Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          rZN/MpS4fCu6nqnn0jqQ5LPj9ED85Fwi4eIMHwROgKs=
Subject key identifier:   27:18:95:B9:2D:FA:73:0B:73:0D:3C:BD:09:D4:81:81:14:BE:98:1C
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019EC0A4095BF52E401CC115354B3BEC4641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          0F12
Signing time:             Sat 13 Jun 2026 11:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:36 +0000
Files and hashes:         1: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (hash: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=)
                          2: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (hash: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ=)
                          3: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (hash: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=)
                          4: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: C+PSo5RWvc9448u8kw+G0M6DByTetRF/zPGnO71Zb10=)
                          5: piHfYItCMRZJoIEsDJ__Qf2pGaA.roa (hash: RezZZPRB2YkkE5M8DiOZbDxcJLsNR31nGSqMJCGciug=)
                          6: rkgYpLaSooeAeaPc6HeDMNwsGSE.roa (hash: dwK5xzYUrSSoaqAtejdAj3gsVAadyZPLwc0zD6SmFNo=)
                          7: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (hash: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:09:5b:f5:2e:40:1c:c1:15:35:4b:3b:ec:46:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jun 13 11:00:36 2026 GMT
            Not After : Jun 14 11:00:36 2026 GMT
        Subject: CN=271895b92dfa730b730d3cbd09d4818114be981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:c3:54:37:80:0e:cb:a3:5a:75:48:c2:71:
                    c8:c0:18:5a:9c:77:6a:f9:41:0d:c2:87:49:64:38:
                    57:e7:18:90:65:92:79:5f:54:52:94:86:de:e8:d9:
                    0c:a2:a2:47:3d:b7:0e:1e:f8:6e:94:14:63:10:51:
                    6c:2d:c2:cc:82:f3:f0:21:7a:39:35:58:4d:31:2b:
                    f7:14:3e:a1:e1:49:62:15:87:62:c7:e4:8f:d3:3c:
                    fe:b9:ba:eb:6b:da:2c:47:ac:4c:1a:49:d3:62:49:
                    2d:8e:24:1c:be:94:25:7a:04:ca:d2:f7:c1:6f:7c:
                    f9:9f:c9:85:33:d4:03:0a:f9:2a:02:0f:fa:66:89:
                    60:7b:41:43:f1:c1:69:1b:7d:48:cb:ff:dc:84:22:
                    48:1b:27:7a:14:21:63:9f:40:c7:b4:f8:62:c6:7f:
                    83:e0:41:87:99:5e:74:66:3c:04:45:25:b4:ce:92:
                    15:f5:d6:3d:8c:0e:a7:61:82:fd:80:af:cd:a9:18:
                    ce:de:15:f3:31:fa:6d:71:5c:58:91:c5:b2:a7:80:
                    84:7c:99:4e:01:bf:71:75:26:60:42:21:b0:69:1d:
                    96:6c:57:92:8a:fb:71:97:76:c3:07:65:ef:69:52:
                    9a:52:b1:1a:19:e9:6d:9a:9f:4b:c2:2a:99:08:25:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:95:B9:2D:FA:73:0B:73:0D:3C:BD:09:D4:81:81:14:BE:98:1C
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:42:5a:36:b1:89:42:07:5a:aa:b2:25:a3:9c:18:09:66:
         d5:73:1c:21:dc:94:91:6a:f6:56:33:39:74:d3:fe:b4:93:f9:
         fe:39:36:0a:7c:4e:7b:11:2b:c9:81:eb:60:07:39:f5:73:78:
         e3:98:89:4f:68:18:69:e1:76:c6:94:49:63:c1:cf:42:12:ad:
         2b:58:d9:7f:4d:83:48:ad:b8:59:59:b0:82:96:fa:fb:dd:79:
         71:9a:a6:34:1a:c8:cd:ef:74:47:f4:31:5e:fc:f0:18:d8:be:
         91:22:35:f7:82:e2:15:a4:57:fd:44:3d:d5:91:04:0c:8c:66:
         5f:ff:10:0f:61:18:27:dd:c0:f5:1b:f8:4f:78:13:fd:41:82:
         f1:9e:35:da:fa:35:66:44:4f:73:30:63:25:25:8b:6e:e2:59:
         0f:51:36:fd:ac:66:2e:c5:ec:45:ee:1d:a2:02:de:2d:ed:b1:
         9c:ef:10:69:db:34:5b:93:f6:21:c6:cd:be:42:6a:fa:e1:6d:
         4f:3f:ce:ac:26:4d:52:44:69:f0:fc:9c:da:34:b6:bd:be:01:
         fc:48:66:87:e2:68:a7:65:12:fa:80:fa:9a:0c:44:80:0e:51:
         13:e3:46:3d:bd:a0:eb:a7:2b:c4:df:aa:22:38:e8:a7:7d:04:
         9f:26:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:48 2026 by rpki-client