Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File:                     n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier:          nCJC+T7X1iUeUXeadiaKBDU2MbCOy0PXoM28TZW8VbY=
Subject key identifier:   20:D1:32:FE:6A:E0:44:B4:06:6F:A7:D8:D6:86:CC:68:7F:91:A0:B4
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer:       /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial:       019EC1EDB35EFF316AC1A56727D75733FA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 17:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:41 +0000
Files and hashes:         1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
                          2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: c/tk0H5DuqM6EM5IXGawPcq35aa1uM0vhKwi8s5WMek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:b3:5e:ff:31:6a:c1:a5:67:27:d7:57:33:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
        Validity
            Not Before: Jun 13 17:00:41 2026 GMT
            Not After : Jun 14 17:00:41 2026 GMT
        Subject: CN=20d132fe6ae044b4066fa7d8d686cc687f91a0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:22:60:66:dc:d4:6f:bc:f9:99:0d:3f:cf:
                    6e:07:60:32:31:8f:9a:73:97:a9:e0:14:1b:0a:2b:
                    63:36:17:f7:0d:ad:3a:8e:44:ac:d3:dc:de:da:91:
                    cf:01:51:bb:c0:6c:3f:d4:94:3c:d5:e3:c6:9c:8d:
                    43:d6:dd:95:6e:0c:9a:de:92:6f:f9:34:f2:7a:07:
                    a4:d3:fa:dc:fa:61:93:7a:80:23:51:f5:9c:98:c9:
                    d0:fd:16:fd:9d:e3:16:ce:68:80:0a:31:ec:da:e1:
                    d2:bc:be:9c:d2:09:79:7d:b7:dd:9c:6e:c6:e2:76:
                    27:e0:cd:20:93:ca:74:98:66:99:07:66:eb:6e:fc:
                    70:95:4a:c9:f5:eb:e1:af:f1:b6:97:dd:1c:91:f1:
                    08:4d:8c:a1:cc:83:37:5a:27:77:1a:f4:42:24:64:
                    0a:21:e1:95:0c:65:2c:1f:e3:08:4c:a0:93:aa:f0:
                    08:40:18:61:06:78:79:e1:0c:69:c5:1a:24:1d:0f:
                    c2:53:7b:6c:b2:ad:29:36:d8:ba:ae:f2:61:f0:2e:
                    af:df:a8:25:f3:54:8a:b2:46:d9:c5:59:17:ca:9d:
                    bf:fe:d5:cf:f7:82:04:0a:e1:eb:2a:f9:f0:1e:a5:
                    f0:b6:6f:b8:7c:3d:9a:23:ae:f4:fb:75:83:bd:a6:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D1:32:FE:6A:E0:44:B4:06:6F:A7:D8:D6:86:CC:68:7F:91:A0:B4
            X509v3 Authority Key Identifier:
                keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:52:f9:79:62:86:b6:25:8a:64:e8:1f:45:dc:f4:8e:4c:
         d4:56:f8:d7:d7:7c:44:0a:14:65:45:c6:ea:2a:0c:57:ec:d4:
         e8:3b:84:d2:fa:4e:f5:4c:55:16:34:2f:d4:53:38:13:7a:aa:
         08:87:fe:67:b0:f2:89:93:4d:eb:8c:7e:c9:bb:48:bb:8e:b4:
         52:ad:22:62:3a:c2:b8:c5:90:99:39:0d:59:21:f4:07:d8:c7:
         c5:4e:8d:0c:64:0e:0d:57:24:20:2b:ba:23:b1:aa:c6:91:de:
         5f:75:6f:28:2d:78:26:9a:20:2d:0d:da:eb:1d:4e:d4:ae:de:
         d7:81:02:2c:11:69:80:0b:68:6d:95:65:e7:5b:b2:9d:b5:14:
         cd:24:15:b1:4f:a3:2e:bf:b7:c9:04:00:75:c5:c5:9f:22:b9:
         2d:be:8b:a6:a9:3d:a9:49:cf:07:d3:ba:be:b3:7a:05:d1:0f:
         d8:09:0e:05:25:fb:bf:e8:3d:cb:8d:52:4a:04:d2:94:fb:c5:
         eb:7c:22:56:b1:2c:8d:19:47:32:a2:51:f8:34:d7:ad:04:b3:
         3a:d2:31:6c:f3:6e:69:96:74:6c:8b:46:aa:77:ce:06:8f:98:
         57:1d:59:b0:78:86:ba:b8:09:5e:e2:cb:5d:48:ef:3b:07:c4:
         ec:9b:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:01:19 2026 by rpki-client