Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File:                     r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier:          q6XtDxNbq6kCNHXRRKiNojFb9HZWX5cggkVRIxE8+V0=
Subject key identifier:   B3:10:68:AA:63:0C:0C:9F:8D:19:5B:E8:63:2C:E5:05:19:99:28:84
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer:       /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial:       019EC29289033E8878D35F997054BDAB082A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number:          1154
Signing time:             Sat 13 Jun 2026 20:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:43 +0000
Files and hashes:         1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=)
                          2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=)
                          3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=)
                          4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: 0KfxkL0ZXwLhbLTUHoT2/d9iQEoJMUNIv/QH5y04s/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:89:03:3e:88:78:d3:5f:99:70:54:bd:ab:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af935603e52e831537716d458b360192f99a3689
        Validity
            Not Before: Jun 13 20:00:43 2026 GMT
            Not After : Jun 14 20:00:43 2026 GMT
        Subject: CN=b31068aa630c0c9f8d195be8632ce50519992884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:3d:b4:d6:f7:ad:43:e4:88:fd:46:cb:04:
                    57:6d:ea:80:cb:58:35:0f:33:c2:42:e7:0b:f1:2e:
                    7a:45:44:23:2d:01:a0:06:17:e1:bb:60:f8:da:24:
                    d2:01:75:5f:35:2d:f2:c6:d9:79:18:4e:18:81:27:
                    7c:6a:6a:45:c6:18:dd:3a:6d:26:dc:5d:8f:23:81:
                    63:eb:60:f2:7c:e8:6d:35:2e:44:c5:b1:18:9c:24:
                    61:a6:36:b5:89:af:b0:97:ce:01:93:ca:08:0c:8f:
                    06:3e:8a:08:1b:09:0c:e0:17:db:bb:a4:60:5c:75:
                    e0:63:b6:79:bc:cf:b0:42:91:db:08:5a:aa:aa:79:
                    37:e7:b0:ca:53:e0:94:17:2a:eb:cf:27:4f:4b:60:
                    64:dd:0f:f5:cf:80:52:09:f6:e8:cf:c9:f0:82:2f:
                    83:a2:a6:05:38:d1:8f:70:f5:77:c3:d4:dc:86:30:
                    1f:39:0b:c9:fa:c2:8a:c5:8e:76:80:e3:31:03:51:
                    14:ac:0c:da:90:b8:1d:2e:53:14:df:99:f4:86:cf:
                    fb:07:09:4c:a3:59:4a:35:e5:9b:5e:41:9e:2e:2f:
                    40:cb:1d:5e:3f:d2:f6:50:be:03:17:98:43:cb:ab:
                    0c:5c:61:de:a1:9e:7a:5d:9d:d3:d0:e5:34:7e:fb:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:68:AA:63:0C:0C:9F:8D:19:5B:E8:63:2C:E5:05:19:99:28:84
            X509v3 Authority Key Identifier:
                keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2a:55:f0:b9:d0:df:89:ab:63:88:aa:18:71:06:19:03:a2:
         99:01:05:f6:d4:d2:54:2c:75:d6:52:99:dd:4e:d2:32:45:6a:
         db:f3:65:fb:fb:fc:46:0b:22:b8:05:37:0b:cd:97:02:4e:c1:
         22:26:19:ee:fb:60:a1:0f:07:a0:71:5b:38:a4:ab:fd:ef:f5:
         6b:ef:b9:2c:8e:ce:38:f0:30:1e:ed:33:c9:92:a7:5a:c8:1d:
         59:57:cb:26:8f:50:3e:75:b1:94:95:fe:8a:f6:d7:07:4d:ab:
         c9:91:37:73:6f:19:f2:c2:ca:2f:82:02:b9:71:e9:1f:0c:64:
         a0:e5:e0:12:1a:49:21:68:f6:3f:37:66:a6:2d:5e:e8:8b:1b:
         3a:2e:b5:64:31:34:28:52:8b:2c:be:09:ae:16:a6:8d:3c:73:
         ff:e5:e7:49:fe:39:f8:38:05:64:1a:68:85:c2:50:83:ac:ee:
         3a:1c:fb:87:e8:0b:36:5f:29:52:c0:5d:4d:1a:b7:c5:7c:21:
         c7:c1:bb:e2:d3:b8:b1:41:83:87:ce:21:69:b8:b8:31:5a:d4:
         3a:1a:41:e1:88:4e:9f:3e:cd:56:8a:51:8d:9c:10:99:3f:29:
         7a:27:3c:5c:d7:46:74:78:a8:2c:32:7b:a2:c0:51:45:ac:e8:
         78:5f:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:33 2026 by rpki-client