Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          bsbOjYmTrowRwmNC9LAWjvMQwO5pq6GlYHBbO0tfgx4=
Subject key identifier:   BC:2A:45:07:8A:F8:66:01:DF:96:D9:32:B8:62:B8:5B:72:10:AE:5D
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       019EC1B75F1E0EC25EF393D7EED4F677B82D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          181F
Signing time:             Sat 13 Jun 2026 16:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:20 +0000
Files and hashes:         1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=)
                          2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=)
                          3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=)
                          4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=)
                          5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=)
                          6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=)
                          7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: qrcVDyhsajbqPMs8nB0GJB8JQR05Ym4QzzeucWhlVVU=)
                          8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=)
                          9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=)
                          10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:5f:1e:0e:c2:5e:f3:93:d7:ee:d4:f6:77:b8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Jun 13 16:01:20 2026 GMT
            Not After : Jun 14 16:01:20 2026 GMT
        Subject: CN=bc2a45078af86601df96d932b862b85b7210ae5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:65:09:e5:f3:40:b1:6e:96:34:88:42:28:
                    f6:96:9b:d8:df:7a:53:84:93:51:07:d7:39:7a:5a:
                    1d:57:ae:e4:ba:0d:a3:e9:91:e3:0c:7b:51:e5:c1:
                    9d:e3:32:57:e9:46:01:8a:3d:35:fd:78:54:ad:40:
                    37:3f:4c:56:2b:be:96:a4:f4:8a:4f:93:7a:d7:82:
                    f3:a5:dc:99:2a:34:7e:c2:b4:74:88:f6:18:d5:d3:
                    68:26:86:35:d3:83:0f:d1:6a:af:29:0a:dd:28:0b:
                    d5:58:cf:aa:17:72:1a:ea:af:d6:02:b3:3f:fd:b8:
                    3d:89:6f:fc:72:8f:00:21:96:f5:12:2b:d9:e1:6d:
                    da:34:a6:ee:f9:5e:00:c1:1c:b9:a2:7f:bd:53:06:
                    e0:b1:94:32:ab:f1:f8:30:c7:ae:e5:f7:2d:78:64:
                    02:1b:c4:22:37:67:83:e5:c0:fb:8b:96:17:1c:d6:
                    d3:0f:f0:6d:d4:20:a5:be:31:2a:3c:7b:71:7b:8d:
                    57:7b:3e:81:3b:9e:87:41:68:6e:41:00:e6:f6:c6:
                    bf:6f:c9:43:a1:0c:3e:dc:d1:6a:34:41:ab:23:f1:
                    43:ee:32:ea:ea:8f:bc:f1:a4:a8:ab:5a:db:71:bf:
                    76:c4:c9:9c:14:b6:29:84:c5:3a:e2:57:a3:e8:19:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2A:45:07:8A:F8:66:01:DF:96:D9:32:B8:62:B8:5B:72:10:AE:5D
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:20:0a:3f:67:3e:56:39:50:12:65:9d:40:15:5d:b7:4f:
         38:92:bf:61:9a:fd:bd:af:a5:88:3c:91:b0:69:1e:a0:15:ec:
         78:d1:d9:11:f8:0c:7f:6d:78:11:e9:88:1e:62:4b:e3:2f:05:
         b2:49:ac:b9:e1:41:eb:55:33:c5:00:51:04:65:db:09:5b:d9:
         9a:7a:e6:f8:71:11:ae:5f:ab:0e:e7:7f:af:83:51:e8:a8:4d:
         c4:bc:dd:4b:d0:6e:34:42:7a:b9:f9:65:92:99:15:fa:16:f6:
         d1:90:d2:d4:c7:b9:d8:d0:e1:28:c9:49:26:da:5c:6d:b6:31:
         6b:d2:1e:40:5c:51:f2:4f:e4:fc:c7:d8:60:71:a5:7b:a0:fb:
         4e:44:1d:d0:d7:ad:4f:bb:93:37:c6:71:21:2b:41:63:ef:f9:
         7d:bd:6d:51:7b:9d:d5:27:c0:91:5f:33:95:bf:96:cd:5e:54:
         24:9a:e5:52:54:6b:de:cc:6a:0a:6e:96:83:30:20:6d:ea:0a:
         45:0d:32:b4:02:d0:2c:e9:3b:5a:3b:37:e5:e5:fb:91:bf:8b:
         3b:1e:e7:f0:2b:65:82:de:f3:ed:d9:11:fd:e4:16:4a:7d:f9:
         a7:31:b3:de:6a:67:87:21:3a:7e:3e:2f:f5:1a:75:1d:ae:7a:
         0c:97:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:47 2026 by rpki-client