Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          B39h8FYU5yXW69IlCYwiolCFn9gAVVxF+NklLMYNYfg=
Subject key identifier:   F2:93:45:E8:DF:D5:3E:48:CF:EB:D4:D7:88:73:60:7F:1D:89:A0:75
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       019ED461FCE8BB22756DCAA62CD1B604CA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          168C
Signing time:             Wed 17 Jun 2026 07:00:51 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:51 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:51 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: ecQbwkQFxZkD1qiJv/ynELq29YqfDAh9KcSQgDB8vZQ=)
                          2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:fc:e8:bb:22:75:6d:ca:a6:2c:d1:b6:04:ca:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Jun 17 07:00:51 2026 GMT
            Not After : Jun 18 07:00:51 2026 GMT
        Subject: CN=f29345e8dfd53e48cfebd4d78873607f1d89a075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:15:a5:1f:72:0b:34:61:c5:c9:0a:56:da:
                    5f:11:fb:e7:41:41:bb:1d:7a:fd:a1:7c:ed:02:0a:
                    d1:d1:79:78:2d:ff:8d:10:d5:61:1e:b6:c5:cd:1a:
                    d0:02:f0:6f:83:89:dd:f1:2b:e6:92:98:b1:0e:09:
                    3e:4a:79:fd:5b:c0:54:d3:0c:a4:a0:ef:92:9d:d8:
                    be:c5:e7:da:de:a2:8b:49:25:f6:ac:2b:51:1a:fe:
                    36:5d:98:e7:5f:ea:a6:39:1f:e0:a5:a8:08:46:b7:
                    b9:46:c6:12:90:67:33:72:56:50:55:5f:9e:08:34:
                    69:d0:cb:5f:92:e5:7a:44:6e:19:f3:84:0a:0e:6b:
                    24:8b:dd:12:48:93:5d:ba:67:db:5b:8e:c6:45:0f:
                    1f:16:d1:73:9d:fc:77:73:91:db:15:17:b2:9d:78:
                    2a:c5:ed:8d:e3:19:3f:fa:27:9a:6f:cb:0f:68:7a:
                    d9:3e:39:61:08:c2:1f:74:c2:fb:6e:30:98:49:df:
                    39:ab:30:e3:62:78:1e:47:9f:30:d2:fd:12:7d:a3:
                    f7:fe:92:11:71:d7:6b:6f:15:9f:e6:a7:70:60:60:
                    9b:cb:b6:19:34:c4:0e:99:32:5a:92:aa:5c:2d:28:
                    b5:53:93:16:ef:e7:76:15:c5:12:b7:65:4d:8e:a6:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:45:E8:DF:D5:3E:48:CF:EB:D4:D7:88:73:60:7F:1D:89:A0:75
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:7f:f5:95:cb:e8:ea:2c:2e:bb:47:d0:51:96:8a:34:c0:
         88:d9:f4:62:2a:fe:98:16:09:69:1b:ac:a7:a7:1f:c5:0d:62:
         d0:49:41:a7:d2:69:4f:50:31:6b:12:e0:e9:7c:e3:97:cd:91:
         5c:62:ae:0a:ec:3d:8c:e4:ba:d1:5c:c9:11:b0:90:4b:cc:b1:
         64:34:a3:92:b2:eb:5e:e5:bf:65:77:7c:9c:10:4e:2a:a9:4a:
         50:ea:6b:51:b5:45:40:6a:2f:6a:d3:e2:d4:24:11:1e:b9:af:
         c8:e4:eb:e2:11:4b:d8:b5:10:66:64:7f:56:2d:61:2d:54:21:
         d0:3d:de:ba:9b:01:17:9a:de:04:6c:23:4d:84:1e:4f:58:54:
         4b:6b:cc:78:4a:00:da:d1:02:5b:cb:55:90:e2:e7:a5:4d:37:
         d6:f8:39:95:f2:34:23:94:82:f7:26:77:ee:3a:48:81:08:7f:
         a9:37:7e:3b:bb:a3:fc:0e:85:02:4f:46:46:02:65:36:5d:98:
         f4:47:10:78:0d:37:16:e1:5f:f6:de:58:f2:71:10:f6:17:03:
         e4:fe:26:12:ed:09:0b:55:a2:c0:8a:62:8a:2e:22:99:f0:4f:
         8c:dc:aa:a8:b5:37:57:1f:b3:01:78:85:8b:c4:44:d8:29:ee:
         28:58:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:30 2026 by rpki-client