Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File:                     5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier:          BX5hVGWylwNMQO/QviIuppLrYtceLt7YftNzp7i0zp8=
Subject key identifier:   A0:C5:05:98:A9:6E:DC:04:CC:D4:01:23:AE:71:24:5A:6D:CD:E5:51
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer:       /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial:       019F17F94C8FA5728022CD1F510F77BF2F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number:          156E
Signing time:             Tue 30 Jun 2026 10:00:41 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:41 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:41 +0000
Files and hashes:         1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
                          2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: rVJZ7KMfJ6PkEYwLoGo9wlJf+XtPg2fu5BIk6tOa188=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:4c:8f:a5:72:80:22:cd:1f:51:0f:77:bf:2f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
        Validity
            Not Before: Jun 30 10:00:41 2026 GMT
            Not After : Jul  1 10:00:41 2026 GMT
        Subject: CN=a0c50598a96edc04ccd40123ae71245a6dcde551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:3d:8b:24:51:da:1a:68:31:6d:12:ba:bf:
                    86:2e:4a:e6:f3:2d:71:af:78:bc:df:dc:67:e2:38:
                    4d:c4:02:db:1e:d9:96:3d:24:4c:d1:33:79:ee:12:
                    c3:be:57:1b:d9:18:82:ce:99:59:bb:31:29:40:d8:
                    84:81:ed:31:62:46:5f:ba:ba:8c:50:81:7d:05:5a:
                    d9:d4:f8:59:58:d3:02:66:eb:0d:27:48:44:b1:41:
                    26:ea:89:71:fd:07:13:5a:d9:93:8c:89:56:b4:ee:
                    bd:94:9b:68:b2:06:1f:62:ad:b2:69:e0:e6:95:b6:
                    eb:0b:f3:35:95:45:81:1c:3e:ae:b3:bd:df:52:1d:
                    00:5e:42:66:52:2b:f3:81:3f:39:2f:34:6b:4f:4f:
                    a9:fe:bf:af:80:99:06:7b:3e:96:56:34:87:9f:aa:
                    4b:f2:13:cd:56:e3:ec:19:fc:26:c6:83:57:b6:90:
                    10:62:ca:c4:23:cf:e8:d3:29:d5:c5:12:c6:79:d3:
                    4b:fa:9a:04:6c:27:ad:32:28:1f:c0:02:3c:98:3a:
                    d2:09:5f:a5:78:e2:1b:58:25:2c:b6:d1:ec:76:ca:
                    4c:e9:3c:48:14:45:64:bc:26:de:f5:0f:87:45:e6:
                    c6:3d:8b:88:d3:79:2a:b6:ef:c7:ca:0a:78:ac:ba:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:05:98:A9:6E:DC:04:CC:D4:01:23:AE:71:24:5A:6D:CD:E5:51
            X509v3 Authority Key Identifier:
                keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:ad:11:51:47:0e:58:db:be:89:04:68:75:69:82:53:89:
         88:c4:ba:48:d1:f3:2c:b2:c7:e2:31:30:c9:c2:75:56:7a:9e:
         3d:c2:99:11:57:18:16:f1:70:da:44:7d:40:b3:d8:62:a4:1d:
         db:48:97:5a:14:8e:c4:f5:05:48:be:cd:99:a3:51:e0:95:9a:
         d6:c1:64:91:0e:87:90:ee:ac:c7:1b:e8:69:da:17:ea:48:27:
         ae:ae:d7:a6:c1:4b:c9:fd:06:99:18:71:a7:9a:df:a4:ee:c5:
         27:7f:03:98:54:d1:8f:6c:6f:d2:65:dc:f4:8c:dd:cf:52:30:
         32:ee:59:d4:fb:07:a4:17:46:01:b2:1b:df:d9:db:60:a2:cd:
         43:20:fb:10:63:d0:c5:7f:ac:1f:b8:a6:2c:91:3b:a1:0e:9b:
         94:f8:a9:fc:ac:af:55:e6:b4:b8:87:65:b3:6d:99:73:8b:83:
         a7:89:45:c4:c4:a9:c7:1d:17:db:d2:4c:7d:7d:2c:9d:b8:a2:
         6b:1d:c6:99:c0:a2:5d:d7:d7:4f:00:2a:45:98:15:47:be:26:
         a3:27:74:7c:3a:45:96:17:59:bc:5d:1c:5a:01:12:49:b5:b4:
         42:4c:a1:85:08:b5:69:5f:0e:33:6f:43:7e:e5:c6:2c:ae:34:
         2e:af:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:02 2026 by rpki-client