Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File:                     lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier:          kGAA2OOhOrULlfVwQ3lI9LYVMHkd1OYRf8m6V1xuhlY=
Subject key identifier:   47:F9:D9:24:80:95:FB:68:D3:DD:5F:30:88:BE:BB:1E:0F:AC:A3:62
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer:       /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial:       019EBF23EA0DC10BC1789984D6C6D9832623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 04:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:02 +0000
Files and hashes:         1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
                          2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
                          3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
                          4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
                          5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: ivwI5IGF0adcnd8mZ4uv2r0KHcuKjrlP3nN0oqLiMnI=)
                          6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
                          7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
                          8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:ea:0d:c1:0b:c1:78:99:84:d6:c6:d9:83:26:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
        Validity
            Not Before: Jun 13 04:01:02 2026 GMT
            Not After : Jun 14 04:01:02 2026 GMT
        Subject: CN=47f9d9248095fb68d3dd5f3088bebb1e0faca362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:d8:b0:40:2a:2e:9b:9e:32:36:cf:8c:27:
                    c1:5e:55:19:48:3d:52:72:0f:f9:f3:20:9b:dd:c0:
                    a6:cb:2f:00:11:2f:8b:12:6d:0f:d8:f5:2f:de:1c:
                    64:32:d1:a8:b8:60:41:bd:55:ec:d1:e3:3b:3d:b9:
                    a5:56:f5:ca:41:db:81:9d:da:89:d0:f6:48:fe:8c:
                    ce:08:cb:3f:41:d5:29:77:90:4a:45:1e:ca:da:89:
                    ba:9d:f4:1c:7b:18:04:3f:71:74:65:6a:2b:77:5c:
                    b6:0a:de:eb:3a:44:e5:56:0a:57:ac:9f:48:af:e0:
                    c8:6c:81:8d:5f:d3:61:58:89:8e:e8:6c:81:7f:05:
                    79:4b:28:e5:5d:fc:65:a7:5f:cc:13:7f:f0:24:5f:
                    a4:e3:7e:e4:a5:8f:ee:12:d0:f4:fd:87:64:93:3e:
                    93:14:61:0f:30:6d:16:7e:97:fc:bf:c6:a2:57:3e:
                    62:86:9b:2c:22:34:2a:70:df:21:aa:fc:ae:68:69:
                    a6:43:2c:fc:da:47:2a:fc:29:b0:ca:d8:52:bc:40:
                    bd:32:ac:7b:cf:83:cd:3b:2d:83:8a:ea:2d:ed:0e:
                    15:7f:37:ba:15:64:0f:8f:26:ae:18:2b:e0:2a:04:
                    bd:6b:d0:ee:d2:08:f3:25:40:d2:c2:36:ed:c6:c5:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F9:D9:24:80:95:FB:68:D3:DD:5F:30:88:BE:BB:1E:0F:AC:A3:62
            X509v3 Authority Key Identifier:
                keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:86:5d:5b:23:3f:bc:21:60:bc:28:c7:54:07:f8:9d:1a:57:
         0b:58:e9:e6:90:3c:44:4f:91:50:da:24:db:e0:74:81:99:c5:
         f0:b8:2f:02:58:c8:e3:6b:ee:6c:8d:b0:26:50:02:eb:36:12:
         8f:1e:e1:0f:9c:2a:40:1c:fa:69:06:5b:85:e5:df:68:5e:fd:
         ee:2d:06:13:1f:11:a0:b7:ec:27:31:f1:13:e0:a8:08:73:42:
         40:8e:42:f9:ef:08:cc:f8:17:40:1d:34:99:7b:0e:32:04:44:
         68:7d:9a:a4:9e:90:e4:22:b6:25:e3:92:48:8d:20:a1:a9:2e:
         b3:68:25:42:4a:3b:e7:a1:ef:45:2b:0d:de:17:f6:6c:73:9a:
         99:19:5c:e4:d5:8c:c6:93:89:e7:6c:a4:39:76:fb:b6:43:05:
         22:51:86:3c:f0:39:28:f7:52:e2:40:21:b2:84:8f:0f:66:cb:
         51:21:6b:df:c9:b4:37:3d:b5:2a:b5:53:fc:aa:c7:0a:6b:4c:
         b9:ef:67:7b:b2:32:3f:83:de:e0:4d:a5:54:64:e6:77:26:33:
         78:35:68:40:bf:68:c8:d7:f3:6a:c2:d7:b4:85:86:ec:fc:8e:
         c4:37:b2:2a:36:d7:73:e4:96:19:4f:8e:ee:8e:64:ca:bb:07:
         40:fd:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:53 2026 by rpki-client