Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          2eXKMpTTfA6jN9qos7YOzQrQOaDCaU+LVsD4bRPjbV4=
Subject key identifier:   61:41:F1:0A:85:81:F1:78:30:DD:CD:A8:F5:3E:1B:90:56:08:E0:7D
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       019F10E54DE1656E6A8914A5943E6FD4D1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          0E84
Signing time:             Mon 29 Jun 2026 01:01:30 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:30 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:30 +0000
Files and hashes:         1: lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa (hash: IX8Zv7qUtgpAAei5zm/E62pQBDNZVJrE1Mk34lY2Lrc=)
                          2: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: P6QBbGVyYNmDu7SaL4swU3ypqBuROcVGSX2LV9eR5K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:4d:e1:65:6e:6a:89:14:a5:94:3e:6f:d4:d1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Jun 29 01:01:30 2026 GMT
            Not After : Jun 30 01:01:30 2026 GMT
        Subject: CN=6141f10a8581f17830ddcda8f53e1b905608e07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:09:d1:f2:70:24:b6:b3:2f:06:11:51:df:
                    1c:e6:77:9d:55:7c:39:6e:b8:7c:0a:9f:43:6e:ec:
                    d0:fa:54:61:d2:77:b0:b5:b5:0c:3e:62:aa:19:f1:
                    ba:5e:c5:16:7b:3e:ea:f8:8b:71:e5:4c:09:58:59:
                    9f:67:06:ec:78:24:0d:3a:f2:e2:08:90:cf:c9:4e:
                    bd:e4:e2:aa:21:2d:81:7b:36:26:ac:93:75:a9:f0:
                    cc:5b:62:2a:29:07:0d:3d:f5:33:76:b1:bc:61:89:
                    75:b6:38:18:f5:72:e1:fc:7e:3d:04:80:5d:10:7a:
                    cc:f6:a8:63:ef:a3:a8:0b:d2:1c:73:44:08:16:17:
                    bd:19:88:c4:3b:75:60:1d:f7:ba:8b:70:e9:46:ff:
                    10:03:6f:e6:eb:d4:ed:c1:9b:4e:48:25:d9:71:9d:
                    6c:51:58:ba:41:f5:66:bc:52:9d:79:22:09:5b:aa:
                    e6:5d:13:4d:1f:44:ae:d0:89:54:8a:ba:61:db:68:
                    d4:c9:37:8b:c5:a6:d7:dd:44:9d:18:3c:b4:6f:c1:
                    9e:af:04:9e:bf:24:1f:fc:54:ef:06:f7:c1:20:55:
                    d9:39:83:df:e3:c4:51:e8:bf:4e:4d:67:12:6d:f3:
                    52:e7:5f:e5:1f:22:9a:32:14:c3:ee:fe:9c:e0:ca:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:F1:0A:85:81:F1:78:30:DD:CD:A8:F5:3E:1B:90:56:08:E0:7D
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:b1:d3:03:fa:e8:fc:20:5a:03:97:db:7b:9b:24:41:7a:18:
         65:e9:5a:93:2e:fa:ef:d3:f4:cc:be:42:ea:eb:fd:10:97:d8:
         e5:0c:2f:fd:9b:18:ef:27:21:29:dd:74:4e:21:df:e8:a3:2a:
         0f:a6:02:6c:0d:7c:6d:54:bc:26:7f:88:a8:ac:42:1d:47:da:
         7a:a8:99:7c:ea:3c:95:7d:3d:8d:24:e5:59:26:64:a4:41:83:
         1d:ce:d0:ef:9d:e8:82:a9:44:91:ca:0f:b7:20:fc:8a:b6:4c:
         8a:69:15:68:f1:de:49:a3:72:d4:b5:4e:a6:b1:67:a9:91:f7:
         01:52:7c:61:32:1a:3b:99:4d:ca:2b:50:f5:51:f4:3f:d0:e5:
         af:ad:38:0f:32:86:fe:8d:23:cc:61:fa:2e:e8:d7:1d:90:73:
         40:cf:b1:9c:cf:82:dc:3d:54:84:a5:bf:43:49:3f:0d:dd:13:
         2d:c3:a1:19:c7:0b:90:16:12:bc:42:e2:35:73:ad:78:64:c3:
         b7:f5:c9:23:08:e1:6e:41:8c:63:a9:7f:52:c3:24:25:a8:d2:
         46:69:0c:2f:56:eb:6f:11:f1:50:5c:68:78:ed:c1:3d:1a:9c:
         fa:75:14:df:96:ec:54:9c:b3:48:aa:ff:fc:ed:e1:d8:85:a1:
         ab:0a:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:24 2026 by rpki-client