Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          EEnXD46xOgxWB3rQ9IXZcVevWmW0EX+Rk7BbojwqQPI=
Subject key identifier:   F1:CB:07:70:52:2A:23:94:33:2E:66:A8:68:F5:AC:A8:65:E2:33:53
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       019F9090AF8E92B01AA9A96D0C556391E5F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          18F5
Signing time:             Thu 23 Jul 2026 20:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:28 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: 63cahqYx2j4GGDXhCDkW2LZGtE92i2OuqfLWDkTtLcM=)
                          2: Hqxhtx3eSDjAKCbew_0MbNTLf_g.roa (hash: igKXV1ZRBhmVYM9rJklocvDWkfSrJiH6ZEWWy+/IMPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:af:8e:92:b0:1a:a9:a9:6d:0c:55:63:91:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Jul 23 20:00:28 2026 GMT
            Not After : Jul 24 20:00:28 2026 GMT
        Subject: CN=f1cb0770522a2394332e66a868f5aca865e23353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:70:31:27:94:df:d2:8f:4c:c1:7d:b7:d1:
                    01:8b:b6:14:ac:6a:a0:5e:13:67:7b:60:02:7e:fc:
                    e7:c6:09:5c:09:12:8e:2d:fb:9b:ed:d1:e2:3e:52:
                    3e:d4:49:18:9b:8c:8d:7b:54:bd:f3:7d:dc:f7:b5:
                    74:ed:20:54:f0:8e:05:67:23:c0:09:6e:98:49:ee:
                    8c:b1:17:71:a0:63:68:7c:51:be:42:3c:38:6c:03:
                    29:dd:96:64:d6:b8:24:2e:51:cd:dd:b9:5c:83:99:
                    b1:84:20:58:d1:85:0a:a3:4d:82:80:35:ac:58:74:
                    0c:ea:98:a9:04:4c:17:f9:a4:3a:d2:11:cc:49:03:
                    4f:42:f0:54:7c:d0:e9:cb:8d:58:07:76:c8:52:15:
                    69:a6:bd:5d:b6:4b:3c:c8:84:32:25:b9:ab:7a:b1:
                    b5:f3:52:f9:83:3d:bf:11:c4:d3:f4:8a:e0:e7:19:
                    8a:ad:7e:4d:d6:a9:c3:ff:66:b4:3c:cd:7d:89:24:
                    29:29:93:6c:5d:89:67:34:71:8a:dc:c2:08:31:b1:
                    46:b4:9d:f0:4a:36:af:30:8b:68:10:d8:14:ef:8d:
                    df:ba:fe:aa:5b:45:66:62:e3:e1:4b:7c:0c:63:43:
                    19:56:4f:4c:40:ea:3a:92:e8:69:c2:9f:16:c4:d2:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:07:70:52:2A:23:94:33:2E:66:A8:68:F5:AC:A8:65:E2:33:53
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:c4:d7:96:70:a0:6d:46:b2:cc:8f:42:d1:00:57:d6:68:
         de:e6:06:98:0d:1c:8d:96:35:be:80:42:c1:aa:21:97:95:37:
         f0:d8:42:ee:b3:a8:0a:88:f0:90:e9:4f:19:46:fc:1e:8d:5c:
         3f:0b:f1:d3:dc:f2:ed:2e:36:1f:17:61:0d:c0:3c:36:9c:26:
         b9:0b:af:31:3d:74:8d:3c:d4:ab:ef:05:40:b4:5b:31:80:7a:
         bd:cf:e2:bc:33:a3:66:9a:34:7f:4a:c6:96:37:6d:43:cc:cc:
         fd:bc:e8:7b:d6:b1:3a:94:eb:04:00:97:0b:e0:2b:b5:3b:be:
         8a:68:da:de:d6:94:e0:da:48:b9:50:f9:e6:1a:ee:e5:1e:58:
         6f:04:f3:e5:26:30:1a:d6:d9:9b:61:0d:5c:67:77:90:5c:69:
         9a:ce:30:e3:78:5b:d5:4a:52:54:9e:07:fd:77:11:86:ef:51:
         db:33:63:67:dd:c8:e0:11:ad:41:33:03:0b:8a:f0:08:ee:9c:
         dd:a9:40:fd:fc:3c:50:0c:9d:eb:82:fa:ac:66:6c:f7:89:fc:
         42:cc:58:4c:56:6e:f4:0a:88:a6:ee:55:1a:1e:92:ed:51:da:
         4c:2c:f4:2e:fc:09:8b:15:12:76:46:f5:ec:87:33:5d:da:58:
         34:04:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:47 2026 by rpki-client