Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          6TBb+HoqRxBRu/R5FrwbbCdwzUXWKjYOF5krssYd2MA=
Subject key identifier:   5A:A7:CD:80:5D:EF:55:FB:BB:DA:97:E2:BF:06:AB:BC:A3:11:40:69
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       019EC17F72FDCCD2A62946709B5F90661D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          0664
Signing time:             Sat 13 Jun 2026 15:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:15 +0000
Files and hashes:         1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: M9OKwzX9nOxX0WOofuIa6pTfqf1qAGJ4BC4+VbalsUg=)
                          2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:72:fd:cc:d2:a6:29:46:70:9b:5f:90:66:1d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Jun 13 15:00:15 2026 GMT
            Not After : Jun 14 15:00:15 2026 GMT
        Subject: CN=5aa7cd805def55fbbbda97e2bf06abbca3114069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:15:05:03:d1:c4:93:74:16:68:44:be:8a:
                    d2:9a:6b:b8:bd:ef:8b:9e:39:08:f8:30:64:11:6a:
                    d7:ba:e7:bb:cc:49:ab:0d:73:d6:cf:8d:2b:aa:a1:
                    0d:3b:0f:2a:6d:77:41:b3:f8:0f:b0:58:bf:77:6a:
                    d0:c8:59:dd:88:fe:07:ca:de:3a:f0:37:b2:87:58:
                    ae:f1:f5:74:bb:1e:93:53:a8:24:37:93:2c:54:1f:
                    cd:21:86:53:1a:47:3c:1e:92:e5:d0:8f:97:ca:fb:
                    69:eb:3b:79:af:93:22:b8:b1:99:37:2c:98:8c:02:
                    62:75:e5:fa:96:eb:33:05:ed:4f:dd:b3:10:64:62:
                    d6:ce:bf:d0:30:5a:05:1c:23:d9:3f:96:dd:10:b8:
                    3f:21:d9:54:6a:b8:d3:a8:7b:77:bc:87:1c:e7:ac:
                    a1:85:74:af:a9:3e:63:40:b2:1a:9e:53:8e:e3:af:
                    54:60:3d:97:c4:8d:61:10:32:37:ac:83:42:3d:14:
                    0b:c4:c3:b4:18:ed:6c:f3:48:00:4c:1b:9e:17:a3:
                    d2:34:de:28:f6:48:dc:60:d4:7d:64:ca:7c:97:7e:
                    45:31:b9:21:b3:81:ee:91:92:c7:78:81:7b:b7:56:
                    b9:64:39:67:8b:f5:76:4e:1a:72:43:be:f5:38:aa:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:CD:80:5D:EF:55:FB:BB:DA:97:E2:BF:06:AB:BC:A3:11:40:69
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:52:69:87:01:17:27:cc:db:59:57:d8:16:d0:8b:4c:05:f3:
         f7:03:45:87:8b:7e:05:7d:72:f2:b2:8d:78:8b:d2:74:f4:80:
         36:d8:dd:57:dd:f7:c3:00:27:7b:74:0f:e9:e8:90:7b:cd:df:
         f1:57:f9:bd:2e:bb:fb:83:fd:ab:7b:9c:35:1d:20:72:81:27:
         73:05:9c:b3:4f:1b:9a:08:de:f7:40:a3:63:38:7e:3b:de:ea:
         3a:98:f5:fb:03:05:d7:82:ae:70:82:5c:46:dd:83:2c:10:00:
         78:c6:94:04:05:f1:5e:c4:5d:c9:c2:29:fe:d3:e5:72:a5:0b:
         20:e7:3f:7d:19:47:b6:a0:c3:4b:f5:fe:cf:c7:85:94:72:33:
         df:6e:8e:88:2c:c1:94:5f:76:45:b3:11:ab:36:a1:f9:bc:55:
         c7:f1:48:20:51:5f:26:00:cd:c1:3f:71:57:d3:f9:d8:e4:53:
         b1:f0:cc:3f:11:03:c0:57:2e:df:50:12:4e:7e:08:04:e9:03:
         38:c2:88:6a:8b:c3:8c:56:ba:6d:21:b2:6d:79:bb:8b:5c:a0:
         25:6a:2c:8a:33:68:25:f4:3c:22:b6:8c:67:a5:b1:07:20:c0:
         30:4d:77:5a:27:75:90:55:43:e1:77:b0:76:6a:5b:89:d4:ea:
         42:b1:cf:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf3L9zNKmKUZwm1+QZh0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh
MjVlZDEwHhcNMjYwNjEzMTUwMDE1WhcNMjYwNjE0MTUwMDE1WjAzMTEwLwYDVQQD
Eyg1YWE3Y2Q4MDVkZWY1NWZiYmJkYTk3ZTJiZjA2YWJiY2EzMTE0MDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD4VBQPRxJN0FmhEvorSmmu4ve+L
njkI+DBkEWrXuue7zEmrDXPWz40rqqENOw8qbXdBs/gPsFi/d2rQyFndiP4Hyt46
8Deyh1iu8fV0ux6TU6gkN5MsVB/NIYZTGkc8HpLl0I+Xyvtp6zt5r5MiuLGZNyyY
jAJideX6luszBe1P3bMQZGLWzr/QMFoFHCPZP5bdELg/IdlUarjTqHt3vIcc56yh
hXSvqT5jQLIanlOO469UYD2XxI1hEDI3rINCPRQLxMO0GO1s80gATBueF6PSNN4o
9kjcYNR9ZMp8l35FMbkhs4HukZLHeIF7t1a5ZDlni/V2ThpyQ771OKphqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqnzYBd71X7u9qX4r8Gq7yjEUBpMB8GA1UdIwQY
MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt
YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy
LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFJphwEX
J8zbWVfYFtCLTAXz9wNFh4t+BX1y8rKNeIvSdPSANtjdV933wwAne3QP6eiQe83f
8Vf5vS67+4P9q3ucNR0gcoEncwWcs08bmgje90CjYzh+O97qOpj1+wMF14KucIJc
Rt2DLBAAeMaUBAXxXsRdycIp/tPlcqULIOc/fRlHtqDDS/X+z8eFlHIz326OiCzB
lF92RbMRqzah+bxVx/FIIFFfJgDNwT9xV9P52ORTsfDMPxEDwFcu31ASTn4IBOkD
OMKIaovDjFa6bSGybXm7i1ygJWosijNoJfQ8IraMZ6WxByDAME13Wid1kFVD4Xew
dmpbidTqQrHP/A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:37 2026 by rpki-client