Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File:                     neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier:          p97FRKe8+zzdEYXDm3BX9ghnMrORIqHunUV92R+nOBw=
Subject key identifier:   6F:56:79:12:1F:EB:B4:53:C8:67:95:85:0D:8B:20:EA:90:14:A2:AC
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer:       /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial:       019D9AE2BEB76C0E7D813219801FB57F1ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number:          08F2
Signing time:             Fri 17 Apr 2026 10:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:44 +0000
Files and hashes:         1: 0dKz27FXmEvTUAS97w6oezHQSJM.roa (hash: O/nMJnxeA2xWpfnp6SVdaMqFKXk+z2ftNLJ81ExuMdU=)
                          2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: 2+EvPTMtEhzf1zYp6L4o3chmyertWkXrxtQOqBbgOJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:be:b7:6c:0e:7d:81:32:19:80:1f:b5:7f:1e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
        Validity
            Not Before: Apr 17 10:00:44 2026 GMT
            Not After : Apr 18 10:00:44 2026 GMT
        Subject: CN=6f5679121febb453c86795850d8b20ea9014a2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:0b:be:d0:68:c6:07:d9:f9:a8:5e:4d:4a:
                    6b:04:44:fe:04:cc:22:e2:00:8c:9b:0d:43:3d:90:
                    e7:8f:4d:63:d3:fc:0e:a7:6c:0b:71:ad:8e:56:31:
                    90:e4:cb:58:ba:4f:8c:28:b6:d8:bb:37:61:5a:dc:
                    26:33:98:33:b5:e3:50:c8:e7:77:87:6b:1f:37:3a:
                    e6:26:ed:7a:5e:a1:72:1d:9a:5c:be:c0:05:48:89:
                    b2:af:56:6b:18:5c:c9:77:51:a3:45:96:8c:f0:d7:
                    63:35:18:00:e7:99:bd:2c:c4:c1:5a:73:58:e8:fc:
                    6e:9a:12:24:61:b3:13:65:ef:bc:22:c6:73:77:f9:
                    53:22:fd:a2:f4:ad:b0:cf:48:d9:9e:eb:50:12:e0:
                    56:f3:ce:c2:da:89:cc:ec:d9:6f:1f:cb:89:fc:cb:
                    26:70:5d:14:50:2c:30:41:bb:14:0a:d7:8f:45:74:
                    29:81:c0:1c:b7:ae:75:68:f0:e0:c7:d1:e0:a4:95:
                    be:7e:f3:86:8e:3c:89:7b:51:c7:e5:77:0b:eb:af:
                    e6:ce:94:09:8a:aa:de:c8:dc:0d:76:b6:65:e6:0d:
                    66:da:a7:1f:31:35:2f:00:9e:fa:e4:8a:61:37:6a:
                    d7:8a:ae:f6:9a:49:89:16:c2:01:2e:e8:97:44:9f:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:79:12:1F:EB:B4:53:C8:67:95:85:0D:8B:20:EA:90:14:A2:AC
            X509v3 Authority Key Identifier:
                keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:90:51:95:f8:1e:6a:75:46:54:05:d8:b8:85:34:a5:e8:ee:
         0e:c4:3a:5e:02:d4:7a:a0:a2:3a:ee:36:bc:64:d1:58:63:e1:
         14:07:b6:e0:34:a0:6f:82:0e:12:38:f3:64:95:43:c7:45:f3:
         5c:7c:73:e7:71:4b:48:f8:14:a1:dd:c1:b9:be:49:8c:e6:b0:
         f9:8e:86:f8:74:e3:8e:84:5b:ba:d8:78:60:eb:d0:9d:68:b8:
         d2:8f:12:b2:5b:69:60:43:18:5f:c5:ae:09:c2:c9:8a:05:e6:
         0e:d0:33:37:01:40:9c:a2:10:3d:58:89:93:0f:a5:49:df:35:
         3a:c8:5b:cb:ce:fc:67:b3:ef:c0:06:e3:38:1d:54:78:ab:8e:
         dd:1e:17:93:3b:8f:44:17:87:fd:8a:fd:1b:f5:c9:5b:1e:9e:
         76:4f:2c:cc:c5:84:bf:fc:e9:7c:01:e3:66:fb:cc:e4:a4:f5:
         e2:96:b0:6f:0e:8b:75:47:a6:c9:1f:94:76:f5:ab:15:48:ec:
         5d:48:52:cf:2b:58:ae:ef:57:f1:9d:21:73:26:3b:3d:e5:8c:
         e2:ed:2d:e5:b0:66:e5:8f:95:0a:0f:20:00:d3:3b:09:ee:94:
         39:dd:3b:c2:72:e2:3a:bd:59:c6:78:6e:3a:dd:e9:82:44:b0:
         c0:2d:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:22 2026 by rpki-client