Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          Duiujz9UOModNtSboCwHLybb53q28YRb5HNfHG+3Y6Y=
Subject key identifier:   BE:6F:D3:17:52:1C:AC:0A:6F:12:B1:F5:2B:81:26:ED:BD:3D:4A:70
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       019EC337C7C50FAF35D24EB19A4542C7D8A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 23:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:13 +0000
Files and hashes:         1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
                          2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
                          3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: RoOYas5WtLRuCrDuyhW2e1ebFMmGCWUIuvJm60Ur2ok=)
                          4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:c7:c5:0f:af:35:d2:4e:b1:9a:45:42:c7:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Jun 13 23:01:13 2026 GMT
            Not After : Jun 14 23:01:13 2026 GMT
        Subject: CN=be6fd317521cac0a6f12b1f52b8126edbd3d4a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:a6:7d:0b:99:29:04:62:78:4a:8d:04:b2:
                    25:8f:45:01:ac:4b:ed:e5:28:90:3b:69:2b:26:01:
                    ab:0b:8f:18:41:36:64:03:46:54:dc:01:2a:e8:34:
                    5e:63:d0:b0:ac:26:2e:80:8f:5f:69:e4:a3:a3:9a:
                    b2:ee:e2:cb:f3:3f:17:1c:fd:32:00:b0:f7:bb:65:
                    f5:72:fa:11:96:8a:7c:ae:30:85:3f:cc:33:f6:2c:
                    3c:e8:c2:85:18:a5:4f:37:3b:7a:8c:82:7b:d7:d5:
                    ee:86:7c:7d:af:8b:4f:7f:7f:fd:89:48:8c:e0:99:
                    5b:e8:c5:b6:5a:15:13:5c:91:e6:22:b7:a1:ea:b4:
                    d4:d8:64:95:a8:47:a9:96:b8:38:58:2e:80:fb:ec:
                    e4:af:3d:bd:86:d5:d7:ce:60:ea:8c:9d:e3:a6:99:
                    43:06:e3:23:fe:5e:ce:ab:fe:9b:53:60:d3:79:bf:
                    49:d4:a0:a2:c2:40:8b:74:e4:b3:43:68:9b:9e:57:
                    cc:01:fb:37:26:f2:e1:c6:7d:6a:ca:99:c3:0c:b3:
                    27:bd:3b:7b:e5:11:4f:96:42:1c:14:a1:f4:6d:a4:
                    89:5a:bd:eb:68:38:f5:1b:95:bc:5b:f5:fd:a7:cc:
                    a6:33:40:75:c0:ca:24:6b:bf:50:7f:0a:c6:d6:3e:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:D3:17:52:1C:AC:0A:6F:12:B1:F5:2B:81:26:ED:BD:3D:4A:70
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:a7:c8:43:b3:1e:0a:6d:75:79:c2:22:b8:b0:cb:7a:ac:
         12:6c:50:a9:e7:39:ca:b2:cc:a7:bc:d7:89:ad:9c:a8:94:af:
         e0:db:87:38:24:86:7a:c6:d9:2b:9f:2e:b8:14:9a:d2:b1:c4:
         a0:4a:10:ef:38:22:5c:39:48:7d:ba:06:41:a3:5a:bf:57:ab:
         d9:3c:c4:71:d7:9f:78:e1:90:91:f8:80:66:5d:9e:52:dd:ae:
         48:c8:d3:dc:a4:5e:bc:6d:f9:c9:4f:eb:37:39:26:09:62:8e:
         4f:14:dc:bd:9b:4a:f8:17:39:be:6f:0f:96:f9:43:1d:62:6f:
         69:30:a8:aa:df:50:ee:1e:6b:be:ba:b5:66:42:dd:b2:c8:a4:
         e8:2b:be:67:62:0b:07:0e:37:1f:70:9c:fd:ad:c9:f6:73:59:
         94:de:75:ed:2f:dd:4e:c3:a1:b8:21:57:0a:6e:e5:2c:4c:b8:
         c3:21:59:ad:06:18:af:d7:2a:07:db:99:ab:14:e1:38:50:4b:
         01:4f:a7:76:d2:43:8b:76:26:30:b3:99:1a:47:4b:72:68:ae:
         b0:67:5f:76:5f:e5:25:dd:22:8c:4c:fd:05:af:57:ae:6a:fb:
         18:ce:52:15:8b:7d:c5:ab:30:0b:31:ec:90:68:6c:7c:50:fa:
         f9:5c:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:01:59 2026 by rpki-client