Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          ACWet5KKw2TT28n/TgJXGA8UUVYw/cvANiaCcafHWvI=
Subject key identifier:   67:58:0A:C5:A0:CC:8E:A4:7B:75:89:22:9D:52:2A:C4:FA:14:FF:CD
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       019E1D2320A331EDDF94E6407A3F549DF9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          0F03
Signing time:             Tue 12 May 2026 17:01:41 +0000
Manifest this update:     Tue 12 May 2026 17:01:41 +0000
Manifest next update:     Wed 13 May 2026 17:01:41 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: ECCrqC3V858VpHICaG9YQIOrhAK2kJVtKL30Y/nKJb8=)
                          2: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (hash: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:20:a3:31:ed:df:94:e6:40:7a:3f:54:9d:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: May 12 17:01:41 2026 GMT
            Not After : May 13 17:01:41 2026 GMT
        Subject: CN=67580ac5a0cc8ea47b7589229d522ac4fa14ffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:52:d2:d6:ba:f1:16:f1:95:c3:74:3d:c9:
                    f8:e2:aa:82:6a:0e:22:27:f8:bb:55:09:25:d0:18:
                    8c:6e:a2:ab:0a:d9:5b:10:e4:61:61:bf:f1:7a:23:
                    d9:11:aa:63:09:82:a3:7e:62:29:23:52:28:9f:e4:
                    f9:90:1c:09:41:df:8b:05:1c:a5:4d:58:c7:a7:05:
                    b3:a1:9a:85:c1:5a:c7:3f:53:88:83:74:a8:08:26:
                    d5:77:55:ff:4a:00:94:c3:60:a0:28:66:66:e4:bc:
                    eb:db:8b:36:4a:83:bd:f3:a2:14:26:ce:ea:81:4b:
                    e7:98:72:45:1f:f3:2e:40:97:5b:cd:31:4e:74:c4:
                    bd:19:8b:15:c6:ac:73:63:83:e4:4b:37:4d:51:0f:
                    c5:63:0e:7a:0a:5d:e2:60:9d:bd:59:83:9a:50:de:
                    ed:61:f1:a8:47:58:41:eb:5b:d4:ac:dd:c3:54:6b:
                    0b:2a:82:52:d4:3c:f2:12:c6:eb:14:c2:3f:43:39:
                    b4:30:64:9a:9d:b1:38:f2:26:a2:c4:24:65:a2:45:
                    cc:5c:a8:ae:4c:2f:ac:3a:df:a7:e2:40:dc:b3:8d:
                    f5:d5:7f:fb:a9:68:6a:e4:2b:63:8e:75:77:bf:5c:
                    70:15:17:d2:c8:a6:eb:b5:de:07:b8:ad:ed:4c:b7:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:0A:C5:A0:CC:8E:A4:7B:75:89:22:9D:52:2A:C4:FA:14:FF:CD
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:da:83:eb:31:6a:5e:29:6b:87:85:58:22:92:80:84:2b:
         1d:41:82:28:68:a4:9a:f4:9d:e0:28:a7:85:03:7d:a0:fb:69:
         d8:24:65:a8:4a:9f:2b:3b:9b:e6:45:a1:93:ff:99:1d:75:26:
         33:db:c7:e6:6e:2a:f2:77:9b:99:1d:6b:91:21:86:13:a8:fb:
         f5:95:43:29:fb:f4:4f:4d:97:de:75:5e:68:4e:87:79:7d:f2:
         24:85:e5:cf:6e:55:d6:d3:78:99:6d:2c:98:0c:31:1f:f6:38:
         29:ba:63:e1:33:7c:7d:ee:ff:07:8c:da:32:a4:67:32:93:9b:
         e3:d0:30:90:11:9f:17:18:b0:b0:5d:75:74:f1:a0:e5:eb:9e:
         49:7f:80:f3:12:ae:ea:9d:29:b6:11:76:86:e0:fa:7f:2c:a3:
         00:e6:bc:c6:48:3c:1f:a2:cf:0a:2a:23:c8:0f:43:83:eb:6c:
         ac:c8:1d:d9:38:0f:d9:74:64:76:1c:c5:5e:c8:14:34:4b:f8:
         41:1f:02:51:54:32:8d:f8:e8:20:0c:d7:81:ad:b0:15:6d:3a:
         76:ad:b0:77:a7:3a:48:c3:64:3c:2a:11:c2:4e:dd:0e:33:7b:
         38:d7:fe:7c:87:c6:60:09:d0:bf:6f:26:ce:13:00:28:f6:c9:
         42:ec:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:09 2026 by rpki-client