Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          0dJdvszZO/3HPYATwVOlFDRS/vc23EaIPQnBs0TF2DE=
Subject key identifier:   E6:A7:18:8F:E0:98:85:14:8E:C9:DF:9D:A3:DC:26:0F:AA:B9:DA:08
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       019E1F1141713AE3D74EC426FC00BDA2B90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 02:01:24 +0000
Manifest this update:     Wed 13 May 2026 02:01:24 +0000
Manifest next update:     Thu 14 May 2026 02:01:24 +0000
Files and hashes:         1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
                          2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
                          3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: 1BsY3pNLbo/MEnJgGrcIOE/ORigaBIrRISqr+rnupCg=)
                          4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:41:71:3a:e3:d7:4e:c4:26:fc:00:bd:a2:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: May 13 02:01:24 2026 GMT
            Not After : May 14 02:01:24 2026 GMT
        Subject: CN=e6a7188fe09885148ec9df9da3dc260faab9da08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:0a:0c:e0:6c:82:49:3a:b0:3d:05:2a:34:
                    f7:d8:e0:88:7d:d5:34:a4:a5:46:b8:60:ea:76:4c:
                    40:6a:e4:14:00:e7:f8:7a:74:93:da:00:1e:6d:fa:
                    c6:07:b8:59:d9:98:cb:f8:5c:0c:f2:2c:cc:8b:46:
                    d7:17:a0:dd:9d:dd:f4:8b:3f:ac:f4:95:dd:ef:27:
                    c4:f5:9d:4f:fe:21:6c:e3:66:63:6c:a0:cc:c3:ee:
                    7b:a9:b1:3a:30:74:01:75:14:9e:3a:bb:ac:bc:a0:
                    6d:37:05:5c:75:70:ec:94:10:1a:5c:7c:67:77:1f:
                    be:04:a7:b2:1c:10:36:eb:8f:e1:48:d3:d2:74:fa:
                    80:81:69:73:5f:55:96:3f:fd:8e:99:ec:bb:23:b7:
                    fc:63:50:64:f3:11:5e:e3:a6:d6:6e:9d:6a:d0:8a:
                    d8:d8:9d:9f:31:3f:91:9d:1d:96:b7:41:f8:7e:3b:
                    d8:49:dc:60:a3:fd:b8:5d:97:e6:2e:d9:10:5f:93:
                    89:7f:b6:24:fe:3e:1e:ef:bb:8d:cb:e7:20:ba:9b:
                    75:3e:6a:9d:dc:19:4d:6c:e9:55:99:ce:1e:c6:3b:
                    de:f8:db:32:37:62:5d:25:4e:6b:8b:c4:59:73:0b:
                    96:6e:eb:7c:50:f9:05:51:1e:1b:75:b3:e3:05:0b:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:18:8F:E0:98:85:14:8E:C9:DF:9D:A3:DC:26:0F:AA:B9:DA:08
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:5f:d7:fd:94:73:e9:8b:e7:6e:fc:f7:b8:64:e5:65:32:
         48:d3:17:ec:9a:26:fd:19:a9:a1:86:1f:0e:cb:2d:94:05:9f:
         d3:b9:e8:92:37:ae:eb:8b:3c:af:5a:70:5f:a2:9f:2e:53:0e:
         a4:b2:4c:c7:67:b4:dd:af:65:30:80:59:30:2b:18:24:48:3e:
         de:2f:6e:87:6c:7e:3d:ca:53:1b:a9:4a:81:13:7b:f7:56:1c:
         31:d1:6b:7c:f7:5c:9b:22:f7:81:7c:f7:68:b5:83:ab:b3:2a:
         e2:64:f9:8c:47:ca:f2:48:5e:7a:8a:40:de:a9:27:f8:29:d5:
         ff:c0:f8:a5:8b:82:22:99:7c:83:bd:b6:08:40:30:82:ea:81:
         ef:8c:ac:8b:6e:dd:09:43:ed:cd:f8:94:23:5e:99:62:41:ae:
         50:d1:e3:42:8d:71:6e:8a:7b:c0:97:ea:5d:a2:c0:24:34:a7:
         45:a1:ac:d2:47:ec:11:c9:20:77:36:b3:a4:13:7f:82:b7:68:
         43:f7:ec:46:24:c2:90:9f:44:df:17:c7:5e:64:29:6b:e9:25:
         92:e0:ff:55:de:33:90:50:07:bb:f6:3f:32:3a:75:e8:39:b1:
         07:c0:c8:83:25:a4:6f:0f:04:7f:68:ec:8f:66:86:b0:06:5e:
         09:ce:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:58:54 2026 by rpki-client