Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File:                     Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier:          /y+d+vlGMq+g4TfMyk+8Ba7SaOucX0jQ68GdckBZAjM=
Subject key identifier:   9E:D9:6F:3B:CF:2F:DD:CF:56:E0:E5:A8:66:4E:0F:BC:D3:AE:EA:00
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer:       /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial:       019EC17FFD969983472C2EF2E09272F784D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number:          07AA
Signing time:             Sat 13 Jun 2026 15:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:51 +0000
Files and hashes:         1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
                          2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
                          3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: FJ7R0tF8/IWJNjsLsnj1QV81VfclEcU04rM3XRKJ7OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:fd:96:99:83:47:2c:2e:f2:e0:92:72:f7:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
        Validity
            Not Before: Jun 13 15:00:51 2026 GMT
            Not After : Jun 14 15:00:51 2026 GMT
        Subject: CN=9ed96f3bcf2fddcf56e0e5a8664e0fbcd3aeea00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:30:52:37:13:0d:48:80:cc:94:36:ee:44:
                    e4:23:3d:7a:59:a5:d8:69:0a:c9:0a:b7:31:d7:a4:
                    25:02:b9:3d:f4:f5:b5:da:26:e2:22:47:18:e0:29:
                    5d:07:ba:cf:44:c0:6a:58:22:9d:19:6c:a4:88:dc:
                    86:d3:b5:e6:72:a2:15:e2:84:23:c7:be:65:94:5c:
                    7a:d5:95:84:58:03:e4:10:bb:d6:9e:72:9e:3c:c3:
                    18:46:03:a8:0b:10:0b:67:6b:c5:bb:6b:d7:b0:93:
                    65:bb:28:de:52:3f:60:47:fc:64:a9:d5:ae:d9:72:
                    b0:4b:ab:7e:d1:09:25:b6:41:b9:d0:67:65:82:8b:
                    9e:17:ff:c2:23:be:2c:59:94:20:cd:41:f4:ec:f9:
                    60:02:b2:14:3f:e5:e2:60:55:0d:03:c0:36:84:bb:
                    cc:aa:23:44:f8:9b:6e:22:b7:fd:3c:2d:90:6c:e6:
                    0f:f3:ca:be:c2:c2:93:1e:bc:84:8b:65:c8:9d:ae:
                    36:e4:b7:3a:67:32:92:39:de:65:d1:a7:bc:dd:7e:
                    7a:db:86:9d:2c:30:7e:45:1d:f5:eb:f8:0d:3e:69:
                    ba:4a:97:94:a2:40:26:11:ed:ab:20:9e:24:1b:18:
                    7f:02:3b:b8:16:c9:24:60:04:d2:cc:1c:59:92:c0:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:6F:3B:CF:2F:DD:CF:56:E0:E5:A8:66:4E:0F:BC:D3:AE:EA:00
            X509v3 Authority Key Identifier:
                keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:7c:2d:d5:60:52:5b:3e:76:57:60:d7:b3:ef:07:90:78:
         9e:11:e9:e0:be:32:30:bf:78:0c:1e:0f:cf:af:0f:cd:4d:6a:
         46:97:ba:c6:81:31:cf:f1:ce:05:cf:e3:a6:ce:bc:f6:34:1d:
         12:7e:e5:25:ee:02:e3:63:4f:c9:01:61:29:92:5c:2e:b8:1e:
         4d:b7:15:d2:8a:1f:7e:28:2d:b1:ac:f1:38:bb:e3:7a:a2:c0:
         b4:f2:52:e2:f5:5f:87:17:a9:43:42:ed:21:85:96:4c:89:bc:
         b8:0c:ed:22:42:57:e2:65:81:37:91:e3:87:f3:b8:85:0e:24:
         a7:20:6f:e3:17:0e:43:cd:6c:6c:fc:93:30:d8:8b:1b:e9:73:
         2f:7e:01:dd:2e:0e:1a:9c:01:ae:ba:c4:1c:b9:7b:85:fe:ce:
         21:df:9e:01:94:3e:18:08:22:35:01:31:72:df:9b:f7:1d:bf:
         7b:9d:a0:60:0f:1d:a1:55:d7:bb:3a:c0:20:a8:3a:2a:2d:23:
         7e:db:10:45:cd:e5:90:c5:11:82:d5:ef:08:b8:28:bb:10:39:
         7e:3e:13:68:4f:2d:65:47:32:1a:2e:f6:9f:7f:cf:81:80:ad:
         9c:ea:4c:dc:04:5b:39:b2:b7:16:e7:b7:d0:46:5d:81:3a:4d:
         42:33:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:00:59 2026 by rpki-client