Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          5gkozon0N/U9wZ6UkBeD8u6tE/ZxHqsxS3uucT7YdLI=
Subject key identifier:   72:FF:AB:D6:EC:D2:8C:8A:64:96:C8:30:C6:C9:3D:B5:36:57:D8:10
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       019D98F47EAE3FD9D72F9F80448ED0620FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          18D0
Signing time:             Fri 17 Apr 2026 01:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:53 +0000
Files and hashes:         1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
                          2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
                          3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
                          4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 2AwkL5hp7vShNKeFOcBujRr0zb9knXsSXgV5Nq0svCM=)
                          5: q22VxMdSRIy60hnXGH9ZkvEl-VU.roa (hash: zg/MJ8qfVOHy4J7FHOIGJgHJYpom3/1tICP7KNToxU8=)
                          6: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:7e:ae:3f:d9:d7:2f:9f:80:44:8e:d0:62:0f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Apr 17 01:00:53 2026 GMT
            Not After : Apr 18 01:00:53 2026 GMT
        Subject: CN=72ffabd6ecd28c8a6496c830c6c93db53657d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:ed:0d:75:86:26:39:50:4e:fa:51:41:f5:
                    32:3c:9f:d5:c1:01:2c:a8:40:b9:54:d8:f3:41:c1:
                    0b:86:45:f3:c5:15:2e:f2:3d:4f:6b:96:14:be:34:
                    c7:f7:d3:e7:16:64:5a:9a:de:af:45:57:92:67:19:
                    4d:87:dd:fd:61:1f:0f:70:4b:ef:27:9a:63:cb:db:
                    fb:49:4b:cb:9c:8f:53:05:c8:e6:ff:f5:65:09:60:
                    15:ef:2c:39:85:3f:43:9a:d5:d7:d2:5e:59:83:7a:
                    ea:12:6c:f0:5f:32:e6:6d:2b:67:74:23:74:f6:6a:
                    0b:92:37:7e:d3:13:7e:99:aa:46:13:65:44:ff:41:
                    0a:b3:89:4a:e6:2e:0a:8d:92:d0:c3:cd:48:4e:6a:
                    f1:ee:d5:ab:3b:59:14:0a:e7:59:44:9c:83:9e:4b:
                    2a:93:fb:54:d3:5d:81:52:b0:cd:1e:57:af:eb:b0:
                    7a:36:61:92:25:16:ef:af:75:5f:bb:28:fe:4f:e3:
                    98:fd:30:d6:d1:75:15:9e:e5:94:07:83:41:80:4d:
                    31:ea:57:95:45:aa:0d:be:1e:b1:d1:9b:bb:4c:7e:
                    df:da:b4:d2:83:7e:57:39:fa:ec:2e:12:c8:b4:b1:
                    71:89:89:85:c9:21:25:ed:67:5a:d3:9f:f4:35:49:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:AB:D6:EC:D2:8C:8A:64:96:C8:30:C6:C9:3D:B5:36:57:D8:10
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:0e:42:6b:1a:db:3a:21:7a:39:03:0b:77:06:e8:50:67:
         2e:59:a0:12:4d:da:aa:31:5f:f6:3f:65:71:8a:7e:34:63:d7:
         5f:28:a3:85:be:38:65:be:91:e6:56:91:6e:c1:58:e2:40:55:
         23:b1:d0:b9:4b:70:32:bf:9e:b1:4c:a3:89:b6:fb:26:47:86:
         b8:95:5a:19:ad:b1:06:5d:d6:fb:3e:10:14:5b:0d:ba:36:2f:
         c9:4c:d9:b4:97:cc:32:4c:ae:99:34:21:93:6f:00:bc:c8:e9:
         13:65:c1:46:03:51:89:d9:84:1e:c9:20:88:96:0d:73:47:86:
         ef:e4:d3:0b:77:6a:a2:16:fa:68:d7:71:48:69:7f:a1:31:f5:
         da:5e:31:1d:7c:5f:ab:30:7e:ee:2b:0d:bb:89:49:78:dc:ec:
         d2:c3:83:d5:87:e2:c7:61:34:3e:aa:8c:ad:bd:6e:6e:d2:c3:
         b6:e9:b4:45:06:90:34:a5:da:5b:13:e3:ab:57:a1:61:bd:2d:
         04:e4:56:f5:ac:cd:d9:eb:b6:b6:0c:1e:6b:a2:28:a9:7d:d7:
         b3:02:a4:9f:cc:7a:7f:23:86:b0:ee:ab:95:14:0a:2f:d0:03:
         b8:1f:fb:6d:71:2a:4c:42:dc:48:12:6a:79:aa:ba:4f:9a:e3:
         8b:e9:67:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9H6uP9nXL5+ARI7QYg+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwNDE3MDEwMDUzWhcNMjYwNDE4MDEwMDUzWjAzMTEwLwYDVQQD
Eyg3MmZmYWJkNmVjZDI4YzhhNjQ5NmM4MzBjNmM5M2RiNTM2NTdkODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1jtDXWGJjlQTvpRQfUyPJ/VwQEs
qEC5VNjzQcELhkXzxRUu8j1Pa5YUvjTH99PnFmRamt6vRVeSZxlNh939YR8PcEvv
J5pjy9v7SUvLnI9TBcjm//VlCWAV7yw5hT9DmtXX0l5Zg3rqEmzwXzLmbStndCN0
9moLkjd+0xN+mapGE2VE/0EKs4lK5i4KjZLQw81ITmrx7tWrO1kUCudZRJyDnksq
k/tU012BUrDNHlev67B6NmGSJRbvr3Vfuyj+T+OY/TDW0XUVnuWUB4NBgE0x6leV
RaoNvh6x0Zu7TH7f2rTSg35XOfrsLhLItLFxiYmFySEl7Wda05/0NUmFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL/q9bs0oyKZJbIMMbJPbU2V9gQMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwQOQmsa
2zohejkDC3cG6FBnLlmgEk3aqjFf9j9lcYp+NGPXXyijhb44Zb6R5laRbsFY4kBV
I7HQuUtwMr+esUyjibb7JkeGuJVaGa2xBl3W+z4QFFsNujYvyUzZtJfMMkyumTQh
k28AvMjpE2XBRgNRidmEHskgiJYNc0eG7+TTC3dqohb6aNdxSGl/oTH12l4xHXxf
qzB+7isNu4lJeNzs0sOD1Yfix2E0PqqMrb1ubtLDtum0RQaQNKXaWxPjq1ehYb0t
BORW9azN2eu2tgwea6IoqX3XswKkn8x6fyOGsO6rlRQKL9ADuB/7bXEqTELcSBJq
eaq6T5rji+lnkg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:34 2026 by rpki-client