Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
File:                     NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json)
Hash identifier:          dgI/CVKOIIc9NSRiYnKBinsAWmcPwzSsGvOxBK36dio=
Subject key identifier:   68:08:36:E0:53:44:38:A0:42:26:9C:72:52:29:98:BC:06:76:EB:D2
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Certificate issuer:       /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial:       019EBF91A024A1ED4AD44A77022F347DB544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
Manifest number:          1F
Signing time:             Sat 13 Jun 2026 06:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:52 +0000
Files and hashes:         1: BN5xn3puLBG77Ytvq5XNjpexQlg.roa (hash: ttFDAIhufoPsyog+UuT4lDUDrzxoN3Mmca/WlShtmkg=)
                          2: MkNbmL-bwgTzJpQVm2n28YMq0OM.roa (hash: II6Fqtr94SyEUF5jlxZEH8VdvchWb9qZeEAdekDWgKo=)
                          3: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: zUZ9StTD3RkIo2CZEyZdaklXhCDoobvkA8L6rU8K19I=)
                          4: OQAYBBx3MDr267rJJCcKXFCn4Uk.roa (hash: UWB5P2fVG911RqZtJe8CauWxWuxOGa/LuF8tp0lO6ng=)
                          5: df8fyZGgZ-MHftFhqfv8cp43YrI.roa (hash: 6b+ndI23XxYj6JqzyvYHphqWGIdD3cmhum/VBu59tcE=)
                          6: js-kMHF6cPXDti5NU7dlF1sPTLc.roa (hash: EARaawOp26i2xau5tcnpqYFS7hFHVGLyoMSK75kpsK4=)
                          7: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:a0:24:a1:ed:4a:d4:4a:77:02:2f:34:7d:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367160181739568e578e1b5f57976a60398062e6
        Validity
            Not Before: Jun 13 06:00:52 2026 GMT
            Not After : Jun 14 06:00:52 2026 GMT
        Subject: CN=680836e0534438a042269c72522998bc0676ebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:93:f1:d8:06:08:20:af:39:66:b8:a0:6d:
                    09:9c:ee:17:ec:15:25:d3:3a:1e:4b:58:56:76:fe:
                    05:fb:2c:15:40:e4:11:d4:85:76:f2:17:c5:59:85:
                    4c:d1:86:f2:e3:12:79:f7:28:fb:02:f3:9f:d5:4f:
                    77:2e:77:10:c3:7c:3d:50:df:b8:5b:2e:de:eb:e6:
                    61:bc:55:ac:9d:7c:dc:16:8b:e0:c6:94:6e:42:ed:
                    05:6f:4c:79:d4:93:b4:78:8c:30:55:88:40:4f:72:
                    0c:0c:f8:46:ba:12:37:76:9c:42:b9:74:b1:6f:e6:
                    3d:e3:9b:22:20:3a:b6:73:7e:99:ef:b1:6d:b2:9b:
                    8b:da:1c:ad:92:ee:58:f5:71:3b:74:25:fb:57:f3:
                    3e:4d:90:0d:31:20:b9:4b:54:fc:67:b5:dd:7d:a3:
                    d3:f0:58:fb:7a:88:92:75:51:ef:96:e3:10:d5:22:
                    6a:34:c2:4b:9c:e9:b4:3f:c6:40:37:82:e0:47:1f:
                    77:50:5d:62:ec:91:d3:06:e9:d6:a1:5d:10:2f:19:
                    4c:7f:48:35:d0:9a:09:89:e6:04:61:b3:14:3b:f7:
                    a0:ac:77:35:bd:29:a4:80:3f:07:5a:4f:61:86:78:
                    1a:cb:b1:86:df:3b:38:f4:f1:2b:d8:a4:da:15:9d:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:36:E0:53:44:38:A0:42:26:9C:72:52:29:98:BC:06:76:EB:D2
            X509v3 Authority Key Identifier:
                keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:14:d5:77:48:7a:c7:43:11:00:7b:12:8f:2b:a7:6c:2b:
         43:89:a9:8c:b2:99:f6:cc:1b:c3:16:51:41:ec:3f:b9:2c:fc:
         54:bb:c2:1c:f0:fe:87:4a:8c:41:21:ff:05:7a:7f:a5:e3:8e:
         93:64:17:02:f1:3c:3a:95:9a:e8:0b:ef:b8:6b:9e:2b:f4:84:
         4c:ad:be:f5:c8:a9:68:f9:58:53:25:09:59:e2:43:a9:a7:be:
         86:d8:45:31:a2:24:e3:e6:d0:26:12:25:fa:4a:c1:d8:fd:33:
         ec:c8:39:9c:03:46:ea:00:1d:e6:6d:0b:9d:dd:3b:29:b9:eb:
         3f:a3:00:01:0d:f6:61:cb:bf:1d:33:62:8e:73:af:02:5e:5a:
         8a:54:d5:f6:b7:7e:3f:6e:f4:65:79:98:57:73:43:00:09:e0:
         69:03:28:4e:5d:6c:0c:24:dd:0f:88:31:37:a0:46:5e:ac:15:
         74:cb:94:85:dd:85:fd:5f:33:aa:a5:57:ff:01:9e:92:67:39:
         5b:cf:dc:fd:a2:cb:b1:c3:81:14:34:65:44:e0:c6:5a:51:0d:
         3d:6b:de:37:dc:65:81:da:28:7e:6c:3d:07:d3:50:7b:48:dc:
         63:83:c9:46:f0:93:40:1b:37:de:05:c7:76:18:f8:0f:ea:07:
         c6:31:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:42 2026 by rpki-client