Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          Hz9IyA+SB1q61CrTKZhHLk+0Q0rhv8FKofLFnWLkok8=
Subject key identifier:   B6:B3:34:9B:65:75:A9:74:51:A5:5D:55:3C:45:8A:1E:EC:F8:0F:51
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       019EBEED356447D0E51FB99533A7C0A922BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          09AA
Signing time:             Sat 13 Jun 2026 03:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:17 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: OkK98BI3YvZiIH+f3rfkW0A9Bk1kbxLiHIXVNOSXqKk=)
                          2: BvyJ9VlIpALPuyQE8sebxED-YP4.roa (hash: 5Go0Jt+Ko1P3sZc36GUqZasMZpi+yqnYoeBDKhqHQ94=)
                          3: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (hash: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:35:64:47:d0:e5:1f:b9:95:33:a7:c0:a9:22:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Jun 13 03:01:17 2026 GMT
            Not After : Jun 14 03:01:17 2026 GMT
        Subject: CN=b6b3349b6575a97451a55d553c458a1eecf80f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:ef:e9:97:ec:7f:e5:65:02:d7:96:6d:4f:
                    18:b4:d0:09:da:30:4e:4c:31:d1:ee:e1:3c:ba:df:
                    98:ec:8a:67:5c:40:99:3f:42:07:c4:6b:2f:da:9d:
                    19:b5:1d:a0:ae:5c:20:bd:ad:5f:43:f5:85:ee:70:
                    1c:8b:51:56:48:fd:a3:3c:44:c3:78:8b:ab:51:71:
                    41:ee:8f:44:a0:2e:d1:3e:3d:d0:42:79:12:54:49:
                    7a:26:94:97:e2:01:75:68:81:27:f1:5a:79:fc:e0:
                    0e:24:f2:28:22:da:ab:13:f3:a1:c8:09:2f:89:f0:
                    94:b8:38:9b:52:dd:c6:1d:95:83:48:c8:d9:be:2a:
                    b8:5c:53:c4:55:68:80:eb:b6:85:e0:c1:51:6a:26:
                    0f:5b:19:33:f9:22:d5:fc:9b:b6:27:48:9c:cf:19:
                    a5:26:e4:b1:35:db:b1:67:42:0a:62:1c:56:0e:84:
                    62:78:b6:c0:7e:79:0d:e6:b7:2d:ef:7a:d3:f7:7b:
                    7f:29:f6:37:df:c0:08:89:2d:f8:c0:22:f1:ce:76:
                    7d:46:d4:d4:b4:39:96:77:89:90:7f:28:04:ae:cd:
                    44:d7:2d:35:71:bd:61:53:bc:cc:a1:07:c3:fb:7a:
                    ec:3b:fb:3a:52:29:7e:7f:1f:fa:50:b5:a8:5a:87:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:34:9B:65:75:A9:74:51:A5:5D:55:3C:45:8A:1E:EC:F8:0F:51
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:85:70:67:a6:82:cd:d7:91:25:d7:9a:ce:b9:94:84:0d:07:
         ab:91:73:1c:56:d2:7c:96:1d:ea:18:f7:d4:1a:33:81:53:c3:
         fc:29:2a:a4:6a:a9:29:84:88:c3:81:d8:1c:8e:5d:f3:89:3e:
         f8:d3:17:0f:59:dd:69:26:7f:f8:56:dd:2b:8c:c8:4c:cc:03:
         0a:85:12:ae:18:f4:6a:58:1f:e0:c7:f6:29:20:fa:2b:e9:75:
         fe:a4:61:29:75:25:3e:56:c4:53:da:09:4d:6a:d3:eb:04:f6:
         ff:64:ff:e4:ee:68:c1:17:84:45:84:e6:4a:2e:25:c4:fa:08:
         62:84:ee:c6:2a:96:99:08:4c:8c:c8:4c:c2:07:7b:24:3e:5b:
         dd:ac:4f:f1:d2:43:c8:1f:af:c6:1a:ca:8b:40:35:76:65:a4:
         d0:80:4f:92:68:c7:92:08:47:96:27:aa:4c:55:d7:48:14:b9:
         7b:72:9a:22:11:3d:0a:ab:d1:5a:38:ed:55:70:8c:dc:8b:ea:
         4b:e8:63:93:6a:b5:bc:bf:a5:4e:ff:f3:82:7f:63:d7:56:a5:
         6a:4e:3b:76:e9:70:63:d1:72:54:6d:34:fd:0e:42:cd:0c:41:
         bc:60:92:11:f8:71:a4:b1:49:da:02:1a:d7:e3:9e:2d:2a:07:
         a8:80:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:36 2026 by rpki-client