Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File:                     N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier:          dz1kuC1zl5lrUtVAbxtzdGhRTlEmqlkS59I3J0cmLis=
Subject key identifier:   E9:08:6F:56:92:26:9F:74:D9:F7:C6:F3:53:60:55:D1:96:74:61:36
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer:       /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial:       019EC0A43327711C5925E1F2465570BBD1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number:          14AF
Signing time:             Sat 13 Jun 2026 11:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:46 +0000
Files and hashes:         1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
                          2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 1vV0/TLw78Nb9L1sByQkSV4VQOF7zH3o1XpTbyCzan4=)
                          3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:33:27:71:1c:59:25:e1:f2:46:55:70:bb:d1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
        Validity
            Not Before: Jun 13 11:00:46 2026 GMT
            Not After : Jun 14 11:00:46 2026 GMT
        Subject: CN=e9086f5692269f74d9f7c6f3536055d196746136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:1a:5b:90:62:33:5b:69:e1:22:a1:bc:31:
                    58:7a:cf:13:34:ca:0f:e9:d8:d2:e5:50:41:36:40:
                    2a:c7:57:ce:52:72:38:53:bb:4c:d3:87:8b:c0:a5:
                    88:c0:c9:20:17:5a:8d:a9:d0:f8:94:ab:91:9b:76:
                    04:0f:f3:18:3c:1c:81:92:d1:c4:e7:ae:22:ee:58:
                    04:68:86:9e:df:ec:00:dc:c7:aa:ca:d5:37:80:83:
                    3a:b4:dd:7a:cf:c7:be:fe:77:90:b9:7c:bf:93:4d:
                    1d:d4:33:e5:0b:ef:c2:19:86:19:c6:00:b4:82:e0:
                    52:c7:37:07:9c:5f:09:1e:a7:f8:64:36:fc:a6:89:
                    66:5b:1d:4f:12:70:af:9a:c2:6b:3f:87:7d:ec:36:
                    d9:be:8c:2d:8f:5f:ab:7f:7c:fe:69:ef:a4:e8:04:
                    56:e4:1e:99:5d:2a:76:50:5f:92:75:23:65:76:86:
                    f0:88:1a:9b:86:45:59:fb:93:81:8c:81:3e:20:8a:
                    ca:ab:c9:c5:93:0b:67:ea:b3:b9:6c:54:90:80:a3:
                    c0:ad:ea:40:8e:97:5c:55:00:ec:ed:9f:b9:4c:2c:
                    b4:1e:d3:e6:b2:d7:00:84:53:01:cd:a8:b4:c4:6d:
                    9f:c9:6e:b4:16:c0:02:24:5e:db:0e:3d:0c:93:c0:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:08:6F:56:92:26:9F:74:D9:F7:C6:F3:53:60:55:D1:96:74:61:36
            X509v3 Authority Key Identifier:
                keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:01:e2:cb:11:ba:e7:02:27:2e:e5:ce:c5:85:09:27:b5:19:
         3a:b4:26:d9:3b:cb:8e:c1:b6:42:09:f9:95:d9:6f:9c:0d:30:
         f2:0c:5c:07:0a:09:4e:33:b3:10:b9:b3:39:cd:2b:df:5c:b9:
         19:fd:09:06:40:d5:4b:0f:d2:98:11:23:80:6b:2d:99:17:2e:
         67:10:83:76:c7:63:64:a7:bb:2e:69:35:0d:d7:89:14:dd:20:
         e7:21:66:81:7a:e7:ea:1b:3d:c2:d1:4b:87:8e:f2:df:a8:94:
         06:58:ca:6e:18:d3:fe:eb:36:28:08:54:e9:af:e8:85:18:fb:
         af:59:11:e3:71:2f:48:80:4f:31:f5:82:02:a0:6d:65:e0:7f:
         d9:14:63:59:62:14:ae:01:2a:bc:1b:68:13:fa:45:aa:69:bd:
         e3:c6:1f:08:25:0d:15:da:a6:31:0b:b8:ec:6a:5c:85:93:3d:
         12:72:25:66:58:ea:34:f9:44:37:7b:07:48:c7:f5:47:0f:23:
         4d:ef:f7:dc:cc:af:15:ab:ca:de:63:ca:7e:e8:c1:86:0c:46:
         01:91:ab:56:f9:e1:f6:da:50:d9:f0:5b:25:b9:29:2e:28:36:
         9a:a9:03:90:46:56:ea:b3:4d:8d:44:49:d7:e2:4b:3f:9c:13:
         29:b6:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:56 2026 by rpki-client