Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          pHzBXujYObTMVvx/nXQ/gG9Ke+JYn33Wd+zi34NWi7Y=
Subject key identifier:   06:A0:71:B4:86:71:F9:F8:5B:C1:21:6D:B8:44:6B:5F:36:71:51:62
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019EC25BB0D5D32C4F7422699A43B2C81A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0DDA
Signing time:             Sat 13 Jun 2026 19:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:49 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: qkZP+qGUgNPXIyDAN/0xRmkTv9fWFtswN0266U8y8ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:b0:d5:d3:2c:4f:74:22:69:9a:43:b2:c8:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Jun 13 19:00:49 2026 GMT
            Not After : Jun 14 19:00:49 2026 GMT
        Subject: CN=06a071b48671f9f85bc1216db8446b5f36715162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:a8:10:4a:28:59:ba:47:e0:d9:be:ed:14:
                    78:93:50:75:bb:16:c5:11:03:fb:0a:84:d2:97:68:
                    78:c1:6d:00:a9:ac:48:38:6c:c0:5a:71:38:b2:b4:
                    8e:75:ee:91:d7:e6:60:9d:d4:b3:bc:49:84:ba:fd:
                    28:8e:43:44:e6:24:a0:12:3d:9b:ca:e0:92:70:ea:
                    b4:bd:fc:9e:ea:d9:22:b0:f4:e9:27:5c:28:fe:ca:
                    6d:02:b9:81:1b:70:5d:be:a1:2b:57:3b:f1:1e:06:
                    33:57:31:4e:33:b4:db:5e:62:87:d6:27:3d:7e:b5:
                    10:5e:c0:60:9d:e1:5e:d7:d5:94:07:06:ca:94:79:
                    70:f2:50:4f:7b:88:02:f7:9d:23:d4:c6:c4:99:3b:
                    e3:58:05:bd:0a:7e:f5:dd:77:af:e7:1e:fa:14:02:
                    cc:2f:5f:71:0d:3a:ef:13:ab:77:14:a6:7f:c5:cc:
                    be:dd:e8:45:4a:b5:09:fd:58:c7:d1:74:b1:39:76:
                    b1:92:79:48:50:aa:0e:a5:51:ac:6e:50:26:9f:f4:
                    f1:f8:70:f8:80:98:0e:67:f2:ad:c6:09:8d:c0:3f:
                    e6:01:9d:26:6a:4a:f8:65:0b:45:3c:43:7e:1b:e0:
                    df:44:a3:65:16:b4:59:c7:10:13:2b:d5:c7:7e:f0:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:71:B4:86:71:F9:F8:5B:C1:21:6D:B8:44:6B:5F:36:71:51:62
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:da:bd:42:71:7e:d2:81:b3:1c:7a:02:55:87:bf:82:06:af:
         a0:33:66:20:3c:df:40:31:80:4c:6c:34:32:df:0f:f2:95:cc:
         16:1c:25:f2:59:4f:4d:38:2c:64:46:f4:54:a5:50:6d:ae:56:
         c2:b9:f5:fa:23:7e:8a:10:33:f4:87:c7:8d:13:be:45:97:82:
         f5:d8:ca:72:c4:fe:80:4e:6f:a5:eb:d6:fe:38:d6:15:1a:bf:
         49:84:a1:2f:6a:89:05:ab:93:b5:40:b8:14:8a:61:05:9e:f5:
         90:a1:a0:42:51:b9:2d:70:2b:b0:43:04:31:ba:5f:2f:a0:d0:
         89:b3:05:99:7e:36:a3:43:69:69:4b:28:fb:e3:3e:4c:17:84:
         4a:9f:59:b2:72:7b:2e:ba:8e:7f:5f:df:aa:5c:4b:61:69:53:
         72:86:a5:0f:dd:6e:71:09:54:32:3a:1e:95:71:af:54:4f:8f:
         f6:f8:7c:57:f3:3a:58:0a:49:4a:45:b4:94:56:ab:72:e6:b5:
         e6:b0:84:d0:26:d0:6c:8c:bf:26:96:a5:3b:7f:b0:07:bd:09:
         da:ef:a3:9e:1a:5d:19:03:6d:16:e8:b1:ce:46:3a:b3:89:f6:
         e9:c9:4a:a8:4d:e3:b6:08:51:05:e3:c8:ab:05:47:6f:25:8e:
         11:49:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:27 2026 by rpki-client