Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          2otECYkMhzDQX2BMm/zb5nQFHT3s+JOH3QPHPayY+ZQ=
Subject key identifier:   BF:A5:CF:58:72:B3:DD:EB:C0:4F:17:01:8C:85:5D:EC:A5:74:68:98
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       019E8D2521EC8665ADF06859E2FD36669906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          0C0F
Signing time:             Wed 03 Jun 2026 11:01:21 +0000
Manifest this update:     Wed 03 Jun 2026 11:01:21 +0000
Manifest next update:     Thu 04 Jun 2026 11:01:21 +0000
Files and hashes:         1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
                          2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
                          3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
                          4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
                          5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: ZN/g/l05mS4Z/ES6jmb0XboCxUZw73hHpGLN0BRjbOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:25:21:ec:86:65:ad:f0:68:59:e2:fd:36:66:99:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: Jun  3 11:01:21 2026 GMT
            Not After : Jun  4 11:01:21 2026 GMT
        Subject: CN=bfa5cf5872b3ddebc04f17018c855deca5746898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:bb:a5:0c:a1:26:49:20:c0:d6:e3:16:de:
                    11:37:ba:47:34:1b:bc:c5:f4:d3:21:3c:1f:ab:91:
                    02:b1:5d:31:8f:e8:89:d2:ef:fc:63:83:48:65:02:
                    d2:23:6d:7d:e4:6d:96:7c:d7:a0:ea:64:aa:5e:d6:
                    43:30:da:8e:9c:61:cf:6f:e7:0f:7b:a2:87:ec:16:
                    9a:d2:70:ca:b8:b6:45:d4:f2:c9:82:3a:e2:63:01:
                    10:c4:98:1b:e7:06:c0:31:6a:16:f2:48:fd:e5:71:
                    6f:15:a3:95:00:bf:39:57:ad:12:f0:7f:77:70:72:
                    6e:80:4a:11:6b:39:58:46:9b:3a:75:a9:8d:c1:c6:
                    7f:88:87:5b:ad:17:4c:db:95:04:c2:91:8f:70:53:
                    6e:5f:16:e5:50:52:32:98:6f:8e:b3:b5:a8:ca:24:
                    21:34:98:38:0c:05:a4:70:c7:7f:e7:67:23:63:19:
                    d9:d7:ed:51:81:33:50:d5:73:27:4f:48:58:72:9e:
                    90:62:5a:f7:08:74:e3:34:c2:06:d0:46:ba:be:6a:
                    98:dc:c2:f1:55:68:0d:0b:01:56:9e:10:87:2b:82:
                    74:a4:cd:b4:f9:14:f5:7b:b8:62:5d:e0:2f:84:8a:
                    2e:61:9f:dc:a5:25:8a:c8:68:ea:08:9e:a5:f0:c1:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A5:CF:58:72:B3:DD:EB:C0:4F:17:01:8C:85:5D:EC:A5:74:68:98
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:8d:c7:6b:8a:4b:ee:7d:d1:a8:6b:c6:7b:0e:14:c0:40:
         99:ce:08:6c:b9:d4:e4:71:b7:33:dd:50:65:3d:fb:b7:7b:76:
         17:3a:76:01:7c:02:ac:3c:ec:cf:67:ec:54:a1:1d:10:2a:8f:
         35:b4:e7:0b:c8:3a:3e:38:ab:f1:7c:bc:c2:4d:aa:8c:1f:26:
         1c:49:6a:e6:78:5a:63:2d:f9:b5:83:04:fe:a1:b6:dc:1f:a2:
         2f:9e:f3:73:03:f4:fb:d6:e0:74:71:a6:85:eb:8e:45:8b:7a:
         98:68:87:05:f8:6f:b8:b3:4a:6a:44:15:9f:fc:d0:6b:df:72:
         bb:89:4a:1f:51:d0:15:1e:38:cf:07:51:6f:b9:37:77:20:09:
         da:f0:33:a8:7c:ed:b1:7c:cc:08:20:91:b0:2f:d2:e8:84:aa:
         27:e1:3b:5a:73:b5:b3:ef:00:3f:c6:10:68:47:c8:af:69:54:
         6f:dc:86:e2:cf:07:c6:0e:40:29:48:65:b1:47:d2:ea:25:36:
         bb:ed:72:9b:74:7e:22:c2:19:ef:1f:34:3a:31:1e:f4:d5:11:
         59:9c:aa:65:3a:cf:45:57:0a:2f:9b:21:6a:d1:45:ab:ab:66:
         50:4d:2b:94:fc:7e:61:c5:e1:de:04:d6:22:0f:08:21:c9:ce:
         c0:80:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:09:05 2026 by rpki-client