Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File:                     n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier:          5hRsEN6tNP7Lle0Nljko5RpG6jUH4FE1CHiMxtSWxhE=
Subject key identifier:   78:55:93:71:5D:EB:26:19:71:74:63:21:11:84:F5:20:C3:0B:F9:DE
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer:       /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial:       019EE3315916C0A6B03D5132DBEE4D819D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number:          0C63
Signing time:             Sat 20 Jun 2026 04:02:02 +0000
Manifest this update:     Sat 20 Jun 2026 04:02:02 +0000
Manifest next update:     Sun 21 Jun 2026 04:02:02 +0000
Files and hashes:         1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
                          2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 1ozhVmlTvUB1iqYAYISZzUEJzLuUpbd6EKHFz4MyOwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:31:59:16:c0:a6:b0:3d:51:32:db:ee:4d:81:9d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
        Validity
            Not Before: Jun 20 04:02:02 2026 GMT
            Not After : Jun 21 04:02:02 2026 GMT
        Subject: CN=785593715deb2619717463211184f520c30bf9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:ae:84:20:62:c4:1a:c2:a3:e6:8f:23:c5:
                    6e:fc:d1:b5:9e:04:85:7d:72:90:db:9d:d6:2a:c2:
                    89:bc:2c:c9:52:67:81:88:e4:fd:5b:13:c9:7c:60:
                    ed:c9:dd:2d:1e:99:cd:ac:0d:62:17:ab:13:32:a9:
                    d8:da:e0:01:02:ba:a9:50:04:d9:bd:16:c2:9b:d1:
                    6a:a1:83:e9:53:4f:bb:3a:86:d0:72:07:6c:fa:6c:
                    29:2c:84:10:31:17:25:03:c8:86:a8:a0:80:76:ab:
                    d4:1a:42:54:0e:77:76:66:6e:a8:94:3f:da:23:56:
                    1f:b3:9f:a9:b4:e4:6a:22:de:b9:a8:90:72:34:8a:
                    5f:49:8d:54:1b:8b:0a:33:0b:f7:4b:60:6d:6e:86:
                    08:91:40:5f:c4:8e:b4:1f:40:47:ee:43:41:8a:2e:
                    bb:cf:2b:c2:ed:62:c8:22:7f:a1:70:be:44:00:55:
                    0e:b2:dd:f4:de:65:88:4a:5f:c4:2a:e6:e3:6a:ef:
                    d5:1b:fb:23:d8:0e:f3:b8:fb:e2:8d:c5:9f:e3:db:
                    b6:f1:a8:6c:fc:f6:45:88:1e:03:5c:35:00:cb:52:
                    4a:ff:4a:27:55:b6:1b:7f:9b:e1:d3:9b:cd:d6:2f:
                    ab:be:03:5b:cf:de:da:ad:07:d0:bb:96:2a:3d:23:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:93:71:5D:EB:26:19:71:74:63:21:11:84:F5:20:C3:0B:F9:DE
            X509v3 Authority Key Identifier:
                keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:87:94:7b:7f:0e:87:82:54:fe:2e:a4:64:8c:c0:aa:56:
         8e:48:aa:aa:3d:89:e7:83:92:ac:83:da:56:93:62:3b:bc:60:
         a5:2b:f0:cf:5e:f9:1d:68:0f:36:2c:39:4e:76:97:5c:66:fc:
         9d:5b:88:81:1f:27:aa:6f:e3:b5:f4:2d:1b:00:64:66:97:37:
         29:7b:8b:2e:86:aa:0c:b3:7c:40:44:73:1e:ae:81:13:f9:af:
         33:49:4e:55:a3:81:61:3e:ff:f0:83:b6:f1:71:c1:5f:a5:ad:
         63:f7:ea:2b:69:af:cc:af:f1:ec:3b:91:bc:52:56:9b:3f:4b:
         dc:aa:31:43:22:2b:1e:80:14:6a:cd:af:6c:27:1a:e9:9c:f5:
         f2:ec:ae:62:0e:8f:1b:ea:7a:8a:df:4f:13:ea:6a:f7:1c:4f:
         5a:6a:68:d2:37:39:8e:f6:14:bb:67:84:27:1c:9b:65:33:fb:
         32:66:b2:c3:84:06:92:f0:31:e8:3a:50:70:41:52:63:55:58:
         c1:bb:39:f5:48:93:81:b5:b0:92:a9:f0:d8:85:d4:0a:14:fc:
         8f:ad:71:0f:08:1b:72:70:06:11:7d:5d:85:bc:4c:4e:1b:f8:
         43:69:58:28:d3:01:05:0e:74:e4:da:10:98:80:3e:ed:e6:50:
         3e:0e:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:36:46 2026 by rpki-client