Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          /LRrnQpxNG4RXe1zAhSGKIVU2oO+QqtGnqAa3khheYc=
Subject key identifier:   FA:D1:B2:08:77:AC:07:E2:6C:AF:D9:FC:92:D8:F7:9A:71:DB:6E:E6
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       019EA18761E8E6624975714A4EC435EF233F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          1958
Signing time:             Sun 07 Jun 2026 10:01:04 +0000
Manifest this update:     Sun 07 Jun 2026 10:01:04 +0000
Manifest next update:     Mon 08 Jun 2026 10:01:04 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: mFe+RukDkJ/ZLAIm5RlDb2dvaYBEK0mGTEXAs5DeG30=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a1:87:61:e8:e6:62:49:75:71:4a:4e:c4:35:ef:23:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jun  7 10:01:04 2026 GMT
            Not After : Jun  8 10:01:04 2026 GMT
        Subject: CN=fad1b20877ac07e26cafd9fc92d8f79a71db6ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:a6:d9:6f:d5:3b:47:93:66:41:d1:05:a8:
                    e1:5e:4e:3c:ac:5b:cf:71:5d:0b:1a:11:ef:63:14:
                    6f:fc:6f:a4:93:5b:83:cb:06:30:0e:7c:05:ef:25:
                    07:df:73:8e:74:96:cc:e1:d1:42:ca:8a:86:8c:f3:
                    35:78:28:03:34:76:42:72:51:a3:41:91:d1:86:3d:
                    04:b6:93:15:f3:7e:47:d7:10:79:07:bf:18:00:d5:
                    51:f7:76:85:fa:fe:6a:76:3b:c4:49:e1:19:8c:5f:
                    a7:92:3a:91:45:b9:91:cf:b5:ad:cc:73:43:6a:30:
                    14:0b:f5:5f:d9:b1:63:8c:fa:9d:2e:a5:44:c4:10:
                    87:7b:fa:bc:14:af:2d:12:d8:49:be:e9:f2:23:2e:
                    bd:9c:df:bb:da:b0:81:11:93:db:f7:ed:d9:3a:6d:
                    33:e4:a8:df:d9:bc:ae:05:f6:fc:e9:11:9b:fd:5c:
                    80:60:6e:74:fb:2b:1d:a7:83:c0:0c:0c:50:c8:4b:
                    e4:27:fe:fc:6c:a1:63:37:7e:3f:a7:c1:e5:b1:8d:
                    76:d4:c2:9f:4d:07:63:d6:8f:58:17:87:1a:d9:02:
                    7c:7a:14:33:db:bf:e5:f8:ac:d1:ad:55:69:38:71:
                    0b:e5:0a:c1:36:53:1e:59:70:a4:39:25:f9:37:f8:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D1:B2:08:77:AC:07:E2:6C:AF:D9:FC:92:D8:F7:9A:71:DB:6E:E6
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c5:9f:fa:3f:52:b9:02:b1:43:9d:32:5d:51:9c:0d:6c:c0:
         af:5d:3c:8b:f8:e2:67:85:4a:97:25:92:19:8c:02:bd:bc:e5:
         e5:e0:14:f5:11:9a:27:78:11:1b:d9:1e:ac:56:72:15:d4:2a:
         bd:e6:74:bf:13:a5:e5:66:7a:f5:cc:a6:63:4c:37:81:19:3e:
         72:0f:93:e2:1e:7d:4d:d0:cb:87:6a:2f:3f:a4:ab:32:33:d2:
         61:47:69:d1:53:39:00:66:46:73:42:3d:75:bb:77:40:d4:08:
         2d:35:6d:92:ea:44:07:65:0b:47:ce:d3:24:89:5d:f0:28:07:
         9b:06:52:ab:d8:c6:74:4c:cf:09:86:cb:a4:51:cb:c5:1c:f0:
         c9:ed:b4:e1:75:7a:b3:a1:3e:4a:c8:20:44:34:0c:97:de:56:
         b4:3f:04:c3:9a:09:72:a7:47:0c:ba:31:ea:21:e0:56:27:87:
         8e:de:f9:34:ea:de:47:47:2e:83:6f:b6:0a:4d:f6:f6:35:bc:
         c5:53:88:a4:6b:d2:a0:45:9f:06:85:52:a4:c0:06:b6:35:ca:
         f8:2e:6f:73:31:a1:d2:b6:5d:de:0d:1b:a9:de:36:f7:96:6d:
         83:00:ff:49:50:d9:cc:3a:16:4b:6c:80:68:e9:fd:62:e7:40:
         cf:3c:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 15:15:55 2026 by rpki-client