Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          b1dUIhI7yFxajXgqn9TVktqPIx8VNeAUUZGd+LKr0VM=
Subject key identifier:   55:62:54:2A:03:2F:86:4C:A2:B1:00:2D:58:05:17:8D:2A:81:6B:70
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       019E90934948B175C1F8836F657AE4EAB0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          1944
Signing time:             Thu 04 Jun 2026 03:00:31 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:31 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:31 +0000
Files and hashes:         1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
                          2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
                          3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
                          4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: MQNI/inAxsXxsuiJpJf6l4EZXKrg4xhoqMhG/uXOhYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:49:48:b1:75:c1:f8:83:6f:65:7a:e4:ea:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: Jun  4 03:00:31 2026 GMT
            Not After : Jun  5 03:00:31 2026 GMT
        Subject: CN=5562542a032f864ca2b1002d5805178d2a816b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:4c:bf:76:5a:8e:4d:05:9a:07:b8:80:3b:
                    ae:fc:e6:90:44:44:17:d3:1c:3a:41:f4:87:f0:04:
                    91:2f:6b:b3:48:2e:63:c9:d2:9d:49:b5:96:9b:f8:
                    f4:2f:29:de:ae:99:a3:30:59:70:31:03:2e:fb:78:
                    96:77:ac:89:ba:2a:e2:7c:80:ab:27:3e:82:42:97:
                    f3:36:76:e3:5a:b9:ef:c8:97:ec:3e:78:25:75:f5:
                    e7:74:f8:c9:c7:7f:06:bb:f8:55:0d:a2:9c:78:44:
                    18:b7:b4:43:81:25:de:d7:1d:9c:0c:e4:f9:79:9d:
                    84:e7:68:73:a2:9f:8a:8d:fa:fa:da:62:dc:96:78:
                    99:01:64:cb:a9:a1:a6:32:62:24:7d:7d:40:ba:1a:
                    84:be:3c:63:5f:ea:28:be:93:aa:f9:65:e9:d3:0d:
                    00:b4:e6:a0:af:6f:27:52:5d:99:fd:8b:41:f7:25:
                    04:8e:ef:95:82:59:52:6d:5d:b6:33:26:f4:e9:2d:
                    1f:31:f8:5a:f2:13:8e:71:38:48:bb:30:6d:74:aa:
                    a4:f8:61:e3:d3:d7:3e:5b:e7:2c:1f:03:cb:61:74:
                    fd:4f:76:fb:ea:50:3f:0f:2e:5a:df:52:31:c7:e8:
                    20:f9:c1:8d:0e:04:bf:90:1c:a4:9f:cc:14:c6:8e:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:62:54:2A:03:2F:86:4C:A2:B1:00:2D:58:05:17:8D:2A:81:6B:70
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:61:5a:b5:14:a9:ed:7c:a6:10:b0:ae:bd:8a:da:47:c7:6f:
         89:8a:50:0a:52:89:ca:12:b4:fb:92:30:95:f6:82:44:63:bf:
         39:95:f9:9c:ee:60:8a:3e:ec:0d:66:b6:86:e6:37:96:f4:51:
         4d:92:c2:30:e8:19:ae:7e:21:9d:02:44:00:b3:2b:7a:72:0c:
         a8:d6:ae:16:29:0a:c0:94:b2:dc:2c:a6:d0:02:8c:96:68:c7:
         01:f5:31:a7:13:b0:3c:d4:d8:23:4d:31:bc:c4:fb:16:cb:50:
         99:4f:6b:24:a6:53:50:0e:79:b8:a2:db:4a:78:4f:56:94:c7:
         ce:5b:53:ec:f4:1d:11:5c:80:1f:ff:63:c5:ec:48:fb:03:25:
         92:67:92:54:98:58:9b:5a:7c:b4:e4:a1:23:4c:7e:f5:8c:57:
         fe:40:f9:cb:dd:5f:5c:e8:c5:53:41:8d:f2:05:8c:7e:c1:c2:
         a5:5c:75:d6:cd:44:56:78:b0:d2:5e:9a:60:55:2a:0c:3f:2d:
         fc:4a:8e:f3:15:74:d7:a8:42:6f:75:b5:93:de:24:c6:ee:78:
         59:f7:f0:52:60:40:b6:f8:b1:ad:c5:42:a7:4b:4c:e4:cd:f7:
         25:c8:4f:3a:53:f9:d6:df:e2:d0:1a:c9:de:21:59:0b:ed:18:
         66:d4:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:57 2026 by rpki-client