Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
File:                     NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft (raw, json)
Hash identifier:          MJmDFCvLn76KvCIVtgZdRAVvPyb2Lcbo+orj9mrdhCY=
Subject key identifier:   08:F9:7A:77:7E:62:C4:D5:CF:7D:3D:55:86:4F:9B:DB:74:35:55:B8
Authority key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Certificate issuer:       /CN=36f6ee6d32790e498950d63877b0321232a7f833
Certificate serial:       019D992BA48FDE1AFEF83ED76D7932AABCF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
Manifest number:          04
Signing time:             Fri 17 Apr 2026 02:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:07 +0000
Files and hashes:         1: NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl (hash: rzeuKHlyNb5RC5fXVXGWANxWdVXFbpKweYZUtD1VGKk=)
                          2: yBl-iSaUfI7bcxIhJeIgiImqRKo.roa (hash: 9dLNN0+YEJaEEsS+kzacLskIpN4LaeoKWqYx0OkBv1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:a4:8f:de:1a:fe:f8:3e:d7:6d:79:32:aa:bc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f6ee6d32790e498950d63877b0321232a7f833
        Validity
            Not Before: Apr 17 02:01:07 2026 GMT
            Not After : Apr 18 02:01:07 2026 GMT
        Subject: CN=08f97a777e62c4d5cf7d3d55864f9bdb743555b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:9b:76:58:76:9e:e5:eb:d0:c0:ce:ca:a3:
                    fa:80:4b:7e:79:5c:d4:03:c3:51:21:c0:15:8e:52:
                    69:39:68:dc:bd:df:61:de:01:2e:6e:e4:f7:d2:73:
                    7e:5f:f7:bd:bc:d5:57:ce:a4:3c:07:f0:46:f5:e1:
                    a4:ea:9a:7a:3c:42:b2:d8:a3:e1:45:d3:97:72:6d:
                    90:e3:7b:19:56:e4:03:60:13:67:08:aa:12:da:79:
                    a2:28:28:e1:96:79:f2:5a:db:3c:d4:11:d5:0c:9c:
                    b4:55:19:5c:90:d0:bd:c6:e4:0f:20:f3:75:7b:78:
                    86:e1:76:ae:7b:71:62:56:87:37:8f:f1:a1:09:45:
                    ee:47:a1:3c:4a:61:df:77:b3:ce:25:f4:6d:92:0d:
                    b7:eb:9e:dc:c3:53:1a:29:bc:db:36:da:64:01:b2:
                    55:ab:f7:ac:5a:47:5b:40:76:99:43:c1:51:7f:08:
                    26:7b:e8:5d:4d:4e:ca:94:18:1c:f7:a4:89:c4:bb:
                    e9:99:ec:02:73:16:0e:3b:f0:d7:88:4a:61:f9:35:
                    61:1f:8a:82:a0:a6:7d:72:db:90:5b:08:1d:dd:88:
                    18:2d:86:bc:77:4f:36:6d:00:74:5c:f1:64:41:68:
                    78:14:cb:64:da:a9:09:2f:f3:56:52:3a:ef:91:63:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F9:7A:77:7E:62:C4:D5:CF:7D:3D:55:86:4F:9B:DB:74:35:55:B8
            X509v3 Authority Key Identifier:
                keyid:36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a8:ff:cf:cb:db:4e:4f:34:ee:b7:ea:48:41:fb:ca:03:a7:
         6e:6b:ed:55:e4:be:8d:d8:7d:ff:5c:bb:ae:e3:48:4e:2e:42:
         57:fe:1b:20:b6:02:3f:41:e3:3a:7e:81:4d:2c:2d:8f:90:22:
         93:63:34:4e:c9:92:35:59:8a:04:f1:62:7b:9c:0f:6b:67:31:
         1d:cb:c3:05:fe:ee:c1:f4:2b:3a:87:a1:df:13:8a:4c:c2:be:
         1d:8e:70:09:4a:7b:64:e5:c9:0d:d2:bf:3c:9e:c0:45:bd:b1:
         dd:c5:d4:87:30:14:06:d4:b3:dd:63:05:7d:0e:1a:44:69:79:
         59:83:96:a8:c4:b6:d8:d0:db:06:40:a9:fd:4c:4a:0b:84:9f:
         3f:6a:9d:ff:8a:89:67:ea:f4:6a:f8:3f:04:3a:98:23:ec:3c:
         ff:90:3f:55:a7:b5:9c:f6:92:83:07:02:04:72:48:c4:1d:7c:
         11:e4:8f:67:42:75:15:15:bb:fc:38:ab:78:bf:40:31:01:7d:
         1a:f1:23:70:a2:7a:81:34:ae:fb:45:f8:20:bc:2f:b6:af:c8:
         2c:54:32:70:67:aa:8d:88:59:65:41:3e:4a:c1:ac:f2:e0:94:
         f1:66:d8:a5:8f:27:b5:2e:60:54:1c:3e:28:af:17:09:02:75:
         63:9b:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:57 2026 by rpki-client