Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          9iYh/ymDvhtdn4D9CFoL4nBnnlYS1k581f6CLj2hOn4=
Subject key identifier:   36:D0:D1:83:3B:4F:D7:5F:61:B5:19:E5:94:A4:FC:7C:3F:16:7E:99
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       019EC06DC269E83734D6A5096EA8D5E88EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 10:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:18 +0000
Files and hashes:         1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
                          2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: mgcODk7AHPDcF2Eb68cXdgiUAPdofuiIfCK4cnyhQPY=)
                          3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:c2:69:e8:37:34:d6:a5:09:6e:a8:d5:e8:8e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Jun 13 10:01:18 2026 GMT
            Not After : Jun 14 10:01:18 2026 GMT
        Subject: CN=36d0d1833b4fd75f61b519e594a4fc7c3f167e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:b3:93:6c:ce:24:2d:0f:d3:19:f4:db:c1:
                    2b:75:1a:27:22:1b:5c:c8:40:5f:d8:2d:70:94:c8:
                    f2:d3:cd:d0:43:9d:6b:ab:b8:94:40:4b:3d:b2:e6:
                    96:0e:e1:b5:8b:27:60:9f:19:1b:4e:55:a4:76:93:
                    81:1e:68:20:f5:bc:6c:5a:c4:7c:f5:22:8a:ff:bd:
                    6e:c9:21:91:2a:e7:88:a4:c2:a7:39:f9:4b:2d:e6:
                    87:be:27:bf:3b:b3:b9:9c:a6:d5:e6:c9:89:7e:a8:
                    15:c6:fe:9f:9a:19:d7:ef:d4:d4:91:7d:e0:38:a1:
                    b1:ce:64:5b:1f:ca:b7:6a:3e:4d:a1:d3:d8:b4:8d:
                    47:58:a1:20:6e:b6:64:fe:e3:e5:23:66:a3:24:ba:
                    9a:8f:d0:f3:7a:79:e7:c1:05:5d:7f:8a:ba:b2:77:
                    86:7b:20:9e:56:3a:5b:a6:8d:35:5e:84:11:cc:f6:
                    0a:99:17:16:94:f3:fe:32:c1:5f:54:6f:25:be:58:
                    f4:99:88:b7:a6:c5:57:0f:05:a4:9b:48:c0:da:bc:
                    65:b6:f3:e5:01:99:2f:ae:14:af:a6:e8:0a:45:09:
                    33:01:27:3b:ff:b5:e0:f4:95:72:c0:1e:86:e6:49:
                    55:8d:fa:bf:85:df:9c:b3:05:f1:cd:3f:93:41:79:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:D1:83:3B:4F:D7:5F:61:B5:19:E5:94:A4:FC:7C:3F:16:7E:99
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:73:ef:09:5c:6b:9c:7b:b2:33:09:bd:e0:c3:9b:17:01:
         ff:76:2e:81:b4:c2:84:4d:4e:57:12:8b:64:90:94:46:5b:7d:
         97:ab:13:84:64:97:57:cf:dd:7d:34:cd:f7:7b:61:a0:97:d9:
         24:60:fd:2d:f9:0b:2a:2d:76:9e:91:af:ba:64:6b:3f:33:e6:
         36:a5:f5:cf:a8:f9:25:dd:2f:9f:63:e4:77:39:63:93:38:05:
         81:a3:b4:4d:46:b7:b2:0a:68:2e:16:32:97:d8:66:c2:64:64:
         62:b6:e6:17:c7:0f:88:0f:e1:54:1e:48:3c:75:c1:8e:46:3a:
         66:44:4c:bc:02:3a:e0:09:86:32:eb:8a:11:b6:fc:b9:fd:1f:
         9f:5f:05:3e:0f:98:ca:b7:cd:39:98:f6:c6:f3:3b:24:3e:00:
         de:6e:f8:60:7a:7c:59:93:6d:94:ed:bf:69:be:c2:d3:68:83:
         21:35:bf:55:f2:56:23:64:73:0b:5a:7b:42:07:cf:66:1a:21:
         35:07:79:4c:ee:96:05:6d:69:5b:8b:0c:16:a6:16:f1:d5:4e:
         76:1c:bc:74:4e:b9:48:85:aa:0e:a5:24:49:77:16:60:01:90:
         a1:98:f9:47:bd:96:d2:ba:81:23:5f:6f:d4:4e:8f:73:2e:4e:
         f5:d3:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:39 2026 by rpki-client