Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          FowI4FiVcIatAIyj7P70OAKUCCGfQRtnJsRd/bWzYNw=
Subject key identifier:   D1:07:5D:EE:00:2C:01:CB:90:B9:D1:35:6F:D0:6D:51:5C:9D:84:A3
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       019EB8B430D898B02C6EFF2BDC5CF956784F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          195A
Signing time:             Thu 11 Jun 2026 22:01:17 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:17 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:17 +0000
Files and hashes:         1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
                          2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: +QjFrrBHk6xGCw5m4fWXBkjHBhGQBjzhoz7KwmZB9hA=)
                          3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:30:d8:98:b0:2c:6e:ff:2b:dc:5c:f9:56:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Jun 11 22:01:17 2026 GMT
            Not After : Jun 12 22:01:17 2026 GMT
        Subject: CN=d1075dee002c01cb90b9d1356fd06d515c9d84a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:55:0a:7b:53:91:7a:6f:e3:d8:d0:1f:9c:
                    fd:d9:36:12:70:74:61:0d:cc:7b:ce:2a:a0:63:8f:
                    db:75:06:b9:19:96:e7:55:85:71:b6:b7:18:2b:57:
                    f6:0e:ef:59:8b:59:a4:fe:ca:60:72:da:7f:e2:44:
                    ca:a4:4d:43:c4:08:84:dd:5f:ee:60:c4:e2:be:57:
                    f9:3a:30:be:34:36:48:f8:79:fc:33:48:e3:7f:cf:
                    4e:e7:df:17:5d:6b:d5:94:73:74:de:27:44:5c:fc:
                    59:e1:4e:20:fb:a2:79:ce:57:c9:af:32:f3:07:f7:
                    09:4f:cf:e2:01:aa:bc:d2:88:e7:aa:69:c9:c5:70:
                    9d:ab:8c:b4:87:8e:00:90:60:d4:13:64:4e:fd:ce:
                    f7:9a:51:76:e8:3d:58:c4:55:fa:ef:7a:06:da:bf:
                    2e:5b:ec:da:6f:64:07:19:47:f1:d7:68:1a:40:c2:
                    15:27:f7:b6:c7:0e:a3:ec:f4:0b:1f:3e:7a:7a:4a:
                    86:e0:c7:a0:19:16:2e:f3:2d:00:f7:8f:35:ce:c7:
                    d1:6b:4b:d2:d2:d4:12:85:56:2d:69:53:01:a5:79:
                    df:6e:84:c6:4e:4a:b9:f4:d9:f5:6b:e3:8b:37:f2:
                    91:1a:33:bd:0a:61:a2:55:37:96:e4:b6:ee:61:e3:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:07:5D:EE:00:2C:01:CB:90:B9:D1:35:6F:D0:6D:51:5C:9D:84:A3
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:df:6c:19:69:ba:a0:b0:48:ea:03:37:9a:0a:e4:0b:e1:06:
         fa:0e:fd:62:e6:73:f3:fd:50:b5:dd:b7:31:b4:5c:f4:e8:9c:
         67:b2:eb:04:f7:c6:3b:b5:f2:94:3c:7b:67:c6:37:cc:f4:ec:
         9c:a0:39:e3:41:39:45:2a:76:14:27:9f:ce:71:6f:87:c4:54:
         e1:f1:49:69:27:8a:9e:74:3f:b5:9c:f7:41:61:f7:cf:78:25:
         b9:f1:b1:ee:01:92:88:d5:09:0a:02:a6:d7:2c:98:05:83:2e:
         7c:74:75:ce:02:92:58:a2:7a:20:63:56:39:2a:1e:b0:c9:a3:
         90:7b:d7:d1:e3:73:94:44:d1:03:c3:d5:1a:0e:bd:26:af:ab:
         57:96:49:3d:6e:94:89:2b:08:06:5a:20:c6:27:9d:28:37:80:
         35:79:56:34:9f:f1:dc:a6:d4:f4:f0:76:af:c3:65:17:45:d0:
         52:2e:b9:72:ed:53:e2:45:84:e6:da:30:38:ee:2f:c7:e7:2b:
         a4:c2:68:eb:2a:2c:a3:ee:95:e9:7a:f3:f9:2a:c7:09:e7:88:
         03:93:65:f1:db:d8:df:97:3a:d9:52:e2:8b:41:01:0b:33:9d:
         75:33:50:5f:74:60:ed:ed:3c:2b:d1:3b:2a:b4:7e:7b:f6:c6:
         29:34:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:49 2026 by rpki-client