Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          7RA1O0hiGo1qLzcQZC4X8GPDjb2V3JHnohautOzCcQc=
Subject key identifier:   87:91:5C:AB:66:AF:2D:2E:D9:8C:09:BD:3A:F9:05:7A:97:FD:03:19
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       019EBF5A96BC3FE5B7E50038C83F7FECD035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:45 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: foV2iS6v8gmG4scitQIC2CL9zknzb+GpQS2YqQb3teE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:96:bc:3f:e5:b7:e5:00:38:c8:3f:7f:ec:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jun 13 05:00:45 2026 GMT
            Not After : Jun 14 05:00:45 2026 GMT
        Subject: CN=87915cab66af2d2ed98c09bd3af9057a97fd0319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:60:f6:b7:f9:d8:2b:c5:1f:e8:c2:20:d7:
                    e9:50:ee:4d:fd:fe:cc:f9:a9:6e:59:a0:9d:14:7c:
                    65:51:10:31:a2:c0:49:4a:22:5c:04:cc:06:06:99:
                    ee:e7:07:65:06:5c:ba:2b:41:bb:5b:54:b3:3b:a0:
                    11:0e:fa:32:80:67:e1:10:b6:92:65:30:bb:cb:e8:
                    74:32:d7:b7:74:d6:7c:29:38:48:8f:49:68:cf:a0:
                    0d:95:92:f5:ee:f0:2d:51:b3:77:8b:04:41:02:ce:
                    eb:e0:68:bf:40:39:f8:09:d6:d3:4c:dd:a3:b9:04:
                    c2:0c:f6:67:11:43:ef:50:e5:bd:29:fe:cb:92:e5:
                    98:36:61:f4:ac:22:5c:92:60:08:bc:ad:92:4d:56:
                    e7:6d:bb:1e:1b:38:1d:c5:01:22:75:63:d2:28:40:
                    28:51:f4:ca:ea:9b:a1:b6:0c:e9:0f:ce:16:ca:11:
                    08:26:18:92:a6:a6:af:85:de:ed:3c:e1:6a:89:99:
                    97:42:41:1a:a0:68:09:9d:2d:65:ff:f5:8f:77:64:
                    2e:ec:a5:05:bd:24:22:3b:2b:74:6b:8f:21:ec:82:
                    17:0c:4d:12:34:4b:dd:e1:36:b6:07:8f:d6:c4:82:
                    47:ed:dc:3f:9b:c8:6d:14:6c:e0:53:db:81:d3:c9:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:5C:AB:66:AF:2D:2E:D9:8C:09:BD:3A:F9:05:7A:97:FD:03:19
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:09:09:12:3c:9e:f8:d7:55:fc:ce:4f:4e:a8:6e:86:ed:ca:
         43:30:8c:a8:6e:69:a2:4d:fc:49:7a:5d:ff:1f:00:9c:48:30:
         73:92:c1:c3:cc:dd:1d:81:c8:6f:56:c3:e8:23:4b:29:05:3c:
         07:0f:94:e5:51:b1:7b:2f:9d:07:7c:64:25:a1:78:24:a3:4e:
         7f:82:c2:ff:59:b6:d7:73:35:61:8c:f2:be:33:2b:ce:2e:c3:
         08:fd:53:31:16:6b:9a:33:c8:9a:ac:06:0c:f7:d8:58:28:ea:
         b8:da:7d:b2:2d:23:3e:20:be:21:72:c6:b8:1a:c8:5b:1d:11:
         5d:c1:99:28:b1:2e:36:a8:6f:3d:06:f1:c8:75:dd:20:54:19:
         3d:b0:7e:ad:0c:5e:61:ca:1e:0b:8d:01:01:2c:c7:88:02:f6:
         85:1d:7f:df:69:8d:71:72:26:58:0b:9d:b7:6b:ed:f2:55:08:
         f3:77:79:e8:84:1f:3d:3b:ca:65:0e:7b:16:f9:fe:1e:04:2a:
         d5:bd:7e:4a:bb:64:f7:26:be:57:81:df:02:1f:7c:99:61:1f:
         06:32:5a:d4:4b:b3:15:25:fc:81:1d:ea:31:4b:f1:8b:4c:21:
         e1:14:b5:62:1d:38:fd:57:9e:eb:55:8f:7a:2e:09:ba:b6:0f:
         52:75:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:56 2026 by rpki-client