Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File:                     t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier:          xi2I5IQljK4ISPjFJxn6S/4bmxwSx6tGLuJB3CU3XCU=
Subject key identifier:   0B:81:62:D7:E0:9B:54:06:05:F3:FE:0C:95:89:AA:11:85:56:5D:5A
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer:       /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial:       019ED42BBFD65FE9B99734B7E21424A267C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number:          014E
Signing time:             Wed 17 Jun 2026 06:01:37 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:37 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:37 +0000
Files and hashes:         1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
                          2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: Y0IP58SPOI9DMSmD1HCqjcVrvCMFVDxslNZWUI34S24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:bf:d6:5f:e9:b9:97:34:b7:e2:14:24:a2:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
        Validity
            Not Before: Jun 17 06:01:37 2026 GMT
            Not After : Jun 18 06:01:37 2026 GMT
        Subject: CN=0b8162d7e09b540605f3fe0c9589aa1185565d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2e:e9:16:7b:1e:91:52:85:f0:d3:30:ae:93:
                    0c:bf:df:03:88:ad:ba:ae:92:44:f5:07:89:d8:51:
                    29:73:fd:c4:f7:df:82:cd:6a:c0:9c:b5:4e:1e:80:
                    c7:76:92:4b:7e:8a:6b:a6:f6:a2:8d:7d:79:cb:7d:
                    71:af:54:3d:c2:23:b3:24:c4:8d:35:de:e6:27:35:
                    2d:c8:c0:9c:22:77:3b:b8:4b:9d:82:96:18:11:c3:
                    c5:08:6a:80:8a:55:ef:62:48:4c:78:14:40:3c:3b:
                    8a:a4:9c:bf:40:59:f7:9b:39:d1:9d:c6:ee:06:16:
                    28:d1:b0:8a:d2:2d:92:85:3d:63:b0:a3:e8:5e:bc:
                    89:96:ce:25:47:55:aa:8f:bd:25:01:f0:83:1a:1e:
                    87:81:f1:6b:a1:c9:74:bc:df:d2:dd:c2:df:73:f3:
                    a1:34:3b:8c:30:6d:64:2e:f2:26:2e:23:f1:50:1a:
                    b1:d9:35:09:d4:d8:78:de:c4:5f:3d:e0:b9:04:4d:
                    3a:f1:17:76:62:a7:4c:21:26:25:eb:9b:53:5f:4d:
                    30:b3:c6:72:9c:12:23:55:8f:ce:d2:61:46:de:11:
                    7c:ae:a1:53:19:8a:bc:1f:ce:d5:4d:0b:72:2e:0c:
                    8b:49:62:0a:07:c6:af:6c:e7:75:8f:9c:cb:d1:6b:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:62:D7:E0:9B:54:06:05:F3:FE:0C:95:89:AA:11:85:56:5D:5A
            X509v3 Authority Key Identifier:
                keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:a9:c7:0e:e6:45:7d:b1:54:6f:8e:61:54:a3:70:5b:3f:
         63:04:20:aa:0d:ac:ab:97:80:cb:92:57:74:de:be:82:09:ad:
         f6:28:0b:2e:5f:4c:8d:5d:65:f2:45:ea:6f:4d:67:f6:a5:9a:
         8b:7f:00:6a:eb:c3:6a:fb:2b:d4:dc:a0:af:22:6f:de:4c:1c:
         76:e9:1f:ad:f2:17:e7:87:6b:d3:b0:e7:58:96:eb:04:21:db:
         75:61:9f:66:60:d0:28:b8:27:d9:2e:dc:b3:09:29:8a:b7:d6:
         54:79:07:ad:b9:b2:53:44:86:81:98:5a:90:2e:a8:3e:fa:ce:
         1c:da:b1:de:b3:37:ac:af:e2:4a:b9:0c:67:0d:f9:52:2f:26:
         c0:84:81:d4:7c:d2:00:1b:6e:89:5f:df:74:8b:68:4f:bc:be:
         f2:ee:ff:e4:90:3e:ef:99:38:03:0b:0e:dc:c5:33:b0:e3:f4:
         40:3f:b9:fa:c1:63:f0:9c:68:50:68:9e:45:10:f4:b6:b3:e7:
         69:5b:fb:25:18:a2:61:ed:52:af:fc:84:e0:59:7e:4f:44:6d:
         bf:c7:30:a3:70:d4:f9:0d:2e:5f:52:b8:05:5f:a5:78:2d:6c:
         8a:51:67:9a:0e:f3:58:cc:aa:91:ae:23:8f:56:ac:cc:00:fc:
         d0:d1:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:38:34 2026 by rpki-client