Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          f/uZhzA4G10Bar7lbwN/zAMrhsK+1XtUD4m2ScoG7aU=
Subject key identifier:   26:96:70:9C:6A:84:DF:FF:7C:90:6D:4F:DE:1B:D9:48:AB:EB:8F:E6
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       019EBF5B200C41BB2A1B54766D24EDACE8A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          0685
Signing time:             Sat 13 Jun 2026 05:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:20 +0000
Files and hashes:         1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
                          2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: zZZWiSRIGS0rnhrcSrkZqoqmJqxTTFg2Bqj78Ebf+pA=)
                          3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:20:0c:41:bb:2a:1b:54:76:6d:24:ed:ac:e8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Jun 13 05:01:20 2026 GMT
            Not After : Jun 14 05:01:20 2026 GMT
        Subject: CN=2696709c6a84dfff7c906d4fde1bd948abeb8fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:e9:51:5f:3b:83:47:b0:50:b7:8b:f1:be:
                    40:62:29:78:37:0f:b4:0b:a1:1d:c9:7b:cf:f1:00:
                    f6:58:3f:fc:96:22:46:19:79:4e:cf:f9:55:d5:30:
                    48:35:5f:2c:e8:1e:3f:c8:f1:13:f4:27:f6:08:0e:
                    d5:ef:f7:46:5e:f7:a6:9e:36:49:11:92:9a:38:77:
                    c2:3b:8d:b7:91:40:d6:67:d7:ff:ff:89:d4:b2:39:
                    62:f2:3e:92:aa:2c:bc:5f:9b:2e:45:e6:c2:44:00:
                    5c:02:23:ea:f1:7d:d9:60:4a:dc:fe:9d:8b:10:c3:
                    08:11:35:fa:4c:c3:ee:ad:79:4d:c5:54:f3:58:71:
                    2e:86:be:8b:5a:ff:aa:89:70:fd:8b:73:a6:17:c7:
                    d0:f4:dd:01:dd:88:d1:c3:44:d2:b0:10:87:ba:1c:
                    ba:f2:b1:71:25:e0:1d:b9:f1:95:94:60:88:6e:de:
                    c2:69:74:f6:b0:77:ca:f6:a0:85:35:d0:2e:70:8b:
                    89:2d:2c:95:93:55:81:d6:c7:2d:5f:b1:68:b9:7b:
                    42:99:81:57:f6:0a:8c:0d:45:d8:74:ce:ce:aa:df:
                    1a:b4:de:3f:b7:7b:69:42:e0:af:fd:93:37:b4:29:
                    86:38:e0:b2:01:17:6d:53:89:39:a3:95:6d:ac:50:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:70:9C:6A:84:DF:FF:7C:90:6D:4F:DE:1B:D9:48:AB:EB:8F:E6
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:b4:fd:3e:81:06:c2:d0:d3:ee:ba:f3:43:4b:bb:8f:78:
         15:5f:12:53:c2:2d:2e:ad:b0:e3:28:59:1b:bb:70:e9:a1:bc:
         ef:b0:1e:0a:24:2c:3b:fd:d0:84:4b:62:fc:65:ff:69:d8:20:
         55:f3:6b:79:fb:1a:14:ba:63:e5:7a:0c:3d:32:5b:65:35:87:
         61:d3:aa:29:93:2d:a9:06:99:39:82:d2:f5:48:7a:7e:e5:a2:
         06:50:67:96:ed:e5:cc:99:da:5e:ba:3b:cc:ed:84:a0:ae:29:
         c2:c8:6c:db:6f:eb:ce:b6:ff:5d:12:7b:24:60:74:f9:45:b0:
         23:94:5a:b9:86:65:b9:26:4d:6d:75:dc:a1:01:57:eb:ab:92:
         16:75:d0:14:8c:d2:e7:50:00:48:a2:ce:80:f6:25:ad:d3:8c:
         02:59:db:f4:cd:93:20:8a:45:fe:2e:b7:21:f2:c9:47:6b:93:
         fd:94:ca:f7:0d:ff:91:28:05:86:cb:0d:db:70:00:1f:b2:d4:
         2e:ba:74:75:a2:d5:2d:cb:20:ae:f1:da:23:79:57:f6:a4:2c:
         c4:26:21:63:e9:95:e8:b5:f1:5c:4c:69:f6:88:10:63:df:3e:
         03:26:7b:16:26:83:34:4b:5f:d4:25:d0:8f:51:21:28:1b:b9:
         22:46:28:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WyAMQbsqG1R2bSTtrOijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjYwNjEzMDUwMTIwWhcNMjYwNjE0MDUwMTIwWjAzMTEwLwYDVQQD
EygyNjk2NzA5YzZhODRkZmZmN2M5MDZkNGZkZTFiZDk0OGFiZWI4ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U/pUV87g0ewULeL8b5AYil4Nw+0
C6EdyXvP8QD2WD/8liJGGXlOz/lV1TBINV8s6B4/yPET9Cf2CA7V7/dGXvemnjZJ
EZKaOHfCO423kUDWZ9f//4nUsjli8j6Sqiy8X5suRebCRABcAiPq8X3ZYErc/p2L
EMMIETX6TMPurXlNxVTzWHEuhr6LWv+qiXD9i3OmF8fQ9N0B3YjRw0TSsBCHuhy6
8rFxJeAdufGVlGCIbt7CaXT2sHfK9qCFNdAucIuJLSyVk1WB1sctX7FouXtCmYFX
9gqMDUXYdM7Oqt8atN4/t3tpQuCv/ZM3tCmGOOCyARdtU4k5o5VtrFARLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaWcJxqhN//fJBtT94b2Uir64/mMB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ+0/T6B
BsLQ0+6680NLu494FV8SU8ItLq2w4yhZG7tw6aG877AeCiQsO/3QhEti/GX/adgg
VfNrefsaFLpj5XoMPTJbZTWHYdOqKZMtqQaZOYLS9Uh6fuWiBlBnlu3lzJnaXro7
zO2EoK4pwshs22/rzrb/XRJ7JGB0+UWwI5RauYZluSZNbXXcoQFX66uSFnXQFIzS
51AASKLOgPYlrdOMAlnb9M2TIIpF/i63IfLJR2uT/ZTK9w3/kSgFhssN23AAH7LU
Lrp0daLVLcsgrvHaI3lX9qQsxCYhY+mV6LXxXExp9ogQY98+AyZ7FiaDNEtf1CXQ
j1EhKBu5IkYokw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:00 2026 by rpki-client