Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File:                     AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier:          +XYqzV/wzEi+n6gB09KGm0sQIxvXkXPLMoRTD4q3J5c=
Subject key identifier:   6E:57:F3:D6:16:48:EB:68:84:AE:50:9E:4C:84:5C:17:ED:C7:88:CF
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer:       /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial:       019EBE7FB7FD9A10BCD41D94E59AB63EB885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 01:01:41 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:41 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:41 +0000
Files and hashes:         1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: apzZNKqEC+DHDt1PyP4U+XmjcfxGsJQHwAjuMv8EXh4=)
                          2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:b7:fd:9a:10:bc:d4:1d:94:e5:9a:b6:3e:b8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
        Validity
            Not Before: Jun 13 01:01:41 2026 GMT
            Not After : Jun 14 01:01:41 2026 GMT
        Subject: CN=6e57f3d61648eb6884ae509e4c845c17edc788cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:3f:9b:a9:50:ae:45:50:56:3a:c5:21:21:
                    4f:1f:42:d5:61:52:0f:48:60:57:b5:11:2a:42:b8:
                    9c:ff:ce:44:49:95:f0:98:58:06:9b:a9:9f:bf:0c:
                    f0:ad:be:db:7f:f6:de:52:e3:59:36:38:26:77:79:
                    cd:9b:d8:09:af:6b:c0:6b:82:d6:84:9e:c5:73:5c:
                    70:91:30:3a:b2:74:4e:b1:88:a3:0f:b6:42:08:a4:
                    8f:64:da:1b:80:00:0e:66:dd:23:fd:e9:e5:df:7c:
                    bd:78:55:37:b8:e1:23:89:21:7d:06:d7:26:ef:d3:
                    50:d1:02:82:d4:0e:f4:c8:bd:da:00:3f:f5:2f:88:
                    a3:46:f6:60:cb:f6:51:4b:9c:e5:31:e1:f5:85:43:
                    b2:24:57:37:14:c1:22:bb:9d:fc:f1:b8:7e:1e:11:
                    34:f3:be:42:d5:a0:3a:d0:44:bc:cb:0d:0d:2b:fb:
                    7d:92:ca:32:b7:83:be:a6:ac:a9:6f:2f:d3:ee:90:
                    f9:6d:d0:f9:e4:c7:8a:33:00:bc:ca:ae:fd:92:4c:
                    57:f0:45:96:7f:b1:ac:5c:43:7a:c6:05:bb:6f:8d:
                    f4:e1:b8:82:df:8a:df:69:e2:f4:94:77:97:8b:cc:
                    9c:e3:4a:3f:2a:77:1b:a6:dd:77:e8:68:d6:e7:11:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:F3:D6:16:48:EB:68:84:AE:50:9E:4C:84:5C:17:ED:C7:88:CF
            X509v3 Authority Key Identifier:
                keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:58:a6:e8:c1:61:07:be:d8:a0:4b:0a:ee:b3:fd:b3:ca:
         98:24:b5:b9:87:c7:9a:52:25:9a:4c:b9:ef:7a:c7:d9:49:da:
         f5:5a:e6:a5:99:11:99:1c:9e:a7:a3:2b:0d:16:bc:64:9f:0f:
         ae:11:fe:22:27:0c:91:bd:e5:8d:94:eb:ae:60:07:ac:ec:e2:
         8e:2b:60:c5:f5:8e:71:1d:70:c6:6b:21:35:59:b2:a6:f5:f9:
         3a:b4:e9:ac:9d:f1:58:76:b2:a6:2c:2f:04:74:b7:ff:49:a9:
         8f:13:a0:10:49:ca:67:d4:b5:29:d4:b8:1c:eb:5f:7d:71:9e:
         5b:ec:98:a0:0a:f4:1c:ec:50:23:d1:86:e8:46:fc:4b:46:f9:
         27:69:76:71:ba:c4:bd:c6:c0:c8:af:7a:52:c1:35:da:18:11:
         00:3f:e5:92:b3:ac:7b:33:d2:a5:cf:9f:28:c8:76:29:61:61:
         8c:d7:ca:9d:48:33:6c:40:19:0a:01:26:e6:64:da:0c:1e:73:
         3c:9f:38:4d:9f:45:7d:b6:7a:a4:bf:69:e0:f4:a0:3e:11:0a:
         aa:36:ac:8a:0e:0e:06:2d:cf:12:ba:31:d5:0e:90:35:f7:34:
         25:ad:f7:77:c7:24:a4:fa:b1:d0:33:eb:d1:74:00:93:75:9a:
         b3:5b:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:17 2026 by rpki-client