Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          nAbSFZ82dlbJKVQw2Fq0+0caEOPTzARaWU2C1rKG+F4=
Subject key identifier:   54:D8:E3:2C:A4:5D:B4:FB:EF:05:ED:24:F7:31:3E:9F:EF:F1:BB:02
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       019F18D61A71CD22C8B9272BBEC3415E929C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          18B7
Signing time:             Tue 30 Jun 2026 14:01:52 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:52 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:52 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: b+efKYFjbMRm32gwKZWJqPNw8YO9CV7vjz0BpIM4Tbs=)
                          2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:1a:71:cd:22:c8:b9:27:2b:be:c3:41:5e:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Jun 30 14:01:52 2026 GMT
            Not After : Jul  1 14:01:52 2026 GMT
        Subject: CN=54d8e32ca45db4fbef05ed24f7313e9feff1bb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:35:ac:fd:b4:19:03:e1:aa:1c:0a:3c:fa:
                    dd:5b:79:36:b9:2f:66:ed:6c:09:da:9a:29:99:d6:
                    2d:cf:2a:71:d3:d7:06:db:48:a6:d9:49:c0:bb:36:
                    c6:1c:54:79:39:43:8e:48:d7:9e:94:71:83:35:a9:
                    f0:77:d1:80:27:10:31:8e:9d:86:ff:d5:29:d2:c9:
                    51:ff:b5:7c:6f:a6:57:bb:c3:47:f3:e8:aa:ef:de:
                    86:5a:6a:13:6b:b6:c4:21:eb:00:fc:b4:e5:9f:33:
                    4c:ac:01:00:d0:7c:b8:8f:72:2a:1d:f4:4f:48:89:
                    83:a5:ab:0e:e9:84:b2:4d:52:38:f2:63:c1:e1:87:
                    09:df:d9:14:5d:31:3c:99:3f:36:d4:5f:c4:3b:c2:
                    10:2f:98:d5:53:5a:70:4c:dc:6b:7c:a2:6b:ee:35:
                    f1:fe:f1:c5:30:0e:fe:82:dd:6e:41:bd:7d:ea:dc:
                    43:f4:1b:f1:ae:dd:1f:bf:89:58:84:3e:91:d0:17:
                    96:4a:6c:31:6a:8d:53:3c:c1:44:68:8f:68:dc:34:
                    7c:df:13:69:ae:bb:a0:9e:29:94:5a:35:34:f0:27:
                    f5:71:ff:ba:4b:06:14:dc:17:37:ec:93:4d:e0:94:
                    7b:51:50:29:b9:ed:6a:69:e2:4c:d3:2e:ec:78:f3:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:E3:2C:A4:5D:B4:FB:EF:05:ED:24:F7:31:3E:9F:EF:F1:BB:02
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:59:6a:b4:df:59:2f:d9:d8:d1:ac:5e:14:92:5a:d6:f0:
         a2:5a:c0:a7:fa:61:c0:4d:c1:f9:4b:b4:19:ba:78:2f:23:6d:
         d5:ab:fb:ae:b3:e9:99:d4:3d:e8:fd:f1:7b:de:bf:2a:f2:4f:
         0d:e9:86:92:30:d9:d7:6d:c8:d3:1e:12:d9:4d:fe:46:fe:e0:
         b2:b8:4e:69:af:98:1e:a5:78:ce:97:70:c3:a1:cf:c0:f4:76:
         3f:ee:ee:ba:b7:c2:31:d2:13:6c:24:7c:c3:57:40:ba:0f:0d:
         93:2a:00:a4:d2:06:0a:35:02:38:36:0e:dd:6c:d6:8b:70:1c:
         32:a5:a8:a8:bb:01:6c:63:27:a5:da:6c:95:27:3b:cf:60:cd:
         d8:df:6b:73:12:c8:b8:0d:ea:72:2f:90:64:e3:72:28:1d:e8:
         cf:e3:a8:19:85:7c:f6:4d:ee:dc:46:33:5e:f9:9c:e4:0a:7c:
         69:40:18:bc:bb:4c:6d:87:34:64:b0:9e:d8:aa:08:2f:2e:91:
         6a:8f:76:4a:e5:7f:93:6a:78:45:12:c8:e7:5d:ed:ef:12:2e:
         1e:4d:67:02:29:66:7f:3f:5c:3c:5c:03:96:21:d4:9e:e2:ab:
         ee:f6:77:b4:77:91:76:74:f3:c2:9d:62:ff:a9:f6:f1:f2:d3:
         4b:0a:7a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1hpxzSLIuScrvsNBXpKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjYwNjMwMTQwMTUyWhcNMjYwNzAxMTQwMTUyWjAzMTEwLwYDVQQD
Eyg1NGQ4ZTMyY2E0NWRiNGZiZWYwNWVkMjRmNzMxM2U5ZmVmZjFiYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwA1rP20GQPhqhwKPPrdW3k2uS9m
7WwJ2popmdYtzypx09cG20im2UnAuzbGHFR5OUOOSNeelHGDNanwd9GAJxAxjp2G
/9Up0slR/7V8b6ZXu8NH8+iq796GWmoTa7bEIesA/LTlnzNMrAEA0Hy4j3IqHfRP
SImDpasO6YSyTVI48mPB4YcJ39kUXTE8mT821F/EO8IQL5jVU1pwTNxrfKJr7jXx
/vHFMA7+gt1uQb196txD9Bvxrt0fv4lYhD6R0BeWSmwxao1TPMFEaI9o3DR83xNp
rrugnimUWjU08Cf1cf+6SwYU3Bc37JNN4JR7UVApue1qaeJM0y7sePOsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTY4yykXbT77wXtJPcxPp/v8bsCMB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFtZarTf
WS/Z2NGsXhSSWtbwolrAp/phwE3B+Uu0Gbp4LyNt1av7rrPpmdQ96P3xe96/KvJP
DemGkjDZ123I0x4S2U3+Rv7gsrhOaa+YHqV4zpdww6HPwPR2P+7uurfCMdITbCR8
w1dAug8NkyoApNIGCjUCODYO3WzWi3AcMqWoqLsBbGMnpdpslSc7z2DN2N9rcxLI
uA3qci+QZONyKB3oz+OoGYV89k3u3EYzXvmc5Ap8aUAYvLtMbYc0ZLCe2KoILy6R
ao92SuV/k2p4RRLI513t7xIuHk1nAilmfz9cPFwDliHUnuKr7vZ3tHeRdnTzwp1i
/6n28fLTSwp6hQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:39 2026 by rpki-client