Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          4oZUH6gs2Z40g2Oc55hrWh1GM30VKi75lX6qXyHTQtc=
Subject key identifier:   49:3E:6F:C4:22:49:3E:85:8C:23:25:35:92:85:87:96:8F:6B:87:31
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019EC3371BAFEABA587C43BB146D0E56503C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 23:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:29 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: bo4lb0AmgPtZuGhGM/ww3L75h1VX8k0ALNEoQyCQGvI=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:1b:af:ea:ba:58:7c:43:bb:14:6d:0e:56:50:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Jun 13 23:00:29 2026 GMT
            Not After : Jun 14 23:00:29 2026 GMT
        Subject: CN=493e6fc422493e858c232535928587968f6b8731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:1f:28:f1:5b:28:7c:72:02:b7:8d:02:ae:
                    17:f3:63:33:b0:20:52:d1:1c:13:05:1a:32:0f:6a:
                    86:a0:f3:dd:bb:cf:5a:68:25:ec:06:6e:d5:35:a6:
                    df:b8:fa:b8:2b:36:e9:46:53:27:f2:e5:70:4a:c1:
                    d2:ad:fb:c5:59:aa:ed:a6:1f:00:fc:f1:ad:89:92:
                    cf:04:aa:1b:fc:76:fd:bf:a1:0c:1b:ef:de:ca:56:
                    01:3a:aa:f3:33:5f:58:c7:e9:5d:6d:35:4d:e8:c5:
                    6e:76:c8:8f:a1:1f:e5:27:0c:b9:81:93:e8:4d:38:
                    5c:8b:5f:62:71:73:95:9b:dd:79:cf:2f:20:55:0d:
                    f7:25:b3:bf:27:b4:bb:75:9c:72:f0:10:24:2d:79:
                    24:30:54:f6:3c:a9:b0:a2:6a:1c:63:be:42:43:0d:
                    0d:da:e0:31:f0:53:20:a5:85:3f:3e:13:d5:10:34:
                    d4:86:0d:fe:9f:3b:7b:de:31:2f:93:9f:22:36:b7:
                    4b:3b:1b:35:0f:52:ba:bf:f6:86:f9:bb:48:d4:68:
                    6e:48:9e:4f:c9:c8:b5:4a:70:a9:de:81:6d:2f:cf:
                    04:7d:71:91:cf:c7:eb:80:3c:73:50:85:eb:1f:75:
                    41:f2:63:43:c6:e7:b5:17:16:12:58:8d:6e:11:21:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3E:6F:C4:22:49:3E:85:8C:23:25:35:92:85:87:96:8F:6B:87:31
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:75:90:1a:f9:bd:74:2f:a7:d0:d9:ff:52:e5:9d:87:19:5d:
         bb:45:48:e0:ee:11:6e:c1:05:6b:4d:db:7d:16:e6:af:80:00:
         52:19:3a:8f:7b:4e:c1:5f:7e:6b:21:56:75:c7:17:fd:8b:3f:
         55:ef:46:59:48:c7:ed:06:33:03:15:c5:f6:6e:e4:ae:82:74:
         4c:3c:8e:6d:f1:9a:70:12:07:82:5b:1f:35:8e:bf:08:35:1c:
         22:5e:f8:2e:17:6c:28:00:b3:1b:26:a7:64:87:aa:af:77:1a:
         15:1b:f9:56:0a:95:87:fd:3f:4f:a5:7b:a9:d5:07:fc:44:bf:
         d5:0a:e0:ab:c0:d7:78:cd:a6:02:71:65:14:6b:71:07:35:ca:
         07:09:60:a1:61:f5:62:37:f1:d6:ee:25:91:46:be:34:0e:06:
         d8:58:7c:f6:0f:95:5e:43:39:45:27:df:c5:6f:00:b4:23:f9:
         98:d8:c2:78:d1:af:46:d5:3a:86:b5:a6:84:f2:41:39:d4:38:
         54:95:1e:e8:d6:b9:7f:5e:52:f0:4e:fb:01:91:fc:a7:f9:34:
         3a:cd:36:00:3f:69:0e:68:0f:10:ee:c6:7a:ba:7c:10:b8:e3:
         7a:1a:84:9e:30:86:0e:9d:84:da:ef:00:a2:d4:60:de:27:8c:
         f3:85:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:26 2026 by rpki-client