Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File:                     nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier:          SvYzsLNqmpmeuOhpouaRuKgipajh6YmMSf4mKAJs1wQ=
Subject key identifier:   B9:EF:F8:68:B4:F8:93:C0:C4:59:B6:16:5E:CD:25:3D:EF:03:44:BF
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer:       /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial:       019EBFC8BFB1D97980CDAE96F91A6E2E43F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number:          13FE
Signing time:             Sat 13 Jun 2026 07:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:04 +0000
Files and hashes:         1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
                          2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
                          3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
                          4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: 3H7NR/1GUnWN7tB7EwTY2fp1ZvTKSJvFYzetoF89imU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:bf:b1:d9:79:80:cd:ae:96:f9:1a:6e:2e:43:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
        Validity
            Not Before: Jun 13 07:01:04 2026 GMT
            Not After : Jun 14 07:01:04 2026 GMT
        Subject: CN=b9eff868b4f893c0c459b6165ecd253def0344bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:a8:d1:ff:bc:20:03:08:85:cd:b5:e5:2c:
                    74:b9:f1:97:5c:1f:0b:37:75:75:d4:9b:f3:f4:1c:
                    81:57:92:91:be:d7:bb:f2:1b:19:08:67:00:bb:f6:
                    3b:97:ac:74:28:1d:c1:2b:4c:e9:86:68:c8:37:6d:
                    69:fa:2d:88:4b:97:95:ef:f9:22:f4:ce:3c:3c:7e:
                    f5:36:38:56:ed:5e:0f:6b:a6:26:05:d4:02:16:e2:
                    fb:d9:b6:70:bd:96:b6:3b:ff:3a:2d:0b:e3:af:6f:
                    02:0d:ff:59:3b:4f:ef:8b:96:3e:64:bc:dd:e9:07:
                    98:1b:71:b6:6e:3e:39:63:ab:94:aa:12:2b:2e:b2:
                    fc:4b:77:52:62:c2:54:fa:63:6d:9f:5d:1e:6e:87:
                    37:b7:9b:4c:f0:b3:1c:eb:29:aa:22:1d:37:b4:1e:
                    e3:37:fc:c8:0f:1c:27:4e:62:7e:0d:03:9d:46:74:
                    d1:cc:a3:52:fc:0a:f9:60:0a:74:dc:d6:99:c9:bf:
                    09:cc:5b:f0:9d:1a:7c:35:83:a6:72:2a:78:ce:47:
                    a6:04:ec:aa:c2:d8:e1:8a:48:63:86:bb:ff:01:7a:
                    9e:a6:82:e6:39:e2:3f:6e:6b:fe:6d:2e:4c:fa:60:
                    a4:f2:b0:af:50:3a:13:70:3a:d3:a7:ab:07:37:3e:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:F8:68:B4:F8:93:C0:C4:59:B6:16:5E:CD:25:3D:EF:03:44:BF
            X509v3 Authority Key Identifier:
                keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:91:5c:5d:d8:e1:5f:88:86:14:0c:ee:d0:27:7f:f2:55:
         dd:cf:a7:f9:32:93:8d:c7:4a:85:6c:91:09:77:0f:5c:17:34:
         a0:da:ea:14:dc:8b:f5:f4:92:7d:11:11:f2:ec:f4:5b:1c:f6:
         f5:e0:b5:bb:98:c9:92:1f:6f:fd:fd:43:6f:00:0d:ac:48:62:
         1a:ff:dc:69:f3:21:af:f8:96:90:91:55:08:bf:2d:ea:43:b6:
         d5:51:7d:01:43:15:47:ab:e5:8f:f0:5f:46:5a:bf:d9:57:81:
         0c:61:10:62:ee:5e:36:2d:16:a5:5f:57:1d:66:6b:2b:6f:94:
         65:a8:dc:e9:d0:4c:46:5e:0d:cb:2f:2c:37:f5:96:92:46:36:
         c5:0b:f2:93:a2:56:98:3a:d7:16:ed:b4:cf:c5:d8:fb:f2:b6:
         f6:e5:b3:59:3d:5a:d7:78:4f:3f:df:01:ba:f8:39:f4:22:38:
         b0:81:16:44:92:73:e8:6e:65:67:82:f5:94:8f:4e:8e:58:41:
         6a:81:ad:2a:1c:51:5f:02:d7:d2:7a:e1:a9:59:15:ce:db:17:
         5f:ef:24:bd:a2:2d:20:6d:34:dc:e4:49:76:1e:a6:20:07:bf:
         ab:7b:94:10:fb:ba:88:ad:87:69:a3:f1:9c:27:f4:64:84:0e:
         1d:5c:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:00 2026 by rpki-client