Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File:                     nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier:          w7cSrPc2WXm5MOju4zxJvmUinsJGZRYzy0fEA7+7h7g=
Subject key identifier:   08:BE:4E:B0:F9:38:28:70:3D:47:F0:15:F0:CF:E8:CC:C8:A7:3A:11
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       019EBF234B4C20ED9D94DBC249F5BF1BBEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number:          017F
Signing time:             Sat 13 Jun 2026 04:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:21 +0000
Files and hashes:         1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
                          2: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
                          3: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
                          4: IW8yoUBTYaNokkkGmEhsvDZwLRI.roa (hash: ZGKlYwDwqTNMoF33mE5TQWFI/MT+otjFdW6rp27pTOs=)
                          5: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
                          6: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
                          7: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
                          8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: DsK/LkKSbhOWg03wA2jkdopYvWaQD0ZvYZlrcFhwEt0=)
                          9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:4b:4c:20:ed:9d:94:db:c2:49:f5:bf:1b:be:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: Jun 13 04:00:21 2026 GMT
            Not After : Jun 14 04:00:21 2026 GMT
        Subject: CN=08be4eb0f93828703d47f015f0cfe8ccc8a73a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:19:25:74:37:dd:c7:4c:f3:5c:e7:b1:43:
                    52:b9:ba:af:a0:c0:35:30:b4:3a:bf:69:24:1c:00:
                    8e:e4:26:c6:13:03:9d:d3:a3:09:20:da:bb:e5:00:
                    8a:36:82:1e:2e:fe:21:75:13:ed:c7:4a:fe:3f:6b:
                    56:57:fb:50:c1:0f:7a:48:87:47:fc:4a:09:09:d0:
                    a8:8b:20:10:a1:6a:27:7f:22:63:f1:29:f0:f1:64:
                    a8:f5:f2:23:87:25:bd:c1:04:70:92:d0:d4:69:5c:
                    6e:ac:ea:b7:a2:89:e4:8f:dc:82:04:83:ae:3e:be:
                    d9:97:59:2d:04:48:3b:38:aa:b1:54:96:46:e2:ef:
                    89:1e:d6:6a:0a:e1:60:5e:eb:01:fb:5c:c4:78:a1:
                    86:bc:32:76:04:d6:69:44:a1:a4:e2:9b:04:f1:4d:
                    bc:3e:38:d4:02:c4:eb:27:bf:5a:d6:ef:ec:a3:59:
                    00:0d:dd:a4:a0:25:1d:07:90:0b:82:92:40:6d:29:
                    6a:ca:1b:98:53:8e:5f:f8:0f:b4:e7:c8:4b:7c:02:
                    1d:a4:a2:c9:e7:6f:92:c3:48:e2:b2:c2:85:2e:6b:
                    7c:f6:e8:a4:a2:09:df:76:ee:e5:e0:e0:2b:24:db:
                    45:f5:8a:6c:cb:3d:a8:9a:82:ba:5f:df:90:d7:9e:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BE:4E:B0:F9:38:28:70:3D:47:F0:15:F0:CF:E8:CC:C8:A7:3A:11
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:ee:46:7c:3f:8a:64:56:9b:0d:f2:6f:6b:53:c5:78:de:
         e1:67:18:ed:16:a6:77:b0:aa:24:3d:3a:d3:dc:62:bd:10:5b:
         28:70:d3:03:ba:8c:be:ee:83:f3:a6:a7:8b:6f:ac:50:c7:cb:
         ae:c8:91:ee:75:13:fd:21:60:7b:68:55:e5:0b:80:38:fd:ae:
         50:dd:e3:69:5b:d3:64:a4:8e:24:37:bb:71:f9:09:9d:52:77:
         fc:91:34:d0:92:23:7a:72:03:7b:36:a7:39:96:02:b5:5f:5f:
         57:9e:2a:16:1b:4d:35:4e:67:4e:b0:07:0d:d6:46:44:a1:26:
         62:8f:74:0e:4b:ca:9f:0a:7a:60:21:b7:96:47:32:61:d9:2e:
         36:95:21:61:ae:cf:57:d1:3f:1e:f3:b5:2e:78:d0:54:a2:9d:
         56:93:91:fd:c1:ac:1a:9f:99:3a:fd:15:3c:c3:24:28:a0:57:
         2f:31:fb:c8:b6:80:5f:28:f5:0f:a4:1c:b6:f0:ab:3e:6c:ab:
         27:a0:dc:5f:db:5a:9a:f3:20:f4:7c:aa:a0:f1:ab:71:b2:17:
         4c:0b:f7:97:78:42:07:f7:c7:51:b8:de:bb:8b:9e:fa:d0:5f:
         6d:d6:68:bb:e5:d8:8f:7a:e6:4b:06:e3:ea:d4:72:2f:71:56:
         7c:f9:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:46 2026 by rpki-client