Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File:                     NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier:          Fqt5t/6t5cZTd0b4ikKhR8G/KyKqfaYWFT1PK+/AMok=
Subject key identifier:   82:D8:66:CC:D1:2F:6E:DE:C7:65:DE:3F:57:67:BB:B5:47:E5:B0:09
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer:       /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial:       019EC0DB618FEA96D0C7FE063804D4F5D664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 12:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:03 +0000
Files and hashes:         1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: QsaalvQ7be57xHQOuIdkRCXZ+5+IJfppMv2RwMejbuI=)
                          2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:61:8f:ea:96:d0:c7:fe:06:38:04:d4:f5:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
        Validity
            Not Before: Jun 13 12:01:03 2026 GMT
            Not After : Jun 14 12:01:03 2026 GMT
        Subject: CN=82d866ccd12f6edec765de3f5767bbb547e5b009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:05:72:77:c5:bd:30:11:2e:06:b4:58:33:
                    e1:8b:3b:fb:e6:ac:f2:5d:25:63:69:44:4a:60:18:
                    f9:c3:1d:58:85:67:6b:24:5d:e8:c2:2e:42:d4:36:
                    a9:7b:d7:4f:a9:a7:df:a9:7a:cb:f6:cf:f8:21:b5:
                    6b:c8:ae:52:5a:9a:ac:a7:85:c7:0c:20:4a:65:89:
                    95:f6:65:d4:48:54:3e:20:0f:85:79:7f:34:eb:f8:
                    b1:11:9c:af:02:d7:38:0d:ba:e9:98:04:f1:4b:f1:
                    ca:a0:6b:e3:77:4c:1e:3e:41:25:b2:db:5e:dc:76:
                    e4:68:92:e9:42:bb:8f:d4:6e:c0:c3:c3:8d:c8:4c:
                    4e:b5:dd:7e:08:46:9c:95:fb:6d:c6:47:6b:3a:43:
                    71:d0:26:5e:61:f8:8d:f2:e4:d6:ab:91:bf:f9:ea:
                    f3:1a:f4:86:65:84:0d:8f:8f:ce:56:27:28:c6:8a:
                    b9:8e:54:9c:d8:dd:f1:fb:b1:00:39:fd:dd:92:b2:
                    72:0f:10:74:7b:e7:d7:c4:db:75:91:de:56:18:52:
                    28:8f:58:05:d9:b4:74:b8:e0:6d:65:06:d2:50:95:
                    5a:2f:95:c1:01:96:aa:e3:82:a2:cb:f9:78:63:cc:
                    c1:9e:b5:20:4f:c4:d4:f7:4b:ca:82:db:3d:29:3e:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:66:CC:D1:2F:6E:DE:C7:65:DE:3F:57:67:BB:B5:47:E5:B0:09
            X509v3 Authority Key Identifier:
                keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:77:9c:51:81:2e:b8:01:d8:9e:19:1e:8b:a9:52:c2:c0:
         20:52:fe:85:0a:92:ff:a8:33:ea:cf:bc:8e:4c:a0:1a:61:59:
         cc:85:ba:09:a8:bb:3e:11:ee:5a:b0:d8:49:7a:ad:9b:f4:db:
         7e:37:56:56:99:3a:d0:7d:b4:8e:21:b8:7e:52:2e:f1:85:6b:
         bd:c8:a0:dd:ea:4f:92:1a:0d:1f:ef:86:e0:de:7a:f7:3b:d8:
         d2:fb:1a:c8:f2:f9:2a:f9:41:17:e2:a9:d3:c4:97:0f:06:d4:
         62:64:ba:f8:30:f9:41:8b:2f:8e:2e:44:7e:54:c8:a2:1e:bd:
         40:7b:d8:74:9e:e0:1f:b9:28:d6:bf:d8:e3:c9:33:78:b6:d2:
         52:24:15:9b:a2:92:4c:fd:07:fc:1b:ce:b3:5e:dd:07:cc:fa:
         28:53:f2:91:f5:45:91:df:93:16:a5:82:35:aa:df:f5:6f:f7:
         a6:49:70:bc:1e:32:e7:c7:53:85:b8:7f:57:22:60:30:33:3d:
         af:06:b2:84:12:3c:ab:76:cf:f5:cd:0b:bb:3a:dc:7d:f2:9d:
         06:d2:e7:fc:90:2d:cb:ce:2c:a8:5f:c1:15:02:16:2d:ae:95:
         0e:3e:ab:6d:48:f1:1d:bc:00:f5:95:8b:c2:9b:39:cb:97:b9:
         f7:45:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:35 2026 by rpki-client