Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File:                     rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier:          noUw/jCGohP7wL95P0hciCBAAOj2QiNB4ppAp8DvHA4=
Subject key identifier:   E5:04:55:58:46:ED:FE:F9:B9:54:BB:4D:43:91:BC:04:11:AA:97:89
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer:       /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial:       019EC337C86637037AF7432E23FC7E0929E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 23:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:13 +0000
Files and hashes:         1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
                          2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: jmcA4mFf/Q6pxFEOPYh2+96GHOFxDDyD/32qNJnAZpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:c8:66:37:03:7a:f7:43:2e:23:fc:7e:09:29:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
        Validity
            Not Before: Jun 13 23:01:13 2026 GMT
            Not After : Jun 14 23:01:13 2026 GMT
        Subject: CN=e504555846edfef9b954bb4d4391bc0411aa9789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:ea:91:ff:14:ff:8f:5d:35:83:af:aa:ff:
                    46:03:55:9a:49:70:7b:d6:ee:1d:47:28:0f:bb:42:
                    72:c0:bc:65:b9:3c:c3:67:67:ad:c6:d0:8c:94:2e:
                    c5:79:9d:24:ef:db:c7:29:40:01:ef:9e:a6:be:73:
                    8f:63:27:c4:50:23:6c:97:6b:87:46:82:ea:52:f4:
                    ec:45:f2:8f:1b:ba:d3:d4:8d:18:9e:53:c4:20:0f:
                    0d:29:e4:76:18:28:3a:6b:0e:39:79:7f:b1:4d:d0:
                    d5:8d:79:52:25:8f:5b:dd:c0:af:01:a8:66:72:73:
                    f5:d9:40:34:e5:47:88:36:df:68:06:ee:4b:9a:b1:
                    82:fd:0c:84:e4:cb:58:63:30:3a:b2:82:a1:8e:59:
                    8e:74:ca:ac:63:ff:cf:de:9c:e6:e9:e4:85:de:7b:
                    57:65:7b:a7:0b:bf:5a:18:5f:4e:ec:9e:eb:48:ed:
                    5c:9b:cb:b7:1d:96:c7:6a:3a:69:ec:2b:ff:ef:88:
                    76:5a:c8:74:4a:01:0d:e2:71:8a:f6:8a:5a:6f:21:
                    66:d7:fa:85:69:df:ee:f1:a7:a2:f0:54:e2:c3:d2:
                    16:ac:91:e4:91:13:89:32:28:f9:cf:85:23:1a:d6:
                    2b:3a:11:46:56:5e:89:df:0b:35:e9:52:26:ea:24:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:55:58:46:ED:FE:F9:B9:54:BB:4D:43:91:BC:04:11:AA:97:89
            X509v3 Authority Key Identifier:
                keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:c0:62:1b:e9:a7:89:f7:a5:c3:ee:86:a9:29:ec:93:b3:
         18:aa:aa:2a:00:37:d4:b7:b8:28:dc:00:c1:ba:48:e2:69:05:
         1b:44:0b:9d:bf:64:fa:d6:e3:ff:e7:8d:89:dc:92:2d:e4:53:
         32:d3:ee:ad:9c:54:b9:fe:3e:09:8c:17:f2:8f:0c:97:9f:9d:
         06:11:e3:d8:7c:c6:4d:8b:d1:a3:1d:de:a2:94:dc:9d:5f:e4:
         10:20:42:57:ad:6d:99:16:f5:fd:0a:3a:19:2f:91:26:b0:4b:
         a0:31:8d:ce:e3:db:ed:71:c0:8b:ae:e5:28:bf:8a:54:ea:0d:
         54:27:f5:29:64:3e:d1:46:09:7a:78:40:3e:f6:59:f8:12:b4:
         5a:a3:9d:4a:29:1e:da:29:c4:0a:7d:1d:a9:e7:89:be:bc:0e:
         5e:c9:73:36:fd:ac:d6:98:55:a0:a8:59:b9:ab:22:89:9d:e6:
         27:09:22:32:f9:0a:11:c5:cf:dc:48:bf:87:b8:18:e4:b0:26:
         02:c5:ab:e5:1d:4e:ca:b9:21:ea:15:f9:64:57:62:35:bd:95:
         ff:dd:9e:c2:cb:30:cf:67:09:82:c0:1d:3d:2a:40:e0:a7:39:
         af:47:1c:a3:03:d7:93:bd:11:05:1f:ad:bc:0e:a7:40:fe:db:
         fd:e9:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:46 2026 by rpki-client