Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File:                     69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier:          cI/PEAlMdSPkGi9IjCA6iGMvUYttS5gbLtxXFfw+d5w=
Subject key identifier:   54:69:06:54:23:95:39:16:95:C8:EF:EE:85:A3:1A:B5:49:DF:C8:CD
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer:       /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial:       019E91DD8C1C838F4A7C494CAB131A9E953B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number:          1943
Signing time:             Thu 04 Jun 2026 09:01:16 +0000
Manifest this update:     Thu 04 Jun 2026 09:01:16 +0000
Manifest next update:     Fri 05 Jun 2026 09:01:16 +0000
Files and hashes:         1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: +TLGxP0ss9hJWwFaM2zpZVksYGZ0KmzsWmx3L+Bh8WE=)
                          2: 6DzoadzIvflRSCanXdL7FqtC2L8.roa (hash: sur+A1CIETAgbr0Wn6YpsRLy5mn4DaVVYa9DTnS/yYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dd:8c:1c:83:8f:4a:7c:49:4c:ab:13:1a:9e:95:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
        Validity
            Not Before: Jun  4 09:01:16 2026 GMT
            Not After : Jun  5 09:01:16 2026 GMT
        Subject: CN=546906542395391695c8efee85a31ab549dfc8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:ac:a4:8f:df:b2:e3:76:5e:d0:79:8c:17:
                    28:f2:08:68:a2:e0:5b:92:f1:e8:1c:84:93:a9:83:
                    41:f0:0a:cd:6d:94:fb:f7:39:41:a3:73:41:84:a1:
                    22:82:7b:d6:4a:ae:d2:94:bb:96:42:27:8c:96:ed:
                    98:62:f2:ea:22:f6:c9:4b:95:d5:5b:b8:2d:63:40:
                    5c:a9:58:be:e0:c5:0b:59:8c:88:98:f7:4a:fe:ff:
                    99:d0:7d:f9:14:19:cc:58:1c:21:b7:54:ca:da:2b:
                    29:f4:fe:35:a5:ad:6f:2f:ce:6a:83:47:01:d8:39:
                    74:d5:e8:ef:38:b6:56:34:df:7c:42:75:04:f3:f5:
                    49:83:21:9f:b2:ca:b2:fc:7c:3b:16:97:cc:31:d2:
                    42:54:bf:6f:63:2d:b1:53:93:51:85:bd:10:df:2f:
                    f8:44:3d:cc:2c:4d:6d:6b:3a:36:a3:7b:f1:8a:0f:
                    60:5f:6b:95:81:7d:03:9b:28:29:23:a0:98:e8:70:
                    2f:a9:d8:da:5e:22:67:43:f4:48:c6:84:64:f1:e2:
                    6c:ac:7b:e7:41:75:0b:72:41:c7:26:15:7d:56:1a:
                    1d:ce:12:6c:9e:12:87:fc:82:57:ee:62:cf:f6:f2:
                    03:54:1a:03:ba:07:28:e1:f0:26:bd:d2:3f:70:27:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:69:06:54:23:95:39:16:95:C8:EF:EE:85:A3:1A:B5:49:DF:C8:CD
            X509v3 Authority Key Identifier:
                keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:13:24:b6:09:bb:32:19:c1:da:73:4a:ba:31:f0:31:fc:a5:
         e5:d7:34:8a:5b:23:b7:52:a8:74:6a:7a:64:24:da:f5:49:b2:
         3e:43:82:88:23:5d:52:8e:b5:f3:cd:1f:73:e7:1b:27:1b:0c:
         5b:4e:b2:40:08:45:da:55:a8:68:42:43:ea:d3:46:a8:9d:26:
         d7:63:fa:ba:9b:9c:20:7e:64:93:78:c6:da:4d:01:53:9f:58:
         71:f6:54:5a:89:9b:f7:68:a4:47:73:74:dd:46:45:1c:d4:68:
         b1:13:35:74:73:0e:70:2d:ee:4c:13:3a:80:3c:1f:ba:c8:2b:
         16:47:53:e9:a5:1a:00:20:4e:6c:16:0a:05:ad:22:42:26:28:
         e6:49:7f:be:dd:ef:bc:d0:fc:d4:5d:9d:dc:60:ca:55:94:1b:
         da:51:5a:18:60:b4:20:ff:4d:6a:5a:ef:8b:5a:4a:a6:21:48:
         61:e3:19:f4:17:63:d3:91:74:60:aa:31:1b:44:f9:9c:c8:52:
         25:73:44:91:fa:d0:9a:b9:8e:03:88:6e:9a:77:2a:e8:f8:8c:
         d7:7d:d9:30:76:6d:b6:0f:25:6a:bf:be:6e:ca:05:de:0f:be:
         f6:1d:1d:69:73:60:b9:eb:3f:b5:f6:cd:a3:12:c7:8f:f0:77:
         e4:00:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:10:39 2026 by rpki-client