Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
File:                     04nufcekvqjSach0bP59NhmNIh4.mft (raw, json)
Hash identifier:          EIzVNu2Sgx+KG9UWt3CSzDSgfGcBni/6xQs+ga/mWpQ=
Subject key identifier:   2C:D4:8D:73:4B:01:70:72:89:E2:7E:E9:18:CC:54:A8:1C:BA:61:6E
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Certificate issuer:       /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial:       019EBF919670879B4E3B9E6DD6B357F0766F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
Manifest number:          0185
Signing time:             Sat 13 Jun 2026 06:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:49 +0000
Files and hashes:         1: 04nufcekvqjSach0bP59NhmNIh4.crl (hash: 7XQRJKGnW/n8bEuFzMQME5/25oLTXigDZOTOLEPWhM4=)
                          2: DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa (hash: 1IKdEVdxinUDX4GEoCU9iDa0wsb9FYEO+VbnWoVZHRQ=)
                          3: uldmgPFlTuQeBt-ipePLSPYN-eI.asa (hash: kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:96:70:87:9b:4e:3b:9e:6d:d6:b3:57:f0:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
        Validity
            Not Before: Jun 13 06:00:49 2026 GMT
            Not After : Jun 14 06:00:49 2026 GMT
        Subject: CN=2cd48d734b01707289e27ee918cc54a81cba616e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:0c:0c:f7:9a:e2:a6:0b:04:12:ea:d1:1a:
                    b1:ae:32:f0:14:c3:f7:49:54:a1:79:df:a2:95:87:
                    62:d5:30:62:4a:1f:a2:c6:b3:18:86:49:06:d0:db:
                    5c:8d:51:43:d1:9d:fa:fb:26:e3:fa:d4:df:ed:1d:
                    63:78:9f:b0:6d:a7:45:26:9e:ab:11:5c:ca:c2:74:
                    47:cd:df:8e:ba:72:ec:ba:c8:f9:9b:0c:e1:a2:5a:
                    80:c0:d5:1b:71:db:4c:48:16:c6:75:11:4e:b5:1d:
                    90:cc:0a:b6:31:ee:97:4a:53:10:14:d1:5b:44:32:
                    57:2b:51:6d:99:92:c9:e2:4e:52:04:65:67:db:67:
                    db:3f:23:0e:1c:44:25:a8:ac:a6:17:45:82:2d:4d:
                    11:ef:3e:68:31:1a:85:c1:e8:8e:76:79:2f:a1:fb:
                    6b:36:60:25:c2:6d:ae:e6:96:14:cc:39:ee:60:7e:
                    b9:54:b1:9b:75:d8:9c:de:bb:9e:63:f7:4c:2e:d0:
                    0b:39:97:50:59:51:5c:4d:10:90:90:70:6d:86:c0:
                    44:3c:ef:5a:b0:1f:da:89:77:78:cd:5c:9b:0f:6c:
                    e2:ee:17:3a:60:40:ee:d0:38:14:54:1c:eb:e6:31:
                    97:46:c4:01:33:08:1c:73:04:f8:6c:18:51:f8:9d:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D4:8D:73:4B:01:70:72:89:E2:7E:E9:18:CC:54:A8:1C:BA:61:6E
            X509v3 Authority Key Identifier:
                keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:6f:0c:1b:e2:86:b7:44:02:56:61:c7:24:16:b3:04:b8:
         93:a4:9e:66:cf:ea:d3:ed:d3:b9:e4:4b:a5:34:dd:87:ba:39:
         f3:de:5d:09:de:94:8f:90:1f:ee:ea:5a:27:c6:43:cf:81:4b:
         ac:d7:6b:39:4b:7b:b5:cd:9e:39:25:bc:f7:1c:b8:06:e7:a3:
         ed:f4:bd:93:a9:c4:22:91:a1:0f:b4:ba:3b:71:67:06:f9:50:
         ce:43:c0:d0:84:94:fe:b0:8a:3e:b3:4f:fa:8b:46:a4:4a:3a:
         af:77:c0:b3:fe:1b:b2:28:c1:06:98:69:55:5e:71:0b:4a:66:
         7e:46:aa:9f:f6:a7:7f:d9:21:b6:72:e5:a4:e7:26:07:13:cc:
         4e:9b:e3:b0:7a:45:0b:1a:ad:89:f7:cb:9f:e3:33:18:dc:89:
         eb:28:87:0a:07:37:c5:d5:38:5a:f2:b9:20:fd:88:cf:e0:5e:
         64:13:99:30:89:b2:a7:68:71:0e:94:14:7e:35:29:29:e4:4e:
         b9:f5:1a:52:c5:66:43:74:70:d1:ad:bf:64:2d:e9:86:a3:5f:
         51:c4:8a:07:06:96:12:04:7c:93:3c:c8:8b:7f:d0:b0:53:a5:
         95:f6:ba:c3:50:75:25:e3:e8:3e:f0:da:01:35:8e:2b:bc:16:
         5f:9a:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:08 2026 by rpki-client