Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
File:                     nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft (raw, json)
Hash identifier:          GqUpzNXgpAu/ViBVPK2unWwGGLH4zjktl6gPslx2VEs=
Subject key identifier:   78:34:11:54:26:91:0A:E8:C9:66:BC:A3:24:70:34:60:ED:A8:2A:C9
Authority key identifier: 9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E
Certificate issuer:       /CN=9f2a686b1c25d44c7dbd4d4a31fe0c7afd02a12e
Certificate serial:       019EC292C9BA1D0CCC85FDF96C5F6ACDE204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
Manifest number:          E5
Signing time:             Sat 13 Jun 2026 20:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:59 +0000
Files and hashes:         1: 1-vCuLQv8-0dOJxqABaWxM4UUc8I.roa (hash: E0Bqgi4xo21RkZJec+827sz7pg8AMyWIq6lhPjrYbo8=)
                          2: nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl (hash: 1dxk/ucXDakyZuogIyWcWnpxJTPNj7HxMgd5xl8pFgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:c9:ba:1d:0c:cc:85:fd:f9:6c:5f:6a:cd:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2a686b1c25d44c7dbd4d4a31fe0c7afd02a12e
        Validity
            Not Before: Jun 13 20:00:59 2026 GMT
            Not After : Jun 14 20:00:59 2026 GMT
        Subject: CN=7834115426910ae8c966bca324703460eda82ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:ad:be:66:1f:91:10:6f:61:fc:76:77:54:
                    35:e4:88:c0:79:82:fa:9a:0e:53:ba:33:0f:bb:8f:
                    68:64:14:98:a3:4b:27:90:7d:90:7f:c5:60:14:ac:
                    e7:86:67:d3:d7:a0:10:84:73:ad:d5:88:05:05:2a:
                    ae:a4:b7:11:6c:84:37:75:a9:53:2a:5d:ec:25:f7:
                    78:9c:b8:8a:c6:eb:6a:e6:b9:90:2e:21:d5:37:84:
                    b4:c6:4c:36:aa:74:60:d7:9b:53:b0:d9:d2:2c:b1:
                    98:8f:45:01:58:49:79:b0:b8:97:10:96:d9:2e:5d:
                    d3:6d:de:55:e3:a5:d8:70:f1:13:37:49:d6:6a:dd:
                    e3:27:15:c1:8d:ab:de:65:65:16:09:eb:66:41:39:
                    1d:13:fa:fa:50:19:ad:49:08:ea:4d:b3:39:69:71:
                    aa:7a:b5:ba:3a:57:c9:0f:69:cc:06:d1:81:50:ba:
                    98:75:e8:53:77:5d:69:37:83:a8:2c:f7:fc:ee:1d:
                    fb:23:4c:b6:7a:a2:65:8d:51:4f:f3:a9:3e:f3:2a:
                    66:8d:56:c7:13:f3:d7:96:d3:7c:1f:f1:34:58:48:
                    33:d4:c3:1a:b8:6b:2f:42:b2:cd:36:2a:59:b6:13:
                    ed:e4:c5:a6:c1:b4:cc:74:31:3b:a5:b9:07:68:46:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:11:54:26:91:0A:E8:C9:66:BC:A3:24:70:34:60:ED:A8:2A:C9
            X509v3 Authority Key Identifier:
                keyid:9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:3e:91:37:f4:ba:36:f2:0a:2f:91:75:dc:90:65:52:38:
         b9:ef:46:66:e3:e6:d1:8a:0c:e1:65:66:f1:9c:f0:94:a3:8e:
         25:4b:f3:3c:b9:77:0b:57:f0:1a:f5:18:bf:e4:bd:27:10:6a:
         39:82:1e:a0:cd:24:76:78:d4:3e:75:c8:41:d0:79:b8:26:37:
         df:53:c4:13:f7:59:dc:86:8f:ee:fb:d3:4c:5e:db:22:ff:07:
         e2:f0:e9:aa:0a:6f:a0:9f:ad:e1:ee:a8:f2:ef:98:b4:b4:17:
         0e:59:0c:da:b3:8e:7c:4d:9b:5f:15:0d:02:d3:71:48:8a:78:
         f4:04:30:29:f8:75:12:a4:2b:73:96:74:16:95:3c:45:22:47:
         38:79:92:40:dd:2d:1a:d1:d0:e5:3e:9a:f9:51:ac:0a:79:f1:
         5d:97:fa:07:e7:7a:c6:cf:f2:09:fe:29:00:86:ed:87:27:e4:
         f1:dc:d2:f9:55:d9:d6:d5:ef:35:90:68:6e:45:ce:6a:53:9a:
         f4:31:db:41:af:da:88:38:e2:1c:51:ef:23:16:03:49:eb:66:
         b1:ad:a9:82:5a:70:cf:19:22:1d:90:36:cb:16:0c:4d:a4:65:
         15:27:66:85:b8:ba:fb:bb:39:2a:67:01:f2:6b:fc:d4:07:4e:
         2a:fe:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:14 2026 by rpki-client