Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          bzTyqGHmak+nZpc8eNSNhaJTRH1akyvuaaJloXu+UQo=
Subject key identifier:   49:74:5F:66:FB:22:74:D3:1C:F7:E8:FC:6C:33:86:CF:41:2D:AC:4F
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       019EC1B6A153C2FE089706CFDF831A28A3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          0E5B
Signing time:             Sat 13 Jun 2026 16:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:31 +0000
Files and hashes:         1: lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa (hash: IX8Zv7qUtgpAAei5zm/E62pQBDNZVJrE1Mk34lY2Lrc=)
                          2: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: ioKvHamrb/oZwsqBcVVucNnl7Y/UcyS4AG/OkWjkYr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:a1:53:c2:fe:08:97:06:cf:df:83:1a:28:a3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Jun 13 16:00:31 2026 GMT
            Not After : Jun 14 16:00:31 2026 GMT
        Subject: CN=49745f66fb2274d31cf7e8fc6c3386cf412dac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:c1:9e:cf:18:3e:a0:ea:91:f0:07:b5:bb:
                    a2:56:d4:37:0b:3e:fd:ed:37:e6:09:bd:e3:1e:35:
                    4b:d1:2d:a5:fb:a4:cd:1b:5b:13:87:6e:ff:1e:81:
                    a9:ab:bb:38:b5:8a:0b:52:d5:b9:a2:1b:51:78:ee:
                    75:38:24:e3:08:98:dd:4c:56:8d:b5:4b:ca:cf:66:
                    bf:a9:45:b1:1e:2b:82:cf:8f:60:54:3e:ea:05:37:
                    ed:87:f6:5d:aa:c4:51:80:48:1f:c1:b4:3b:d5:9d:
                    f7:68:af:d5:d1:0b:a0:38:b4:cd:5e:71:70:5d:d2:
                    da:d8:32:68:fb:49:2d:71:20:2e:73:ce:a3:a4:52:
                    aa:19:32:3d:f0:51:b0:15:59:38:33:b3:1b:52:cc:
                    b6:c9:94:47:e2:53:d0:e8:e4:8c:f1:df:d4:91:e4:
                    48:06:ef:77:12:2e:c7:d3:67:0e:c6:f3:2e:cd:a2:
                    61:a8:a8:d2:47:71:b8:21:5b:66:86:3f:a0:de:d9:
                    fb:9c:32:1f:b5:aa:d5:22:8f:77:15:47:94:27:84:
                    ad:5c:cd:26:61:ef:c2:4a:72:14:02:88:7c:0b:8e:
                    7c:fe:d5:9e:cf:eb:09:bd:55:c8:6b:22:53:5e:48:
                    84:01:c0:8c:8c:38:9b:75:44:cb:db:51:85:78:8b:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:74:5F:66:FB:22:74:D3:1C:F7:E8:FC:6C:33:86:CF:41:2D:AC:4F
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:43:c7:d3:88:5b:e4:f0:c8:6d:94:d0:06:2a:f2:a1:eb:
         91:9f:ba:64:65:2f:a6:52:6d:e8:3a:dc:ae:f7:bb:6d:f6:fd:
         07:95:05:ff:41:21:5e:34:cb:c6:ad:39:22:ed:28:76:3a:d2:
         f1:9a:f7:df:a5:f7:eb:16:aa:8b:af:5a:8c:90:2b:ea:2d:a1:
         0d:fc:8a:91:8f:ad:5a:74:7e:77:37:f0:d0:5f:63:c0:72:45:
         68:fd:df:7a:4f:d9:43:27:fb:2a:c7:9f:df:cc:4c:28:0b:3c:
         24:6a:1b:96:08:46:2e:9c:77:58:47:ea:d5:0b:44:0e:3b:c6:
         4c:e8:1c:66:c9:9c:3e:fb:7b:82:26:89:91:06:5c:7d:b0:0b:
         ab:90:ef:78:c7:66:53:2d:fe:12:3c:e7:71:73:a4:f8:e5:19:
         55:f8:50:5b:61:81:0d:02:03:17:9e:c7:a2:34:b4:d4:1e:46:
         ce:2c:d9:3f:86:62:57:47:f2:21:b7:8b:a6:10:8d:a4:71:ec:
         54:36:01:e3:97:4b:80:38:fc:a0:24:5d:7d:1a:03:fc:43:be:
         34:71:81:3e:8d:52:06:42:26:b3:98:c6:f8:1a:a2:a8:c9:b2:
         5e:64:77:a1:c9:92:07:e3:a4:7b:0b:cd:e7:53:7a:a9:72:14:
         6e:46:09:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtqFTwv4IlwbP34MaKKO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3
YmQwMzUwHhcNMjYwNjEzMTYwMDMxWhcNMjYwNjE0MTYwMDMxWjAzMTEwLwYDVQQD
Eyg0OTc0NWY2NmZiMjI3NGQzMWNmN2U4ZmM2YzMzODZjZjQxMmRhYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmHBns8YPqDqkfAHtbuiVtQ3Cz79
7TfmCb3jHjVL0S2l+6TNG1sTh27/HoGpq7s4tYoLUtW5ohtReO51OCTjCJjdTFaN
tUvKz2a/qUWxHiuCz49gVD7qBTfth/ZdqsRRgEgfwbQ71Z33aK/V0QugOLTNXnFw
XdLa2DJo+0ktcSAuc86jpFKqGTI98FGwFVk4M7MbUsy2yZRH4lPQ6OSM8d/UkeRI
Bu93Ei7H02cOxvMuzaJhqKjSR3G4IVtmhj+g3tn7nDIftarVIo93FUeUJ4StXM0m
Ye/CSnIUAoh8C458/tWez+sJvVXIayJTXkiEAcCMjDibdUTL21GFeIuLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl0X2b7InTTHPfo/Gwzhs9BLaxPMB8GA1UdIwQY
MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt
OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5
LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlRDx9OI
W+TwyG2U0AYq8qHrkZ+6ZGUvplJt6Drcrve7bfb9B5UF/0EhXjTLxq05Iu0odjrS
8Zr336X36xaqi69ajJAr6i2hDfyKkY+tWnR+dzfw0F9jwHJFaP3fek/ZQyf7Ksef
38xMKAs8JGoblghGLpx3WEfq1QtEDjvGTOgcZsmcPvt7giaJkQZcfbALq5DveMdm
Uy3+EjzncXOk+OUZVfhQW2GBDQIDF57HojS01B5GzizZP4ZiV0fyIbeLphCNpHHs
VDYB45dLgDj8oCRdfRoD/EO+NHGBPo1SBkIms5jG+BqiqMmyXmR3ocmSB+OkewvN
51N6qXIUbkYJTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:53 2026 by rpki-client