9:98:a2:ed:76:48:a1:1b:4a:ed:97:09:83:78:94:
                    16:00:c8:44:03:87:1c:3b:38:b3:0e:24:f2:82:97:
                    54:8f:a7:2f:2b:0f:e8:45:a2:dd:97:ba:e4:33:05:
                    fb:8d:69:ca:48:ec:bf:5b:69:78:c2:a9:c0:7d:93:
                    bb:ad:e8:2f:f4:ed:9b:b1:1a:0b:da:bb:6b:28:0a:
                    82:76:92:98:4f:df:53:21:56:86:87:d3:88:d0:af:
                    3f:32:7a:9d:6d:a4:cf:6a:3c:90:8a:e7:74:a7:55:
                    76:8d:c0:3d:75:e2:6f:67:ed:c6:82:44:a7:7d:52:
                    07:17:fa:73:93:66:2e:28:39:89:c5:b1:7b:e8:54:
                    fc:c8:0c:a0:6d:03:7f:d8:f0:45:23:d3:a2:17:0d:
                    7c:1f:0c:5f:d9:cd:9a:ef:60:fc:9b:00:47:4c:60:
                    b8:38:f0:88:78:aa:eb:77:09:68:38:7e:a1:44:c7:
                    81:90:0d:ca:ed:c3:6d:19:98:c5:b4:76:ba:66:c6:
                    06:28:1f:59:8b:d1:46:22:49:fa:83:88:d1:02:5d:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5B:29:E3:ED:BF:3D:11:B7:A8:14:84:B0:60:CE:93:10:18:17:47
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:7f:89:54:a2:8a:87:ad:b1:2c:bc:a6:5f:ee:26:0e:ab:
         a0:ad:06:7b:57:c6:7b:8a:41:34:e2:6c:dd:a3:44:1d:99:fc:
         43:ce:92:e6:9e:d7:a9:59:da:bd:35:2a:22:8f:d3:61:68:22:
         86:05:91:0a:65:63:1a:0d:5b:07:b3:a5:69:b7:da:3c:3f:e3:
         c1:b5:23:18:c2:e6:ad:2c:e4:8f:91:30:d2:02:28:2d:5c:45:
         49:14:1a:d4:40:e5:5d:27:87:f9:18:24:6c:2f:4a:59:70:75:
         ee:9c:49:cd:30:44:50:94:5b:3f:6a:a3:d4:a7:24:df:e3:d8:
         a5:54:6f:aa:19:76:7c:ec:fd:af:dd:ca:57:8c:ce:c4:8d:be:
         29:f4:8f:e4:ce:5d:fe:a8:8f:94:da:d3:81:b7:1d:8a:91:55:
         30:b4:ba:01:8e:51:c1:6c:4e:2e:db:d2:c8:d2:9e:d7:7a:59:
         3d:ae:b7:a5:49:00:f2:e1:d6:67:e3:7c:a1:94:97:04:e5:ec:
         97:15:69:e7:74:52:b2:03:cd:b9:62:1a:b0:82:01:06:09:d6:
         4e:3f:12:ed:7c:cb:76:f1:ae:d1:eb:ec:97:88:90:d6:71:2f:
         71:28:03:10:60:72:5c:c0:62:0b:96:40:83:19:c7:43:a0:f5:
         b2:0a:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:50 2026 by rpki-client