Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          Vay2IyddBRWH8OKNU1deHQ0vXCfXlYwvYKCqRcwLJMs=
Subject key identifier:   29:15:14:BD:EB:90:37:D1:24:E1:97:66:A5:D4:63:21:BE:33:1B:E3
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       019EC148FDBDC1EDB2B718FBBCA6B3BF85FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 14:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:46 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: Tg3qH9FqBCNxW+TZZ75x0oIZYBKTB+J/MAXv9z2FIU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:fd:bd:c1:ed:b2:b7:18:fb:bc:a6:b3:bf:85:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jun 13 14:00:46 2026 GMT
            Not After : Jun 14 14:00:46 2026 GMT
        Subject: CN=291514bdeb9037d124e19766a5d46321be331be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:5d:f4:6d:27:87:cc:ae:7b:b2:73:88:2b:
                    d9:65:0a:61:b2:ba:88:2b:d4:9a:88:13:82:ef:d0:
                    c1:8a:3e:ee:71:03:3b:d3:07:0a:6f:3e:3d:7d:2a:
                    c5:48:dd:83:01:65:54:13:fd:e1:50:37:87:25:aa:
                    8d:a4:c2:97:c6:14:ed:08:73:31:95:8f:c7:c1:a7:
                    25:2a:4b:c6:c4:93:93:53:e7:e1:5c:4a:a6:97:0c:
                    8f:ee:d6:69:47:0f:65:9b:7b:bf:c3:b6:3c:6c:c6:
                    8b:2f:84:89:a6:35:52:08:48:be:98:7a:cd:35:d8:
                    26:36:c6:df:60:69:88:c4:84:e8:ab:5c:1c:20:ce:
                    32:e8:7b:88:d2:44:2e:c7:da:6c:1b:31:6e:bc:41:
                    bc:d5:e9:8d:0f:02:0d:5a:8c:a5:56:f7:87:8a:17:
                    f0:3c:be:45:c8:53:70:37:9c:c9:b9:0a:11:d3:e9:
                    ef:97:bf:5c:8f:5d:ea:a9:b7:69:a2:b6:92:29:f3:
                    3c:b7:9d:5c:4c:78:92:e3:65:9d:60:a3:de:be:c0:
                    ef:f4:10:d5:2e:f4:8c:95:09:0a:22:97:64:47:04:
                    19:50:a4:98:85:e7:7c:23:f6:2b:3e:3d:09:42:4d:
                    f7:e0:e0:36:d2:a4:32:6f:af:b8:75:a1:22:4a:18:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:14:BD:EB:90:37:D1:24:E1:97:66:A5:D4:63:21:BE:33:1B:E3
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:e6:8f:26:34:ba:b7:48:54:9e:be:9d:d6:88:c0:b7:44:4c:
         1a:03:03:46:68:0f:b2:6f:a6:1e:fc:e9:e0:f2:b9:0b:3e:62:
         23:3b:84:b5:50:07:3b:e5:d0:c6:bf:04:af:fe:ab:44:b8:0d:
         6b:a0:10:e1:5a:40:41:b4:93:87:21:49:ca:96:61:a2:ee:ac:
         6c:d5:7c:c1:65:1b:46:4f:cd:8b:2b:cb:f4:21:89:13:48:c5:
         4e:68:1b:3f:61:7d:f4:58:46:a0:9d:02:43:44:2a:8a:b2:a5:
         9e:8b:ed:69:53:00:c4:31:f8:e8:59:16:a5:5d:9e:6a:34:3d:
         a0:d6:7c:c5:57:db:93:90:3d:da:24:8c:5c:87:11:e7:f4:ad:
         a3:47:ca:bf:ae:c5:fc:0f:93:4c:4d:87:a4:fa:e1:47:c2:47:
         05:cb:80:ba:ce:e5:e6:5d:df:10:37:03:fa:79:c7:10:65:b1:
         46:5c:78:a1:f4:56:53:47:df:cc:3f:65:1c:d1:d3:fd:85:8b:
         82:bc:a2:50:3b:43:fd:0b:06:e7:10:90:9d:ab:b4:a7:6c:eb:
         ae:7c:c2:89:3d:0c:37:6e:ad:52:d0:64:bc:be:5a:61:0b:0d:
         db:f6:9d:18:1c:e7:18:3e:6a:80:19:92:7c:42:49:61:f5:bf:
         c6:8c:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:40 2026 by rpki-client