Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File:                     NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier:          hSkTBlbRhBJrkq6YBWkLmy29G0v8rvi+K2Z0twiiu9A=
Subject key identifier:   36:AC:FA:E8:68:D6:BA:87:A5:61:61:37:AE:75:5E:72:BD:D9:ED:71
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer:       /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial:       019EC17FE0261B2A7C617187389927F78D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 15:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:43 +0000
Files and hashes:         1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: +1BTzdXwdmh9yc84BvnROph8KbNQrGncDIKAU7a2VOQ=)
                          2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:e0:26:1b:2a:7c:61:71:87:38:99:27:f7:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
        Validity
            Not Before: Jun 13 15:00:43 2026 GMT
            Not After : Jun 14 15:00:43 2026 GMT
        Subject: CN=36acfae868d6ba87a5616137ae755e72bdd9ed71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:88:de:11:b8:57:78:ad:d2:28:91:5a:df:
                    17:04:2e:87:61:7d:dc:23:c9:c0:b0:be:8f:ee:44:
                    e8:d6:15:86:96:79:72:a9:d4:47:64:4e:20:21:3a:
                    5d:c5:18:7d:36:bc:02:31:00:d3:68:8f:d6:13:42:
                    45:f8:9b:51:91:61:77:3f:73:9e:86:5d:42:f3:32:
                    5c:c6:f9:28:9b:97:d9:90:c1:05:20:a7:ac:03:89:
                    c1:8b:69:72:77:10:7c:03:b1:32:ca:ab:b8:6e:c3:
                    a6:2a:01:51:61:41:88:c9:5f:de:95:78:dd:5e:a7:
                    71:16:a1:04:53:3d:ee:e7:4e:36:92:eb:f4:41:40:
                    ce:d8:98:a1:9a:72:92:78:d0:bb:1d:9a:b4:2f:3d:
                    fc:2e:7c:15:86:c2:f8:6c:8d:08:40:ac:9d:53:c9:
                    9c:a7:cb:6c:b7:29:e1:6b:71:36:83:0f:f5:32:b2:
                    45:90:2c:81:39:ea:49:0b:33:a8:f3:ba:14:36:07:
                    b3:5e:9f:26:f6:f4:b7:35:0d:15:81:26:9e:9b:54:
                    bc:7b:fa:69:2a:4a:5c:75:f3:87:89:95:75:d5:8c:
                    be:3a:c8:6b:99:0c:d6:04:1a:f9:47:de:4d:9e:3b:
                    ba:1e:5f:1a:78:7d:18:d4:9c:8d:19:25:6b:3a:12:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:FA:E8:68:D6:BA:87:A5:61:61:37:AE:75:5E:72:BD:D9:ED:71
            X509v3 Authority Key Identifier:
                keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:b4:ec:96:91:eb:38:b7:15:e1:a0:06:0d:4f:ba:7b:9c:
         9b:34:33:16:e7:b0:d7:23:1c:3b:5f:d7:86:2c:0b:62:69:69:
         37:9b:14:b3:40:fb:e5:b3:3f:37:2e:52:ec:65:3d:0f:55:cf:
         c4:37:07:df:08:5f:5c:6c:e1:55:a5:43:d0:bd:84:15:d7:b6:
         5e:03:43:c5:0e:0c:26:76:40:7a:1e:81:95:33:66:68:10:b0:
         7b:4c:fb:f6:12:f0:c8:9b:0a:3d:ce:12:92:ce:8a:33:bf:3f:
         e1:b4:ea:c9:0c:72:fc:bc:15:a4:52:8d:b3:e9:93:2b:ee:24:
         2f:fe:b9:55:3b:81:59:85:0c:60:c4:6c:6c:fa:4b:d5:b0:2e:
         6a:71:50:10:bc:0d:56:d0:bd:4c:a5:1a:34:f3:55:99:b1:0e:
         8a:ac:d6:c0:f0:ed:65:58:81:cd:1b:7c:c4:1f:97:0a:cd:f8:
         30:b2:04:a6:a2:51:93:de:22:29:78:f0:15:7e:91:6c:d4:87:
         09:20:e9:8f:5a:ab:ad:22:57:9b:29:53:5f:4d:54:14:c5:0f:
         16:17:da:c7:9a:aa:6d:e3:29:8b:ca:09:e8:8d:d2:c8:f9:d0:
         d3:fa:94:d8:53:34:61:24:2a:a0:4f:9d:f6:0d:85:e1:aa:26:
         a1:c9:25:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf+AmGyp8YXGHOJkn940gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjYwNjEzMTUwMDQzWhcNMjYwNjE0MTUwMDQzWjAzMTEwLwYDVQQD
EygzNmFjZmFlODY4ZDZiYTg3YTU2MTYxMzdhZTc1NWU3MmJkZDllZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqqI3hG4V3it0iiRWt8XBC6HYX3c
I8nAsL6P7kTo1hWGlnlyqdRHZE4gITpdxRh9NrwCMQDTaI/WE0JF+JtRkWF3P3Oe
hl1C8zJcxvkom5fZkMEFIKesA4nBi2lydxB8A7Eyyqu4bsOmKgFRYUGIyV/elXjd
XqdxFqEEUz3u5042kuv0QUDO2JihmnKSeNC7HZq0Lz38LnwVhsL4bI0IQKydU8mc
p8tstynha3E2gw/1MrJFkCyBOepJCzOo87oUNgezXp8m9vS3NQ0VgSaem1S8e/pp
KkpcdfOHiZV11Yy+OshrmQzWBBr5R95Nnju6Hl8aeH0Y1JyNGSVrOhL6awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDas+uho1rqHpWFhN651XnK92e1xMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAS07JaR
6zi3FeGgBg1PunucmzQzFuew1yMcO1/XhiwLYmlpN5sUs0D75bM/Ny5S7GU9D1XP
xDcH3whfXGzhVaVD0L2EFde2XgNDxQ4MJnZAeh6BlTNmaBCwe0z79hLwyJsKPc4S
ks6KM78/4bTqyQxy/LwVpFKNs+mTK+4kL/65VTuBWYUMYMRsbPpL1bAuanFQELwN
VtC9TKUaNPNVmbEOiqzWwPDtZViBzRt8xB+XCs34MLIEpqJRk94iKXjwFX6RbNSH
CSDpj1qrrSJXmylTX01UFMUPFhfax5qqbeMpi8oJ6I3SyPnQ0/qU2FM0YSQqoE+d
9g2F4aomockl9A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:58:37 2026 by rpki-client