Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
File:                     pns_SmTNjc4m56QK9ue24E7tLWw.mft (raw, json)
Hash identifier:          J+A6CeOSt/xp3aOOOQlyiUtu03vUSHY5WekVyKeoOH0=
Subject key identifier:   5E:55:5C:A8:D7:60:79:DF:C1:A1:D1:8D:AA:B9:DE:76:46:C5:CD:59
Authority key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Certificate issuer:       /CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Certificate serial:       019EB6C52B784DBFF7EC649D88316EB82083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
Manifest number:          0A
Signing time:             Thu 11 Jun 2026 13:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:35 +0000
Files and hashes:         1: iQdg1bQOlXLuKluffHT5-2l3QwM.roa (hash: VLHupAT/bCStlfIUhgEMjaFGylgBgR6vs2sLtbZvHGM=)
                          2: pns_SmTNjc4m56QK9ue24E7tLWw.crl (hash: 9J8YSjT8qpJZIWN1r4ADSy5oaCEU8/BbdsfLtYwosek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:2b:78:4d:bf:f7:ec:64:9d:88:31:6e:b8:20:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
        Validity
            Not Before: Jun 11 13:00:35 2026 GMT
            Not After : Jun 12 13:00:35 2026 GMT
        Subject: CN=5e555ca8d76079dfc1a1d18daab9de7646c5cd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:14:8a:89:d1:c4:52:fd:88:6d:38:c0:9c:
                    b4:22:45:5d:7a:39:3b:56:6b:01:43:b4:6a:83:8f:
                    df:c4:eb:10:e4:68:12:05:94:f0:ea:6a:93:de:61:
                    99:e9:5f:19:76:8a:54:5e:4b:05:2c:69:f4:11:fb:
                    05:57:46:5e:a9:4d:ce:32:8c:0b:45:64:53:01:38:
                    af:3e:b9:c1:32:d0:32:94:b8:16:10:99:08:96:4e:
                    6c:17:0b:d2:79:3f:ed:b4:59:f9:26:e9:47:74:9e:
                    b4:99:ce:ce:af:9a:6e:fe:15:23:d3:5f:b5:53:27:
                    b9:d0:41:88:1a:30:d2:62:00:fc:d0:94:20:41:21:
                    37:1e:a0:a9:18:b1:2f:18:1c:14:2d:d2:e1:aa:c0:
                    2c:a1:96:c5:1f:64:94:0e:b6:c4:6c:a4:c9:fd:04:
                    f6:88:cd:0e:7b:7d:6d:95:dd:b2:29:de:3e:0f:47:
                    6b:fa:a1:7a:c3:06:e0:7f:d3:d4:0c:7a:c9:f7:59:
                    cd:83:de:58:ff:2a:16:ab:82:b0:5d:ab:3a:08:02:
                    59:0d:e8:b2:0f:40:ab:25:ed:ab:8b:a8:b6:ff:6b:
                    d9:7d:2f:b3:ab:39:99:00:5e:dc:7a:31:5f:1d:ab:
                    f7:76:24:c9:75:5f:8c:c8:3f:f8:b7:fe:ea:e5:1a:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:5C:A8:D7:60:79:DF:C1:A1:D1:8D:AA:B9:DE:76:46:C5:CD:59
            X509v3 Authority Key Identifier:
                keyid:A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:3b:4d:c8:c7:63:18:dd:62:fe:92:cf:2b:a0:f5:ee:0c:
         a6:a4:a5:eb:af:29:b1:8d:84:1c:23:d8:75:ee:ae:68:d6:6b:
         ca:58:e9:ff:2b:bb:91:69:a3:07:5e:6d:9e:94:7b:58:67:01:
         9c:04:e5:fc:32:76:03:70:f2:d1:13:04:f1:e1:38:5e:7a:c7:
         76:58:77:55:ad:9c:0e:12:bd:b2:e7:2b:89:d8:f2:10:1c:ee:
         70:94:e4:fc:f9:00:b2:b3:29:c6:91:f5:af:6f:81:f9:2b:ea:
         72:8a:61:49:89:48:0b:e1:b8:2c:9e:1f:c4:11:75:d4:67:cb:
         b1:5a:61:b6:1e:90:4e:2a:9f:51:45:04:47:16:4f:8c:f1:45:
         fc:dc:91:1f:ff:13:af:ee:99:ae:16:36:e6:0a:99:78:3e:09:
         fa:11:9a:0b:1e:ca:1b:76:4e:5c:d6:50:86:9e:29:5e:d7:d9:
         33:c4:76:94:5c:da:93:33:e6:2e:35:3a:2a:7c:b7:00:c0:00:
         66:60:b9:a1:7d:83:18:e2:bc:e0:42:d6:27:b6:42:7a:27:52:
         fa:08:f3:8d:e5:f1:e4:16:d9:51:3a:1d:5b:f8:24:22:58:da:
         d0:08:a5:9a:a0:50:5b:6e:d3:da:92:d7:9c:aa:b9:0b:e7:aa:
         19:03:d2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xSt4Tb/37GSdiDFuuCCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2N2IzZjRhNjRjZDhkY2UyNmU3YTQwYWY2ZTdiNmUwNGVl
ZDJkNmMwHhcNMjYwNjExMTMwMDM1WhcNMjYwNjEyMTMwMDM1WjAzMTEwLwYDVQQD
Eyg1ZTU1NWNhOGQ3NjA3OWRmYzFhMWQxOGRhYWI5ZGU3NjQ2YzVjZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzYUionRxFL9iG04wJy0IkVdejk7
VmsBQ7Rqg4/fxOsQ5GgSBZTw6mqT3mGZ6V8ZdopUXksFLGn0EfsFV0ZeqU3OMowL
RWRTATivPrnBMtAylLgWEJkIlk5sFwvSeT/ttFn5JulHdJ60mc7Or5pu/hUj01+1
Uye50EGIGjDSYgD80JQgQSE3HqCpGLEvGBwULdLhqsAsoZbFH2SUDrbEbKTJ/QT2
iM0Oe31tld2yKd4+D0dr+qF6wwbgf9PUDHrJ91nNg95Y/yoWq4KwXas6CAJZDeiy
D0CrJe2ri6i2/2vZfS+zqzmZAF7cejFfHav3diTJdV+MyD/4t/7q5RrXOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5VXKjXYHnfwaHRjaq53nZGxc1ZMB8GA1UdIwQY
MBaAFKZ7P0pkzY3OJuekCvbntuBO7S1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5zX1NtVE5qYzRtNTZRSzl1ZTI0RTd0TFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85MzcyNzMtMTQ4NC00NTk3LWJmZjEt
MmZiYTY3NjYxYWFiLzEvcG5zX1NtVE5qYzRtNTZRSzl1ZTI0RTd0TFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85MzcyNzMtMTQ4NC00NTk3LWJmZjEtMmZiYTY3NjYxYWFi
LzEvcG5zX1NtVE5qYzRtNTZRSzl1ZTI0RTd0TFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj07TcjH
YxjdYv6Szyug9e4MpqSl668psY2EHCPYde6uaNZryljp/yu7kWmjB15tnpR7WGcB
nATl/DJ2A3Dy0RME8eE4XnrHdlh3Va2cDhK9sucridjyEBzucJTk/PkAsrMpxpH1
r2+B+SvqcophSYlIC+G4LJ4fxBF11GfLsVphth6QTiqfUUUERxZPjPFF/NyRH/8T
r+6ZrhY25gqZeD4J+hGaCx7KG3ZOXNZQhp4pXtfZM8R2lFzakzPmLjU6Kny3AMAA
ZmC5oX2DGOK84ELWJ7ZCeidS+gjzjeXx5BbZUTodW/gkIlja0AilmqBQW27T2pLX
nKq5C+eqGQPS7A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:06 2026 by rpki-client