Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
File:                     pns_SmTNjc4m56QK9ue24E7tLWw.mft (raw, json)
Hash identifier:          Nic3zxXXV8Ozf2nHqFd3/lscyEOaDqJYRChqa8Vrpp4=
Subject key identifier:   FF:38:3E:8A:A0:96:50:C3:78:EB:29:18:E9:2A:44:84:2B:23:50:76
Authority key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Certificate issuer:       /CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Certificate serial:       019EC25CA66138C8A84E22156746E7C179B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
Manifest number:          10
Signing time:             Sat 13 Jun 2026 19:01:52 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:52 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:52 +0000
Files and hashes:         1: iQdg1bQOlXLuKluffHT5-2l3QwM.roa (hash: VLHupAT/bCStlfIUhgEMjaFGylgBgR6vs2sLtbZvHGM=)
                          2: pns_SmTNjc4m56QK9ue24E7tLWw.crl (hash: uHDARNEr1cZ+RcABHIp4nAWted9LhjUv3q1z/sBRT4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:a6:61:38:c8:a8:4e:22:15:67:46:e7:c1:79:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
        Validity
            Not Before: Jun 13 19:01:52 2026 GMT
            Not After : Jun 14 19:01:52 2026 GMT
        Subject: CN=ff383e8aa09650c378eb2918e92a44842b235076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:9a:1a:91:90:b0:ec:10:aa:27:67:ee:9b:
                    48:6f:5f:8b:5e:f7:10:1b:91:9a:a1:a5:a7:20:f0:
                    91:e4:63:5a:cc:fd:ad:b5:0a:90:3d:72:33:39:47:
                    7d:47:34:d2:27:20:c5:d0:16:26:d4:66:27:80:ce:
                    ef:a4:3a:9d:0e:1e:14:04:1c:e1:85:c1:41:5d:a1:
                    6e:a5:86:28:ab:a8:e6:f1:dc:97:73:45:24:fb:24:
                    5d:2b:54:4c:54:cb:f8:13:da:00:97:b7:20:dd:fe:
                    ed:81:92:15:8d:8e:33:64:62:1f:cb:73:fd:67:e7:
                    38:b0:5c:89:d2:2a:59:f8:dd:61:db:68:ae:f4:cb:
                    42:e1:38:f9:57:5f:8a:4c:1d:dd:0a:ac:2d:10:25:
                    68:db:f4:7a:10:20:28:e4:e8:7e:f7:07:d5:f9:1d:
                    d5:d1:c5:df:0f:1e:c5:89:44:ab:8c:4b:ff:7c:6a:
                    26:b0:bc:95:28:da:85:5a:40:3b:9b:aa:7e:1c:d2:
                    d7:77:16:80:44:cb:e8:49:70:17:cb:08:7e:05:11:
                    61:ec:8d:46:a7:57:bf:58:de:14:2d:cc:42:1f:ba:
                    74:1a:09:45:c9:2a:c7:37:ce:a4:37:37:8f:27:be:
                    c1:b8:3a:02:63:f4:95:91:a4:54:a0:46:12:6c:5f:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:3E:8A:A0:96:50:C3:78:EB:29:18:E9:2A:44:84:2B:23:50:76
            X509v3 Authority Key Identifier:
                keyid:A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:b0:2a:b4:dd:ff:1a:aa:85:88:24:41:6e:62:84:4a:3c:
         51:9f:0d:14:14:6b:b4:1f:d2:25:19:c0:f9:1c:bd:cb:48:2a:
         ea:5d:d2:1a:45:2e:93:bc:b7:78:cb:ca:3f:3c:00:d3:94:74:
         a6:04:6b:2d:b7:08:d8:dc:d8:67:87:98:00:3a:fe:49:65:27:
         a7:02:52:09:19:04:51:73:9b:5a:2e:43:f2:c1:3e:4c:a9:e7:
         82:c0:22:17:ec:ab:0a:fb:b3:18:04:df:94:22:0d:e7:24:5c:
         3f:a1:ab:6f:f8:01:11:28:ad:d2:c8:b7:b3:01:c7:0b:cb:f0:
         f2:04:e9:4b:a0:a5:98:8e:08:f1:ba:d6:46:9d:16:94:42:04:
         c6:c9:b1:79:78:68:c6:09:96:23:d6:62:42:90:77:61:60:8e:
         91:f6:58:d3:73:c2:6f:b3:43:a2:04:fc:1b:7a:fb:61:d7:dd:
         04:47:02:56:78:da:e6:e2:3a:39:24:09:e1:da:e1:9a:08:aa:
         bb:01:7f:2d:dd:b0:4c:c9:dc:02:26:01:c9:83:83:43:90:fb:
         68:a3:54:d1:1c:6d:3e:2b:af:9c:a2:cc:f9:64:90:37:4b:b8:
         17:e0:65:ca:c5:ad:d2:5a:5a:82:fc:37:da:d4:3b:04:cb:ac:
         3d:cf:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:10 2026 by rpki-client