Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          8xv+EHn/9BOERNMMZMWK+brUYEiUOjQAjoDnC3P4haA=
Subject key identifier:   F7:A3:94:F2:BD:94:3B:83:BA:21:04:DC:91:76:BB:75:15:FE:AC:7E
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       019EC111A97CB26ED824B74CFCE0D2F11B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          129E
Signing time:             Sat 13 Jun 2026 13:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:20 +0000
Files and hashes:         1: QXvdf-kfkCqDOGFDPxtMYLWrQHI.roa (hash: f3NerkrqCiw7WLEljVvu/M9+wfwW4SsFhdBrrw3Fl+8=)
                          2: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (hash: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs=)
                          3: UT82bVvbFZN0Klu1mqOTYQBNxWw.roa (hash: oyZ/B5zzSvaRc9Ctci5GyXXQUAialxundovqq61f2VY=)
                          4: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (hash: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k=)
                          5: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (hash: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo=)
                          6: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: ib1Pqq5kq1/C+P85Qa4Dfr1scYB2VFX5kAoXlx6L07E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a9:7c:b2:6e:d8:24:b7:4c:fc:e0:d2:f1:1b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jun 13 13:00:20 2026 GMT
            Not After : Jun 14 13:00:20 2026 GMT
        Subject: CN=f7a394f2bd943b83ba2104dc9176bb7515feac7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:07:08:5d:45:16:a3:bf:87:6f:9e:d7:81:
                    f5:82:9c:d2:0d:59:e3:a0:92:1a:a4:0d:0c:d3:84:
                    3d:33:bb:73:fb:5f:3a:5b:3d:fb:9f:9b:6c:09:5e:
                    c9:26:c8:86:a6:54:85:9d:70:2b:04:6b:95:b4:96:
                    36:e3:96:d4:7d:0c:fd:1a:6f:61:3b:f5:dd:2d:b6:
                    39:34:c4:8f:42:7a:56:2f:5f:0a:f3:22:11:f8:47:
                    55:98:fe:1e:01:c1:36:58:db:61:0f:a2:e7:c4:6d:
                    7f:c4:4f:3d:e5:70:e6:81:66:56:9c:91:e5:75:d9:
                    1a:5a:b8:b0:ac:f1:9e:ad:7a:46:1c:8b:e2:3d:c2:
                    9d:6a:12:3f:f4:1b:44:01:30:11:d2:e9:39:0d:27:
                    b3:fb:6b:76:5e:5b:c4:39:19:89:3f:c1:6c:6b:70:
                    f0:e0:03:b0:d1:7b:1f:2d:b4:a7:24:a1:e7:07:6b:
                    b3:7a:04:22:0b:f2:30:88:b3:72:f2:47:53:f1:af:
                    51:1a:81:f4:c3:0a:ff:14:1c:34:e4:0a:76:c4:5c:
                    bf:3c:52:25:35:5f:38:ed:26:04:af:50:4a:f3:70:
                    52:72:93:3a:67:3f:b0:9d:b3:cd:18:7d:1b:68:fa:
                    44:52:44:de:b4:09:36:8e:89:a7:51:98:4d:bc:b2:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:94:F2:BD:94:3B:83:BA:21:04:DC:91:76:BB:75:15:FE:AC:7E
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:71:cd:31:5c:28:dc:00:9e:98:d5:26:fd:1c:97:2b:03:59:
         8d:e9:aa:25:13:cf:f1:83:41:22:ce:d7:a0:b5:c5:fc:14:8f:
         e5:44:60:44:53:9e:f3:3b:b6:86:cc:93:a6:1e:ab:b3:c6:bc:
         5f:25:f7:f2:d8:c8:df:e5:8d:c4:f1:8e:03:de:66:7a:06:a6:
         fe:d1:07:c4:fe:58:be:71:b0:1b:4d:26:b7:c8:36:5d:3c:ca:
         5c:21:7f:37:f7:91:c2:a4:92:5c:93:21:b1:ed:18:9e:b2:22:
         e9:d4:35:04:37:f7:d6:ea:81:64:02:9d:97:ef:19:57:7a:04:
         9a:e7:81:86:e4:69:94:ed:94:7a:e9:67:61:35:79:c9:dc:6d:
         f7:4c:4f:17:3e:f2:0c:2d:bd:0e:1c:42:e7:5a:57:4a:1d:de:
         e0:8c:22:a9:06:cf:6d:c3:82:fd:95:65:8f:48:e4:bf:92:f2:
         f9:67:0e:0d:ce:a2:d7:e6:6d:34:2b:de:9b:5c:83:3c:20:f7:
         d6:fa:91:12:ea:e2:f6:a9:b9:aa:6e:a8:cf:27:f5:dd:e1:4c:
         fa:7d:ca:81:56:24:0d:be:82:04:75:29:27:4c:04:77:d7:4a:
         ca:b0:15:f8:f3:ab:d8:4a:a6:e1:6f:72:8b:63:3b:af:19:ad:
         de:85:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:10 2026 by rpki-client