Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          Hk9ODyZjUFlhS9eWXi0Yag67JfMbunMtElzAnoms9wc=
Subject key identifier:   37:42:DE:FE:24:5C:AA:A6:56:58:2E:C9:F6:DE:D3:68:E9:EB:24:A4
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       019ED386BF5D1B478F79BD9DDD5D72AF29AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          1963
Signing time:             Wed 17 Jun 2026 03:01:23 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:23 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:23 +0000
Files and hashes:         1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: SdRQ/yL2s3GUVybcFgcFF1730VGTPUugX8A2DEcI6Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:bf:5d:1b:47:8f:79:bd:9d:dd:5d:72:af:29:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Jun 17 03:01:23 2026 GMT
            Not After : Jun 18 03:01:23 2026 GMT
        Subject: CN=3742defe245caaa656582ec9f6ded368e9eb24a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:9c:3c:1e:e1:d9:f7:7f:6e:60:47:32:82:
                    84:0f:6e:0e:07:7b:e9:27:5d:4f:cd:ab:88:86:f9:
                    e7:64:e2:1b:39:ac:77:30:78:2e:7b:4d:df:bf:28:
                    63:53:b1:4b:c1:04:8b:cf:36:0e:6d:a1:39:71:11:
                    55:47:c8:a4:16:64:fa:f6:cf:d2:8b:11:46:3b:8d:
                    df:7c:45:15:2e:09:18:a8:7f:94:19:6d:df:69:50:
                    f8:2e:04:68:da:27:b4:09:eb:5d:ca:cf:5c:27:d5:
                    52:8a:c9:2f:b5:6b:19:0b:fa:0a:a4:6d:a3:48:7b:
                    2b:78:31:1c:b3:57:fb:9d:22:70:35:49:25:3e:b8:
                    dc:43:a2:83:d4:e6:40:d2:83:10:9d:0f:96:c6:02:
                    98:96:01:de:07:bb:de:e6:5f:7f:5f:30:c5:42:c6:
                    2e:4c:94:43:4f:61:aa:cc:66:8a:f5:a3:a3:9e:02:
                    5c:9d:37:cc:39:c6:da:9c:0a:8b:16:a4:8e:ca:3d:
                    b4:3d:97:22:8c:ff:38:9c:ec:2e:05:f2:1c:fb:e2:
                    9b:5e:31:76:b7:be:50:6d:99:0b:4f:4d:f6:27:3b:
                    21:35:66:5e:30:03:7d:e2:2f:40:aa:58:02:8a:c0:
                    5d:ea:60:55:ac:e3:a8:cb:a5:cf:be:e3:7d:f8:e4:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:42:DE:FE:24:5C:AA:A6:56:58:2E:C9:F6:DE:D3:68:E9:EB:24:A4
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:c6:10:b9:7f:2a:56:9d:77:38:39:ff:a2:89:f2:37:65:
         57:3a:db:27:38:bb:c9:a0:7e:0e:a6:81:03:e0:51:0b:74:1a:
         d0:3c:da:4a:37:cc:d8:78:3e:f5:0a:3c:ff:e3:37:ea:69:65:
         ba:62:89:e6:59:ce:e1:66:ed:79:58:de:41:54:cb:95:ba:03:
         54:e0:17:15:8a:37:63:a8:c1:b5:d6:78:ab:3e:47:82:aa:4b:
         9c:7a:94:be:7a:88:25:e7:66:71:85:62:49:66:82:08:74:88:
         10:3e:17:c3:7d:45:d3:5c:f6:d2:36:96:44:e2:bf:c8:82:80:
         ce:6d:c3:64:ac:56:b4:04:a8:06:bc:76:c3:33:67:d8:39:7b:
         95:89:25:b5:70:70:fc:4d:eb:26:32:d2:1b:34:ac:b7:08:58:
         c1:cc:d9:15:91:77:d4:e7:f7:d2:f3:33:11:f3:9f:00:ac:54:
         86:c4:8f:c3:3f:2c:a7:dd:2f:55:1c:91:48:7a:eb:50:72:81:
         6d:b6:29:4f:85:cb:98:b6:af:f4:2a:85:83:79:49:3d:f2:4b:
         73:56:0e:0b:4f:a1:c4:8d:7e:a0:a2:f2:4c:ff:28:55:fe:b3:
         b1:57:6f:f5:fb:ba:90:47:d8:08:55:14:87:39:92:96:cb:6b:
         5a:61:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:28 2026 by rpki-client