Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File:                     L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier:          5YKX6TlSviDlJmd2npYzayT2tXT15nrSFbhJqpdnl6I=
Subject key identifier:   D9:CA:CD:D1:60:D2:E2:1C:B2:E7:71:CC:8F:08:C2:43:E6:37:AE:E2
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer:       /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial:       019EBFC8F77935269D4DB62AD70FB4C14F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number:          169C
Signing time:             Sat 13 Jun 2026 07:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:19 +0000
Files and hashes:         1: 2GWTwXoTLmygb4l7goTjIjd9TmQ.roa (hash: kn5fj+sUBxSjr30AKzFC4YtI3X73MSHlY//pgkso13w=)
                          2: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: Fb0kdufTNnFSpAGBR6SXJcTNE4xluQPFsmwCCguMWYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:f7:79:35:26:9d:4d:b6:2a:d7:0f:b4:c1:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
        Validity
            Not Before: Jun 13 07:01:19 2026 GMT
            Not After : Jun 14 07:01:19 2026 GMT
        Subject: CN=d9cacdd160d2e21cb2e771cc8f08c243e637aee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:44:18:b8:d2:31:1e:c1:d6:51:48:a0:53:
                    03:0f:a1:de:9a:9a:7d:a8:52:c0:8e:ed:dc:b3:f5:
                    11:48:01:6a:62:c3:a7:ff:ec:31:70:1e:06:dc:b1:
                    23:e7:3f:fd:ce:aa:9a:dd:b1:36:6a:d5:a7:1a:dc:
                    2e:f2:c0:0e:1a:97:64:7e:02:b2:d7:1a:56:7c:a7:
                    14:82:fb:22:98:07:83:18:7b:e2:b8:73:d8:cf:81:
                    b1:63:e2:c7:19:dd:10:1e:2c:7a:d0:e5:f8:2a:10:
                    42:e3:c6:97:d6:55:fb:40:76:16:2d:a1:c8:37:2e:
                    05:1f:32:b3:0b:7a:4e:82:b5:3c:27:0f:a5:cf:54:
                    ca:08:b9:a8:4e:11:a6:f0:18:fe:28:c5:d7:45:e8:
                    fd:94:d6:7c:e1:8e:b1:62:f4:00:fd:40:9b:1b:07:
                    84:78:57:f9:cf:60:ab:c1:3e:22:62:09:28:7d:24:
                    8c:a1:88:bf:57:66:40:7c:ff:b2:6b:0a:aa:1c:ec:
                    b3:b7:10:4e:ae:3e:f5:cc:ac:e5:79:13:47:2b:8b:
                    20:48:98:8e:a6:18:75:c9:25:1f:76:73:a0:98:67:
                    e1:96:6b:99:7f:e6:cb:9f:88:9d:0e:e8:f6:2c:3f:
                    49:d9:fe:2b:b3:58:95:c8:12:dc:6a:ea:bb:62:17:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CA:CD:D1:60:D2:E2:1C:B2:E7:71:CC:8F:08:C2:43:E6:37:AE:E2
            X509v3 Authority Key Identifier:
                keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:9e:c8:f1:ec:eb:6d:eb:14:cb:1f:bc:d7:05:fa:ea:de:12:
         15:d5:24:1b:87:8e:bf:7a:72:e3:34:7d:ec:22:ef:a9:f5:9b:
         71:15:7a:2b:63:36:85:fd:f6:bd:ee:cf:2f:1c:c8:2c:f2:13:
         48:26:36:24:db:0d:ff:da:7f:ac:b6:af:08:94:fe:6a:97:20:
         f4:74:f8:85:69:03:8f:97:3c:5c:21:3e:5f:4b:1e:3b:a1:6f:
         dc:f0:9e:e5:08:08:e5:8a:66:66:f9:be:55:52:f7:04:0c:c4:
         23:4f:29:81:6a:c8:dd:65:94:34:5c:89:82:56:8a:0d:d2:35:
         aa:07:10:f3:83:42:f1:71:06:ba:08:0a:1f:d4:bd:64:5f:c2:
         6c:8a:5d:21:4f:f9:77:7f:4d:fb:83:45:4a:94:40:8d:d2:d4:
         1e:50:4b:57:ee:24:4a:72:3f:ad:8c:47:e2:82:96:59:cc:12:
         c7:de:05:49:3f:80:24:c2:32:d0:d0:c9:a5:b9:55:9d:1b:6a:
         92:c0:99:9a:27:95:bf:0d:11:fe:a0:6d:b8:fb:16:57:53:ac:
         45:13:b0:a0:03:21:e9:3d:6b:29:b8:7e:b7:77:2a:be:de:0d:
         44:89:25:cd:24:5c:3f:aa:cf:ef:c4:b9:ea:28:b9:20:85:17:
         d2:d3:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:59 2026 by rpki-client