Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          U/7yYPWt8q1Ev5pe0qUXSHz142+W8ZhlGU9Xp8AK98U=
Subject key identifier:   95:0C:C2:90:0F:4D:E3:75:50:2C:87:AC:9F:04:D4:D1:42:F5:75:A6
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       019EC0DB1FEEFABDD88C7E64BD332E6F233E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          1823
Signing time:             Sat 13 Jun 2026 12:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:46 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: pWsGGruubfBuAvwqe+Ml8N3XvDWRKvhJ/58vI1lQBJg=)
                          2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:1f:ee:fa:bd:d8:8c:7e:64:bd:33:2e:6f:23:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Jun 13 12:00:46 2026 GMT
            Not After : Jun 14 12:00:46 2026 GMT
        Subject: CN=950cc2900f4de375502c87ac9f04d4d142f575a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:d2:56:bd:af:a3:bd:e7:7f:e9:0d:bb:fb:
                    e8:8f:e8:19:d3:af:54:c7:e2:6e:97:be:7a:d8:e9:
                    c4:ce:00:ba:83:cd:06:71:86:a2:84:42:01:68:d6:
                    0e:49:ba:e9:18:67:ff:8c:44:65:54:4d:4f:1f:a9:
                    5f:2a:58:ed:9f:de:72:1a:b1:53:16:8f:bc:84:f7:
                    e5:0a:f3:41:a6:48:ba:a1:81:90:d9:4c:0d:e1:a8:
                    09:11:94:06:e8:2f:af:35:6e:69:5c:c1:d8:e5:89:
                    4b:43:09:50:58:ee:e8:c3:1c:c1:d0:c5:81:9f:a7:
                    47:0f:e8:92:35:e7:fd:70:5b:0b:ec:d1:1c:c6:d6:
                    09:1e:90:e6:a8:07:db:e9:2b:24:30:09:46:13:05:
                    0b:ac:3d:0a:d5:7b:7e:cd:4c:84:ee:2e:ba:39:09:
                    41:35:b1:fc:ec:a9:7d:68:3a:e4:e0:f1:de:5b:aa:
                    b8:05:5a:6c:52:1b:51:39:3f:4d:66:fe:74:1b:29:
                    00:1d:f0:71:b5:62:b4:a5:ea:c6:30:7a:c6:5c:91:
                    45:ec:34:f5:e2:45:6c:77:b7:ce:f7:d6:77:cd:45:
                    aa:77:8a:bd:d5:14:a8:ac:30:44:1e:b4:e8:b0:93:
                    ee:49:dd:bf:9e:9c:c8:bd:62:a4:cc:0e:34:26:c9:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:C2:90:0F:4D:E3:75:50:2C:87:AC:9F:04:D4:D1:42:F5:75:A6
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:17:a9:24:d9:23:45:39:54:14:e4:69:fd:fd:bf:8d:a3:34:
         08:c9:8d:31:b6:7f:48:79:9d:dd:17:40:0b:7e:2a:98:6c:d6:
         e8:5c:d4:89:2a:5c:32:73:30:88:48:32:1d:fe:39:91:f3:c0:
         90:25:e0:3b:62:3b:52:e0:45:94:c9:68:3f:ff:22:16:7a:78:
         32:a5:c0:76:49:40:65:e4:a6:b3:62:56:e6:bf:4e:4a:1e:d9:
         70:fd:ad:dc:f4:bf:a3:a5:7d:40:34:18:fa:44:45:b3:4e:65:
         ab:37:19:42:ee:65:4d:1d:b7:71:d8:9a:07:2e:78:85:5d:9f:
         b5:4a:ae:49:49:c5:76:9d:97:65:13:09:b7:65:c5:54:64:c5:
         ee:9f:27:ff:83:06:89:28:a2:6a:b3:37:5f:3f:08:de:4d:de:
         7a:53:4c:2f:a5:91:38:6c:69:38:22:33:3d:42:1d:3c:c1:c1:
         c0:de:0d:d2:b5:aa:82:92:a8:6c:17:1c:67:89:91:22:96:f5:
         d5:5a:51:4e:d1:c5:96:63:89:97:db:6a:71:e0:ed:42:29:73:
         95:5c:8e:4a:95:b6:a1:3c:44:b9:bb:64:20:f6:42:08:a7:87:
         e8:82:b3:3b:b1:25:d4:a4:1f:71:22:c5:31:e1:4e:57:2c:4e:
         4a:44:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:51 2026 by rpki-client