Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File:                     NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier:          Z4xOlb6QeheelT+SeEllZk8lyOS2hgNxdGNByRuTzsw=
Subject key identifier:   F2:5F:A3:91:39:7A:AB:47:E0:79:6A:34:1B:61:D5:2D:9E:24:83:F8
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer:       /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial:       019EC0A434AB1DB99C7B5A6E82972F69C6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number:          1767
Signing time:             Sat 13 Jun 2026 11:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:47 +0000
Files and hashes:         1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
                          2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: y6rPpR8ADLDTDpAyV1xgCkJdZ98OKnJi4vq/hYPMQgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:34:ab:1d:b9:9c:7b:5a:6e:82:97:2f:69:c6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
        Validity
            Not Before: Jun 13 11:00:47 2026 GMT
            Not After : Jun 14 11:00:47 2026 GMT
        Subject: CN=f25fa391397aab47e0796a341b61d52d9e2483f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:37:e7:35:46:69:5b:7a:04:ef:14:7f:2f:
                    6e:68:fc:4f:18:67:39:c5:6a:ef:86:1f:04:be:4d:
                    c8:22:31:92:4d:30:47:9d:a4:26:9f:46:d9:ca:bd:
                    52:eb:b6:c4:0e:7a:80:c1:6c:eb:31:b3:23:3e:bb:
                    72:a9:39:36:36:c6:3c:1d:d2:d2:ac:0d:ad:d2:c3:
                    1a:5c:99:51:64:b9:ce:dd:fc:85:35:bd:2c:77:a9:
                    5e:f7:30:5f:77:9e:81:ec:cf:f9:86:69:32:32:52:
                    d8:c3:7d:24:07:55:dd:e2:b0:d9:14:71:c3:1e:24:
                    e9:2d:31:37:fd:0b:2e:60:c5:27:d5:93:0b:43:56:
                    4f:51:36:58:b4:a0:b4:e6:0a:ae:80:d6:a1:f8:cd:
                    e7:35:f7:b6:16:c0:5c:8b:0c:78:1a:dd:09:96:45:
                    b7:6a:c8:d8:00:85:0d:b2:3c:8d:66:a6:ff:a2:e6:
                    e9:a9:d2:6c:60:db:97:d7:45:a3:2e:9e:87:35:b7:
                    3e:f7:5c:0b:b7:43:c6:34:77:e2:85:da:db:84:12:
                    1c:67:da:36:b9:ee:89:a7:f6:46:ae:1f:e9:d9:79:
                    f4:9a:11:a9:e2:86:1b:7b:95:d9:87:23:eb:0c:c2:
                    08:ad:79:f5:41:4b:a7:55:f9:bd:3e:eb:29:13:be:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5F:A3:91:39:7A:AB:47:E0:79:6A:34:1B:61:D5:2D:9E:24:83:F8
            X509v3 Authority Key Identifier:
                keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:8a:13:96:d9:2d:ad:9e:0e:4b:b0:c7:82:32:4f:4e:52:
         39:53:83:03:d7:6c:ee:6b:84:8a:03:41:3e:e0:bd:c8:09:55:
         63:48:50:b4:4c:d9:fb:74:09:0f:5c:bd:b1:01:43:2d:69:a7:
         dc:5b:a4:c0:8a:3a:bf:41:1f:51:19:2a:25:ab:ce:0e:89:70:
         ae:54:db:9e:ae:d8:ca:8e:e5:f2:2a:59:a5:2d:6e:e7:3c:9d:
         84:85:42:c8:2a:7a:99:74:a0:d3:a2:cd:6c:48:db:28:55:0f:
         ae:71:c5:75:e9:48:87:4e:3f:16:91:2c:e7:8e:4c:c0:16:2d:
         16:93:2a:58:33:bb:1f:e2:91:01:85:81:9e:95:2b:6b:30:36:
         64:7a:9e:59:ca:f0:ff:a1:97:86:f2:db:70:7a:e7:da:2c:73:
         26:20:21:ab:f7:a9:f7:30:53:de:f6:2e:b4:9b:ff:46:c4:e2:
         c8:7f:1f:6e:7b:65:03:7a:e0:36:7f:1c:fe:f5:8b:54:28:5f:
         5c:06:f1:af:da:ae:1c:58:44:cb:64:51:c0:03:70:76:e8:27:
         bc:e3:b2:5d:d9:73:46:ed:93:75:b4:19:04:fa:82:e4:de:cb:
         e9:9b:b7:21:03:1c:3f:b1:fd:e0:ec:02:e6:26:9f:fc:83:d1:
         a3:63:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:00 2026 by rpki-client