Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File:                     n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier:          KwV6TCxRIgtI+wsONhAZkcDg91vLxD/qw9HXO4jlkkc=
Subject key identifier:   93:D5:07:AD:55:28:46:12:91:6E:13:5A:8B:5F:79:AA:1B:49:58:9E
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer:       /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial:       019F1DC4850ED91156F5073F5AB8724B647F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number:          0234
Signing time:             Wed 01 Jul 2026 13:00:46 +0000
Manifest this update:     Wed 01 Jul 2026 13:00:46 +0000
Manifest next update:     Thu 02 Jul 2026 13:00:46 +0000
Files and hashes:         1: MDrbORic-T38FR83kdivFTffx_U.roa (hash: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4=)
                          2: TayBP7whOn8uG-iZTgalyiKPGes.roa (hash: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk=)
                          3: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (hash: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ=)
                          4: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: oUzOHm+zWstpH7c9SZCicpSD88s1P2X8bp1YX85dfeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1d:c4:85:0e:d9:11:56:f5:07:3f:5a:b8:72:4b:64:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
        Validity
            Not Before: Jul  1 13:00:46 2026 GMT
            Not After : Jul  2 13:00:46 2026 GMT
        Subject: CN=93d507ad55284612916e135a8b5f79aa1b49589e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:ac:0f:20:2d:4c:a1:2a:18:39:64:78:0d:
                    a7:d9:6f:91:31:23:d3:b1:3d:e3:4a:40:33:2a:21:
                    ac:d1:e1:93:f0:e3:bf:60:55:d9:aa:3c:43:c3:17:
                    39:16:a3:66:03:82:6b:b0:d6:1a:88:e9:7f:c8:08:
                    26:8a:bf:c9:44:51:36:8f:73:04:47:fe:75:f9:2d:
                    c1:04:e6:b2:81:9b:6e:c4:65:94:bd:41:ca:0f:a7:
                    a2:c5:58:f5:11:cf:fe:af:0a:66:92:a9:21:86:66:
                    66:09:89:0e:20:fe:0a:1d:95:41:35:ab:97:34:a0:
                    66:0b:33:a8:e1:75:1c:77:bb:78:c4:ad:da:95:1e:
                    0e:4b:4d:83:21:79:8a:27:7a:b4:17:9a:f5:28:e4:
                    66:6c:a9:41:d3:09:66:10:f6:1a:ef:a3:a4:8f:38:
                    8a:76:55:68:01:f5:ab:a0:c7:9d:46:57:82:5a:79:
                    da:f3:4d:b4:96:9a:5f:4c:b7:cc:81:f3:00:02:02:
                    7a:4d:4f:47:26:a5:f9:60:8d:e0:89:d9:46:47:15:
                    57:23:7e:3e:a8:a3:0a:7b:e0:01:0d:4a:be:46:f9:
                    1f:b4:45:a7:b5:14:6d:c6:a9:1f:2b:15:77:82:f9:
                    2a:bb:50:fe:83:2d:25:bf:70:1e:64:34:92:c5:cf:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:07:AD:55:28:46:12:91:6E:13:5A:8B:5F:79:AA:1B:49:58:9E
            X509v3 Authority Key Identifier:
                keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ce:60:1f:81:b3:2b:a6:73:fb:06:56:f3:be:ff:1b:4a:04:
         a0:77:71:ae:73:13:0e:f7:89:87:0c:53:dc:e7:69:2e:c4:59:
         41:77:57:b3:a9:eb:67:00:b0:15:dc:21:c5:c4:76:7e:b3:b1:
         e5:1b:bb:82:54:e8:0a:c2:a7:71:4a:ad:21:19:3a:49:e5:52:
         ab:8d:ad:1b:35:fd:a8:5f:7f:62:bb:9b:5b:da:f5:bc:fb:3a:
         69:30:9b:24:64:29:9e:92:d0:d3:65:f8:71:94:e2:cd:2b:3c:
         ea:54:32:fe:2b:93:25:77:b8:aa:16:8e:41:d9:b8:95:3a:68:
         ff:88:fc:f4:3c:84:1d:ae:31:13:71:36:ae:11:e5:98:ca:ec:
         63:68:e5:a7:68:ec:bd:46:e0:2a:91:2d:30:06:f6:e5:7c:d5:
         e9:ce:b6:ac:19:f4:75:c4:ed:13:1c:b3:e0:1c:9a:92:ab:69:
         8d:ea:7f:f8:b6:c7:f7:cf:05:e6:18:31:0e:75:26:e3:5f:5e:
         90:ad:ac:4d:94:4c:6e:e8:b3:3a:f3:23:09:29:45:5c:98:b2:
         31:97:2e:f8:bc:a7:e3:0f:42:a9:32:58:9c:8e:57:c5:7c:db:
         58:30:0e:3a:47:d3:d6:3b:0d:d3:fe:35:90:3e:cf:6c:d6:17:
         3a:4f:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:49:41 2026 by rpki-client