Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File:                     rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier:          8nwWhy31nxGfcqy44Z9CT3oqhKkxZmRFlxTnaVScnU8=
Subject key identifier:   5E:68:15:D2:A7:5E:68:4B:24:B3:4C:77:C7:D1:90:87:E5:67:CC:08
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer:       /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial:       019EC1126312160613EACF121331019C2267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number:          05B4
Signing time:             Sat 13 Jun 2026 13:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:08 +0000
Files and hashes:         1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
                          2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: vH+0o0ocUoHvEtsLPTVrAyLSZ5ZMwztPeWy1kH6GlwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:63:12:16:06:13:ea:cf:12:13:31:01:9c:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
        Validity
            Not Before: Jun 13 13:01:08 2026 GMT
            Not After : Jun 14 13:01:08 2026 GMT
        Subject: CN=5e6815d2a75e684b24b34c77c7d19087e567cc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:86:fb:b5:09:89:63:e2:a8:b6:be:99:7c:
                    b9:82:4e:2b:93:0a:b3:53:33:b7:75:1e:81:22:9f:
                    10:e6:eb:48:76:2b:ae:0e:6d:bf:48:d3:50:55:37:
                    e6:7f:9b:0e:15:8e:f9:b5:0f:3c:f6:3d:5e:ff:bc:
                    7e:28:bc:ab:19:7e:26:e2:dc:7d:05:08:54:8b:cd:
                    02:f1:f7:f9:b3:8a:59:ea:46:fd:5f:55:1e:eb:27:
                    6c:34:8e:38:9f:e1:6e:2a:d5:9b:97:87:69:c1:81:
                    94:29:dd:46:5b:0e:8f:68:66:ad:a3:49:f6:36:cc:
                    12:28:eb:1e:a9:3b:1b:ba:3f:47:2a:71:9c:04:a0:
                    41:60:33:2c:22:f0:ee:fc:df:c0:1f:b9:0e:e3:81:
                    27:81:20:5b:d6:47:23:be:30:fc:70:ab:a3:99:68:
                    cb:65:13:8f:36:e9:75:27:95:03:23:ed:8f:45:32:
                    10:07:5e:70:6d:b0:fd:86:1b:2a:d5:82:6d:2c:3e:
                    89:94:13:38:eb:ad:bf:b9:15:a0:1e:ba:cd:da:67:
                    d6:2a:cd:d4:e0:e3:03:e5:a1:a9:59:1b:4f:c7:b8:
                    22:ca:d1:bb:ee:e9:dc:a7:30:8b:25:c2:ab:1a:33:
                    e4:a7:6b:80:c8:ee:b0:15:44:16:a2:f2:07:93:16:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:68:15:D2:A7:5E:68:4B:24:B3:4C:77:C7:D1:90:87:E5:67:CC:08
            X509v3 Authority Key Identifier:
                keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:b7:9d:b1:b7:83:12:37:d3:71:eb:e7:a5:b0:32:19:ee:
         35:76:b5:87:e7:9e:3b:9a:38:10:92:b7:8e:bf:45:5d:69:fa:
         81:8a:a6:66:d8:0c:3d:0f:63:d9:d2:e5:72:aa:90:8a:4a:99:
         7e:ec:b7:16:6b:a8:80:01:d5:a0:41:a7:34:cd:6b:97:bd:0e:
         70:1e:8f:84:da:1d:cb:3e:ca:a6:18:61:25:31:42:4d:a8:d0:
         c2:09:74:25:16:90:63:ac:8d:8f:27:98:78:35:b1:7e:5d:c9:
         05:c2:86:65:d7:4a:9b:cb:b5:61:9b:9e:df:96:2b:71:53:af:
         52:72:23:dc:33:78:8a:b8:d6:f6:25:cd:2f:fd:ea:6f:d4:a9:
         35:c3:fd:f5:0b:27:56:e7:44:e0:a0:dc:60:f1:b0:3c:df:bc:
         4e:e2:d6:2f:69:11:ee:8c:86:ab:54:50:67:6a:27:b6:d9:c0:
         5b:35:1a:e6:59:91:f4:14:45:ca:43:fe:9e:a2:f3:8d:81:28:
         05:4a:0c:f6:2b:c3:dd:ab:7e:1c:84:1b:d9:25:72:c6:27:28:
         2e:d3:28:b0:a7:d6:30:e4:77:54:94:b0:9a:d6:a0:df:ee:ca:
         08:96:69:20:c3:7d:a2:19:70:91:67:a6:81:42:d8:4f:71:b9:
         f1:f4:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:00 2026 by rpki-client