Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File:                     Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier:          SgaQdhu18tDZgX3+z8o8Xab31/bGB6F9E3CA2usFpJQ=
Subject key identifier:   12:80:BD:3E:58:4C:6D:C2:5F:1B:F6:3C:A0:6A:21:B9:C2:BE:EF:B2
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer:       /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial:       019EC2CA192C05EA780AF7B163C87C084073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 21:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:25 +0000
Files and hashes:         1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: z0cDB13rzNVlcHZUK8tDgActFYgN0NwKR9zWyS3Fq+c=)
                          2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
                          3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:19:2c:05:ea:78:0a:f7:b1:63:c8:7c:08:40:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
        Validity
            Not Before: Jun 13 21:01:25 2026 GMT
            Not After : Jun 14 21:01:25 2026 GMT
        Subject: CN=1280bd3e584c6dc25f1bf63ca06a21b9c2beefb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:0f:42:18:15:01:99:68:72:39:55:32:18:
                    08:da:5c:19:e6:cc:a1:da:47:e0:e9:88:9b:f1:09:
                    1b:b2:c6:eb:f8:d0:8f:32:de:07:b1:c0:e7:f3:ba:
                    be:f6:92:5f:a3:63:2f:eb:78:b9:8a:4a:c9:f0:64:
                    50:30:24:26:bc:1a:e6:21:8c:07:96:13:76:cb:1b:
                    6b:ca:67:ec:66:b4:1f:48:e4:e6:cb:fe:2a:f3:a2:
                    c6:01:a0:1c:93:7a:bf:05:05:f7:20:3c:4d:0a:5a:
                    3a:6f:9a:dd:1e:a3:7e:31:c5:9e:52:7e:eb:d4:ed:
                    8f:4c:6b:3a:cf:70:48:0f:96:6e:75:85:5a:fb:2a:
                    93:b3:80:fa:86:f9:e1:ef:cd:ff:90:28:78:73:f3:
                    f4:62:83:11:ea:f1:4c:db:ec:f6:bf:68:1c:e2:46:
                    98:a0:68:41:b7:35:2a:1b:60:6f:71:a5:b6:1f:65:
                    56:1a:6c:f1:98:6a:d7:bc:b4:d0:55:8b:74:2e:c7:
                    ff:20:4d:1c:d7:56:27:15:c5:b9:36:23:32:e4:ce:
                    e2:b7:dc:b8:0b:70:9e:04:77:a1:6c:07:2e:72:de:
                    d8:b9:c0:01:7a:e4:59:39:92:ea:c4:a4:11:a3:48:
                    87:b7:dc:31:23:cd:05:62:1a:bd:3d:7b:95:3b:61:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:BD:3E:58:4C:6D:C2:5F:1B:F6:3C:A0:6A:21:B9:C2:BE:EF:B2
            X509v3 Authority Key Identifier:
                keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:91:21:52:04:9f:d8:d0:e9:80:cb:e2:2d:3e:63:dd:c2:ad:
         27:90:2c:f1:d1:65:84:51:95:a5:c3:c1:9a:7f:fc:c8:46:b0:
         1f:5d:bd:83:56:a5:aa:ba:80:19:0d:b1:dd:88:d2:1d:8d:b1:
         71:f5:7d:55:be:f9:65:51:fd:cd:39:99:68:31:6a:86:18:64:
         ad:b4:68:12:73:4b:31:07:82:01:e0:7f:09:64:2f:48:d4:df:
         8e:6e:0f:1f:ee:4e:e8:0b:64:67:3e:06:e7:82:86:d1:b3:9d:
         c0:a9:a1:e8:e1:ea:2f:54:24:a5:d5:e8:bf:d6:11:a5:70:dc:
         9d:6c:b1:a5:e9:ad:7d:df:85:9e:2f:c9:64:51:1f:78:9f:5d:
         69:f8:87:2e:ff:c5:be:9e:0f:32:52:ac:79:29:01:c5:17:61:
         45:75:5a:77:94:c4:9f:66:69:e4:66:27:35:c5:a2:6f:94:da:
         80:bc:ac:fb:85:fc:7d:88:84:92:c7:db:6d:96:4e:d0:bf:52:
         62:38:35:c1:12:51:55:ab:71:2f:2d:3a:63:50:82:2a:8e:3e:
         8f:91:c7:b2:34:62:8a:af:2d:bc:2a:80:c6:91:cc:ba:bc:f7:
         24:64:dc:b0:f9:b0:09:91:90:4d:d4:71:25:2c:e8:f3:c0:4d:
         56:a0:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:57 2026 by rpki-client