Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          60N47YIbxU5kBPNmrpx44j6Xi9Y4xpy+rHg0KepqC2c=
Subject key identifier:   33:55:86:5C:AE:63:A0:A1:AE:A4:1E:6D:60:8B:B9:82:D9:9C:ED:0B
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019EBEED6F1C45082B46672203BBC1D8866A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          193A
Signing time:             Sat 13 Jun 2026 03:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:31 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: HmWiLBz1ZTgncsqV0J06aXm9MsBVvSTeaK4Jh8MS4GU=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:6f:1c:45:08:2b:46:67:22:03:bb:c1:d8:86:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Jun 13 03:01:31 2026 GMT
            Not After : Jun 14 03:01:31 2026 GMT
        Subject: CN=3355865cae63a0a1aea41e6d608bb982d99ced0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:d7:6c:5d:59:7e:4b:62:ed:50:be:d7:82:
                    c9:1f:51:87:5d:89:9a:7c:f8:3a:28:d3:cf:bb:3d:
                    76:89:1a:56:25:97:46:e2:b7:6c:e0:c1:73:4f:4d:
                    a1:27:4f:29:a1:96:d4:4c:99:4c:da:57:55:c8:e9:
                    41:17:23:5b:b4:15:e8:5e:1a:7e:f2:81:98:fa:d2:
                    63:d8:f7:b7:f2:86:d6:92:b5:74:d2:af:4c:a8:cf:
                    19:f9:ab:75:a2:bd:b8:5e:3a:3c:d7:75:2d:15:7e:
                    43:e4:d6:bc:c6:26:94:ae:7b:e5:13:23:41:31:e3:
                    fc:ce:f1:87:b4:3b:cf:53:c4:9e:92:25:02:98:79:
                    f6:6a:a9:aa:98:a1:34:b9:7d:f3:0e:4d:2a:c8:f1:
                    79:4e:6d:ad:eb:0a:b6:42:ba:39:df:63:51:3b:06:
                    e9:64:1e:fd:9a:71:b3:ce:59:b3:86:08:7a:6e:82:
                    79:c6:ef:0c:3b:c2:bc:b2:86:99:1e:77:e3:84:c6:
                    7d:f8:10:3b:6d:e3:5b:0f:a4:25:ac:3b:0d:e1:ad:
                    9c:4e:9f:d3:e9:0f:50:56:3d:b8:7f:8d:fe:ac:f6:
                    6f:0d:03:88:01:3c:a7:04:ee:58:2d:35:61:02:2b:
                    8c:8b:6f:1d:f0:dd:9a:88:42:aa:fc:98:46:a4:dc:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:55:86:5C:AE:63:A0:A1:AE:A4:1E:6D:60:8B:B9:82:D9:9C:ED:0B
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a0:87:c2:78:be:fa:24:da:69:47:c3:1f:0b:64:dc:b4:cf:
         eb:2b:0d:c2:54:00:c5:af:bf:2a:1f:4f:4c:3d:3b:a2:b1:0a:
         be:67:dd:fd:23:33:10:a9:d2:c7:e9:4a:56:cc:cf:7a:11:03:
         82:11:b7:a9:92:93:32:92:10:ee:9f:57:cd:1c:e5:e9:bf:4b:
         21:af:93:9b:83:cb:94:ff:37:89:48:ab:29:b3:ba:cb:df:19:
         22:16:96:5a:f2:a6:b9:48:c6:4a:b5:08:18:4b:c5:b0:74:95:
         f7:3a:fd:27:22:8b:fc:e9:d1:90:73:89:a8:03:9d:eb:9e:db:
         a2:b6:b5:da:3c:ba:0e:a3:99:40:31:77:28:b2:65:f8:34:57:
         fa:66:3a:ff:eb:76:04:b5:02:a2:56:60:66:83:36:63:92:47:
         a9:5a:a5:80:7b:4c:bd:f4:69:26:bd:82:30:34:6d:a2:c7:31:
         68:82:5f:8a:9a:d6:6c:bb:4d:82:a4:0a:f9:5b:b3:55:ae:6b:
         a0:94:18:9c:c1:bc:d4:1c:7d:af:a7:e2:d9:0e:d2:06:b7:40:
         89:42:ab:29:d2:e8:9e:00:ab:88:99:3f:c7:ee:fa:e6:27:3f:
         77:1f:42:d5:87:dd:e0:da:8b:06:3d:c8:fd:bd:a5:59:dd:be:
         e3:39:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:54 2026 by rpki-client