Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          hAv/vCdSwbX9qMCGqjsvWvPITejs9EBJyIFg3hJIzEs=
Subject key identifier:   86:59:B8:C2:AB:26:E8:C4:90:64:74:9A:50:51:E7:0F:3A:C9:6E:A1
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       019EBD34C6B5C88EFC1C5236B74110DCCB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          153F
Signing time:             Fri 12 Jun 2026 19:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:12 +0000
Files and hashes:         1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
                          2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: yIxtCh0zTHQuP7gB7L+410PTltPm94U95c6EXASB5N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:34:c6:b5:c8:8e:fc:1c:52:36:b7:41:10:dc:cb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: Jun 12 19:00:12 2026 GMT
            Not After : Jun 13 19:00:12 2026 GMT
        Subject: CN=8659b8c2ab26e8c49064749a5051e70f3ac96ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:0a:cd:79:0a:43:d9:b3:0f:0c:43:32:2e:
                    c5:4d:b2:63:a8:8a:58:72:2b:df:8a:d2:2a:08:d0:
                    7b:ec:51:d4:0c:18:e4:b5:64:fb:52:1a:88:ca:71:
                    22:a0:ce:02:80:42:53:ed:de:74:c2:dd:f5:d2:5c:
                    3b:3a:17:16:8e:02:60:fa:c9:e5:c2:23:b2:b4:62:
                    09:68:f9:76:1b:f8:28:7f:66:b3:24:c1:8e:18:36:
                    9f:0c:3e:4d:36:e6:d0:58:b5:34:75:3f:07:df:88:
                    7a:0b:88:3b:0e:fb:51:fd:3d:74:a6:f0:81:d4:58:
                    4e:85:93:a4:77:a4:66:63:e1:1b:93:21:5a:41:fe:
                    a4:b7:98:b8:29:29:bc:4a:53:0c:bc:1a:0c:73:28:
                    78:6b:f3:bb:4e:0e:4c:40:13:8e:f1:b6:18:a6:8d:
                    0c:a8:fa:65:2b:5b:61:83:63:35:4e:21:3d:f7:7d:
                    d3:0a:3a:f1:89:25:9b:8e:5f:7f:53:1d:10:cb:b5:
                    2e:bd:24:22:dc:c2:d4:44:6b:22:37:7f:7b:a8:a3:
                    40:2c:ac:4e:50:06:26:29:5d:f5:06:e5:8b:04:58:
                    d1:1c:de:33:f4:8a:d6:8c:bd:a9:95:60:98:28:96:
                    22:e6:27:13:7a:72:d7:a6:31:62:2c:c7:3f:d2:2f:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:B8:C2:AB:26:E8:C4:90:64:74:9A:50:51:E7:0F:3A:C9:6E:A1
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:c1:9a:8f:95:2f:48:f8:a7:c2:eb:84:92:18:0e:0d:14:
         1c:cc:bc:d2:83:d4:9b:9f:01:4e:24:af:08:00:c7:7e:35:39:
         a8:2c:6a:7f:54:4b:38:e7:40:9e:8b:cf:43:95:75:51:de:ad:
         ba:70:ea:40:78:5d:cd:a2:71:d0:5e:4a:bf:6e:0f:f8:ea:c7:
         ad:0d:71:06:41:fa:39:8f:f8:31:df:a8:1a:7d:f6:fd:80:bb:
         ae:b8:59:d1:0a:67:64:20:fb:97:1a:ca:96:d5:ed:36:c1:d5:
         57:42:4d:17:ef:e5:14:47:86:14:c6:29:4f:30:cb:f3:0b:44:
         ab:2f:62:d7:f6:15:33:65:2c:41:9d:43:3a:94:a4:e1:ea:28:
         56:db:06:63:80:95:0e:c7:8b:c9:7c:78:b0:cb:73:94:71:7b:
         d8:0b:c1:b8:3c:b3:47:41:02:7b:cf:64:a3:06:e4:2d:33:55:
         43:99:19:58:a5:59:4a:e0:d3:db:d2:75:0b:45:e1:f1:75:8f:
         db:06:fc:d5:82:db:e9:ac:65:d5:10:36:d8:ca:f4:d8:a7:89:
         b9:68:0c:7d:1c:ca:d1:05:fe:e4:55:ec:49:6c:36:61:9b:3f:
         57:4b:e9:c2:a9:5a:58:3c:2b:93:32:88:29:93:41:61:8b:43:
         b4:95:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:18 2026 by rpki-client