Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          KReOJ5sIs5SUcNUtUNvqlIFByc/N1mnJ2xUdObrGUvM=
Subject key identifier:   E4:10:07:AE:DF:FC:BD:15:56:EB:8F:00:E3:5A:C5:B9:62:31:70:CD
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       019ED506C9B9FE87294321E8DEE6595C9895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0F12
Signing time:             Wed 17 Jun 2026 10:00:52 +0000
Manifest this update:     Wed 17 Jun 2026 10:00:52 +0000
Manifest next update:     Thu 18 Jun 2026 10:00:52 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: U/fDiY6F3xVk/j4W1zPwJAColi+1liYkju/HcjE4vjc=)
                          2: U1i2p1mwMwcMPAenuBEHdijiIZE.roa (hash: AHlcD8BHVzzh2oESK4HUkXMAua5AnRRE5iMN+WNNbdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:06:c9:b9:fe:87:29:43:21:e8:de:e6:59:5c:98:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: Jun 17 10:00:52 2026 GMT
            Not After : Jun 18 10:00:52 2026 GMT
        Subject: CN=e41007aedffcbd1556eb8f00e35ac5b9623170cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:37:c3:01:c5:46:87:86:a8:6f:8b:7a:bf:
                    aa:f8:8b:73:f0:55:5a:e4:1e:6b:a4:3c:3e:9e:12:
                    8c:7d:95:d5:9a:e4:c2:4d:8b:0f:79:49:05:6b:0a:
                    a6:12:57:32:e5:78:e6:39:a0:ac:a3:8d:bf:8c:80:
                    02:48:5f:cd:1d:12:4f:65:7a:98:f0:2f:9f:4f:d5:
                    ba:cc:c8:d2:af:69:ad:d1:42:25:c0:26:11:23:a9:
                    e2:9b:f1:ba:93:c2:d0:4f:d1:ec:9e:f3:b3:f7:c3:
                    3c:fb:75:84:3e:7b:b2:76:f4:31:97:8b:c3:f5:37:
                    bc:fa:79:91:9e:66:56:e4:5e:28:82:26:ae:f3:bc:
                    9e:3d:92:53:c7:c4:ef:87:a1:17:fb:43:c4:54:65:
                    12:66:48:ef:96:e1:59:3a:47:b4:6b:8e:b3:44:54:
                    66:61:ed:32:3a:ac:0a:a2:dc:85:12:bb:31:87:77:
                    5f:9b:51:3a:35:10:92:ab:c3:08:b4:9e:65:25:97:
                    73:af:51:59:35:6d:67:06:b9:34:13:53:27:02:81:
                    e6:4a:15:c5:3a:72:cf:06:46:7d:dd:dc:1f:57:af:
                    12:4d:5e:5f:1b:58:4b:b3:6b:02:53:32:d4:73:ec:
                    81:7d:57:e3:0d:69:8d:c4:fe:1a:92:0b:a4:dd:cd:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:10:07:AE:DF:FC:BD:15:56:EB:8F:00:E3:5A:C5:B9:62:31:70:CD
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:7a:df:13:59:14:6f:21:b4:ef:c7:f4:58:6a:7f:9e:ad:
         67:5d:cc:23:f1:89:5e:91:cc:34:13:61:7a:b3:79:38:8f:b7:
         a4:00:30:50:9c:90:d4:ec:7f:81:57:5a:f2:9f:af:48:3e:60:
         ce:54:12:53:2d:7c:83:02:53:6c:6e:e5:01:19:f7:5d:20:9f:
         0c:03:88:69:31:ff:dc:5f:5f:d5:e5:8f:3b:55:b7:bd:cc:82:
         42:b3:26:e8:74:98:da:4c:45:d6:6d:51:bc:77:7d:57:9d:0e:
         2b:bf:cb:3e:44:11:4b:40:93:cd:69:6f:2b:ec:4a:d1:c6:f3:
         81:e7:e9:35:15:ff:53:2f:fe:a0:0b:47:00:05:1c:e5:8c:16:
         a6:5f:65:68:57:a9:c5:1b:91:fc:fa:ff:6e:ed:95:ed:26:38:
         ba:7a:63:d2:79:97:17:b0:09:06:a5:de:46:0d:90:2e:fe:fa:
         95:3c:62:0a:5d:6b:0b:28:b2:1b:f8:bf:d9:d8:58:ea:a5:b7:
         34:48:5b:8c:d1:80:26:9b:7f:1a:53:6e:1b:8b:f8:ca:99:41:
         5a:75:4c:b6:bc:3e:f2:ed:ee:e3:1a:9d:3f:61:af:83:e5:e3:
         9c:ed:49:9f:65:6f:5f:aa:0f:96:63:bd:da:52:85:56:88:f8:
         8b:44:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:36:41 2026 by rpki-client