Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          +jTwiNCUDzfG6kkGzU0VC6HY6OtxBuHDdUM7XB30Z9w=
Subject key identifier:   16:85:EF:75:A6:4A:08:6C:E1:00:AD:C1:04:31:80:70:21:BD:C4:1D
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       019EC2C949E9C33213C72C4A64E5BF72BC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          0B1F
Signing time:             Sat 13 Jun 2026 21:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:31 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: TxIjNpzeQZLei3cpW/UWaFbAV02eotZ/W/6Ce2JKCaI=)
                          2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:49:e9:c3:32:13:c7:2c:4a:64:e5:bf:72:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Jun 13 21:00:31 2026 GMT
            Not After : Jun 14 21:00:31 2026 GMT
        Subject: CN=1685ef75a64a086ce100adc10431807021bdc41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:bf:5d:18:22:77:0e:e2:c2:6f:52:35:f9:
                    2c:23:22:e9:d7:73:4b:0b:a0:b5:c3:49:4d:42:50:
                    71:07:e5:e3:2c:78:ad:62:a5:f5:ae:80:da:44:7a:
                    6a:26:f0:65:18:fc:b9:d3:7e:52:70:64:83:ad:50:
                    7b:d8:30:57:12:52:29:5c:1d:9c:9a:c3:4c:4d:ab:
                    82:d6:67:07:43:ae:31:61:f9:0e:6f:05:fb:db:31:
                    1c:4d:cf:b0:55:91:5b:3e:f8:77:ca:ee:10:ca:79:
                    1c:f3:4c:9e:f3:eb:f3:5e:c9:88:63:df:cc:4a:17:
                    ab:f3:ff:df:8e:1c:57:61:80:13:36:00:53:01:e4:
                    15:c0:ce:aa:d1:61:2d:de:94:0b:63:41:00:23:d1:
                    64:3a:45:ce:3b:dc:de:54:93:0e:4e:46:04:5f:09:
                    16:43:9c:5b:7d:9a:e6:af:ce:10:c8:bc:e0:bc:37:
                    76:ff:a8:43:96:16:25:19:56:17:56:1a:31:3c:47:
                    cf:9b:82:0e:f9:03:2a:8e:c2:94:48:a4:81:f9:99:
                    74:af:2d:52:33:7c:94:6f:09:62:b4:c3:a3:96:bd:
                    a9:0b:fd:d5:f2:66:bd:b6:75:9d:9e:c0:11:80:62:
                    13:73:a3:a7:f3:e4:51:e7:c5:b4:f3:35:ae:e2:f2:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:EF:75:A6:4A:08:6C:E1:00:AD:C1:04:31:80:70:21:BD:C4:1D
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:88:da:0c:b9:93:3c:fa:88:a6:e7:64:c6:a8:bd:7c:67:0a:
         68:14:01:53:15:7d:75:76:17:08:bc:d8:87:ed:73:47:40:1c:
         9e:bd:f1:c7:cb:24:0f:62:ef:67:d5:78:83:aa:f4:10:11:0f:
         bd:ed:ab:af:c1:7d:85:36:f5:d7:d1:c4:00:1a:57:c6:c3:ea:
         9d:96:77:08:91:84:7f:77:5c:e2:fd:05:a6:b5:dd:e2:da:a5:
         03:94:74:9d:57:66:07:68:01:2f:65:10:31:fd:ed:06:5c:91:
         4c:cc:ed:fc:16:6e:8f:e4:d5:83:85:2e:50:39:da:3e:f6:e4:
         9d:8c:30:65:10:a7:a3:53:31:bc:f6:3d:13:b8:70:06:87:07:
         6c:06:d9:9f:5e:03:49:e7:13:39:86:9c:11:9c:54:75:7e:12:
         02:ea:81:a2:21:bf:33:f0:e6:b9:8e:65:1d:15:e1:86:cb:0a:
         f0:15:20:96:32:df:f8:a5:45:25:06:c0:92:ed:34:f3:d5:92:
         cc:34:00:81:c2:b7:b2:0e:34:dc:97:e1:18:68:d9:1a:e8:a4:
         51:22:6c:fc:d3:a3:00:9c:bc:37:22:9a:b2:20:7e:b6:7f:15:
         83:2c:dc:ca:15:64:fd:75:82:08:43:16:40:3b:6a:d5:96:1a:
         b8:26:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:31 2026 by rpki-client