Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          O6n0YVGI1xlMCFKPmHULW2PM8pux5PaH4YELmFg8WKw=
Subject key identifier:   CF:8D:5F:05:AD:15:9F:D7:57:33:32:D2:3E:84:FD:6B:FE:10:81:C8
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       019EC336D8DCA93835BCEFD8F06CAE8BFB3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 23:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:12 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: j0TjlOzz9DisbUndk0ZDw6z3Ojqg5A0zWMWrxdwRZuc=)
                          2: ahNLR_0oS-0t1YKVBOVdbZiSYPY.roa (hash: fNNDUa3v8ykCEP/CD6DhZGRwmawCEdvB1zOAi4jYge0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:d8:dc:a9:38:35:bc:ef:d8:f0:6c:ae:8b:fb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Jun 13 23:00:12 2026 GMT
            Not After : Jun 14 23:00:12 2026 GMT
        Subject: CN=cf8d5f05ad159fd7573332d23e84fd6bfe1081c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:f3:af:b3:0e:eb:9c:5c:d1:61:1c:c9:07:
                    0b:b8:0c:6c:1c:a3:4d:21:5b:e3:eb:13:f4:2b:b4:
                    05:4b:49:f7:9c:4b:12:a1:4e:df:8f:16:78:01:3e:
                    26:d3:e7:ab:d1:2e:3c:40:c2:c7:0e:96:87:e0:83:
                    8b:33:b0:58:10:04:00:ec:44:b4:62:19:bb:40:7d:
                    6c:4a:3e:61:8e:e9:ba:31:04:97:e1:78:f6:4b:3c:
                    6a:55:97:b6:5a:0f:d4:5b:87:26:df:fe:3a:89:81:
                    59:a5:90:cd:ca:a3:5a:fe:4e:4b:56:e5:dc:bb:a0:
                    a8:fd:87:8f:e3:9d:3d:0e:0b:c8:18:4b:bb:bb:11:
                    3f:39:6e:52:8a:1d:8c:36:29:12:bb:f8:8b:87:92:
                    d0:9d:2c:87:1d:62:17:57:1b:d9:01:19:56:84:67:
                    db:de:d6:32:fc:7a:c4:fc:de:55:23:9d:f3:82:6d:
                    0b:53:ac:aa:73:a6:70:b3:9f:1a:dc:0f:8e:a0:7a:
                    3d:6d:3b:52:fa:93:f4:07:ac:45:c5:0b:8d:36:d2:
                    f2:7e:94:38:ee:3d:ae:0a:e8:c6:b4:20:9f:e0:dd:
                    5f:55:57:e0:e7:cf:5e:9b:3d:37:ad:d0:c8:79:8d:
                    63:78:55:4b:e2:d6:4e:35:49:df:03:6d:80:ce:19:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:5F:05:AD:15:9F:D7:57:33:32:D2:3E:84:FD:6B:FE:10:81:C8
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:55:3d:af:46:50:5b:4f:7a:8f:43:23:5c:10:be:4b:50:fb:
         5f:b3:75:e4:24:43:8f:23:6b:58:14:29:03:c8:82:cd:3e:2a:
         af:d9:d4:ea:be:9b:6a:d6:80:be:7a:5b:ca:68:92:df:42:23:
         d2:7d:90:42:65:eb:48:50:e9:46:3d:a5:3d:c8:53:29:05:b5:
         66:a6:a5:2b:65:57:6d:c9:95:07:7a:c2:f3:4f:40:19:e2:f1:
         fa:01:89:ed:86:e0:23:3e:e6:2b:93:80:7d:e5:d6:3a:73:f2:
         8a:b0:0f:f4:65:51:4d:7b:c3:e6:5b:b6:2c:f7:59:4d:ad:79:
         d8:20:42:4f:c9:d6:da:9e:d4:43:3b:97:5b:5c:7d:91:58:ea:
         e9:fb:24:19:d7:de:b9:ec:39:8c:fb:eb:11:86:e2:02:0f:08:
         0c:7d:c9:7c:5b:3e:65:06:2e:ff:33:5d:35:48:ad:7f:bc:a9:
         09:aa:99:7f:40:c2:53:97:a6:39:be:2a:28:70:4a:ac:c0:7a:
         dc:1a:51:c7:27:5d:9b:52:ab:b9:40:f8:95:3d:98:30:86:61:
         b3:9e:5b:fd:a8:88:04:dd:6e:5b:d7:82:31:19:ec:2b:41:af:
         85:56:9c:d3:1d:bd:db:7e:e5:8c:f9:10:f6:4f:6d:b9:51:ba:
         58:0d:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:15 2026 by rpki-client