Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          WD7PNc0/k3k8l2YmlyrC9dvuK5rmWkHNpFevyuiYPI4=
Subject key identifier:   27:FE:75:CE:C0:F5:3F:C1:07:6C:A3:49:DF:B2:2F:BD:78:E6:32:E3
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019EC1491C07C44C2D28A80449D6DE186D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          0480
Signing time:             Sat 13 Jun 2026 14:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:54 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: MZ5ZL1c4b0dgsvlrINuyxigdsqmFixYhnmQcGLE6jZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:1c:07:c4:4c:2d:28:a8:04:49:d6:de:18:6d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Jun 13 14:00:54 2026 GMT
            Not After : Jun 14 14:00:54 2026 GMT
        Subject: CN=27fe75cec0f53fc1076ca349dfb22fbd78e632e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:3f:3c:df:66:a8:b5:f2:46:11:47:32:bf:
                    09:1a:f6:bf:74:cb:77:52:ec:1f:b6:3d:a5:8c:eb:
                    ce:e1:8d:14:f8:b8:f9:5e:ba:f5:85:68:c3:c9:a7:
                    d5:61:76:77:90:d9:ef:db:72:35:57:23:43:b4:97:
                    11:83:65:bb:cf:76:a0:8e:2c:96:e6:83:a6:52:73:
                    6b:09:0c:1b:68:6a:3b:17:d2:2c:44:8a:8c:d5:00:
                    84:df:5e:78:2d:3f:88:ae:bb:2a:6e:ed:c3:fe:3b:
                    05:9c:42:23:1d:fa:33:56:bb:46:2f:f4:eb:05:cc:
                    4e:45:f2:a7:62:9c:34:4d:3a:a0:ed:4b:10:31:1f:
                    8e:4b:54:70:3a:17:24:20:fb:b0:f9:7e:c1:17:46:
                    57:14:08:cb:f5:1c:da:e2:40:4b:eb:96:a0:45:7d:
                    00:7e:9a:a9:91:a8:54:5c:f7:47:e5:15:bd:62:46:
                    b9:49:81:50:88:66:ea:c7:6f:88:22:4e:c9:bc:2e:
                    53:30:e7:dc:77:4b:97:c3:6d:f5:c4:a9:42:aa:34:
                    ff:ad:41:41:fd:e9:c9:c2:76:cb:db:f3:ba:78:cc:
                    22:f7:29:9d:8f:a4:60:a6:26:b0:57:42:f1:39:08:
                    ad:fe:c9:c2:11:af:69:68:4a:73:f8:9c:21:ff:ee:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:75:CE:C0:F5:3F:C1:07:6C:A3:49:DF:B2:2F:BD:78:E6:32:E3
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:08:f9:ba:43:5f:04:e0:db:d0:54:e0:65:a9:20:f4:81:
         47:66:2f:4a:90:e2:88:a7:bb:a7:57:1e:d4:e1:91:99:22:b6:
         ac:43:b3:ee:63:e8:c0:0c:63:95:92:af:da:76:37:1d:9c:1b:
         25:0f:d7:e7:6e:7b:46:82:4c:9f:0d:c3:6d:17:53:d6:92:04:
         a8:be:39:7d:dc:9f:63:00:a7:74:31:a3:78:6e:2b:8a:ee:3c:
         7a:0e:1d:d9:6d:fc:b1:7e:72:6a:bd:5e:f0:9a:79:e6:b5:bb:
         cc:1b:09:b7:8a:37:7e:73:ac:22:c5:d5:5f:76:8f:a2:6a:52:
         52:1a:76:93:43:26:e9:e9:5d:40:ed:4a:7e:51:e1:df:1f:8a:
         fa:2e:33:b5:10:84:f5:95:45:ee:2a:e2:12:3f:1a:e3:4b:63:
         af:08:2f:cf:33:70:bd:62:79:68:2a:9f:10:59:cd:82:6d:9b:
         1d:ee:20:10:22:f6:37:a5:45:a5:01:7f:81:58:69:ef:b8:bd:
         82:78:ad:5b:8e:c2:85:13:5d:23:55:23:4c:9b:98:a7:fe:32:
         6c:77:c1:f8:ef:2e:bf:bf:33:41:6d:ff:d5:4d:a1:a6:77:81:
         e8:ce:24:e0:e1:a0:f5:1c:03:76:eb:c2:16:4e:8f:e1:9c:7e:
         bb:a2:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:42:51 2026 by rpki-client