Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File:                     NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier:          iT0cUKGtKmnLI2kiWjB55nYHCuwc4c8cbgPKl+FFK10=
Subject key identifier:   29:53:B7:DF:5A:7C:5D:B4:31:FB:68:51:2D:E8:FF:F7:06:F1:40:03
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer:       /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial:       019EBF239FC0AE2302DCA30FA58B89DB2E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number:          0F9B
Signing time:             Sat 13 Jun 2026 04:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:43 +0000
Files and hashes:         1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 53bbCBsKmNmIRQPVzV3nkBwHvcawU9HfW4zBKXD4ICw=)
                          2: aGJMNViunI3sW8LPBTbWuO2JMU4.asa (hash: IYFle/3hjx48l13pLg/VjqdcHmOV1LkxhQSSbNvNDQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:9f:c0:ae:23:02:dc:a3:0f:a5:8b:89:db:2e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
        Validity
            Not Before: Jun 13 04:00:43 2026 GMT
            Not After : Jun 14 04:00:43 2026 GMT
        Subject: CN=2953b7df5a7c5db431fb68512de8fff706f14003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:a8:55:47:97:8a:a2:e0:d7:c3:09:cd:9e:
                    3a:f2:2a:7d:9d:1a:5a:92:b0:44:cc:cf:07:68:80:
                    cc:9d:42:39:d6:31:88:ea:81:cc:8f:80:e1:d1:dd:
                    e5:ce:1d:b8:3e:09:dd:52:2c:43:fa:94:10:7a:5d:
                    4d:76:cf:a5:2e:ee:3f:d1:a2:be:07:06:f9:d9:af:
                    62:5d:ae:2a:4e:98:f3:50:ed:6b:d1:16:ac:34:8b:
                    ba:36:eb:ff:12:a8:cf:a4:a3:8b:09:ed:08:d4:46:
                    57:3f:d5:d2:3f:64:ee:28:cb:f2:47:c0:ac:07:d8:
                    80:2b:92:4c:25:fc:4d:9d:7d:42:b1:b5:28:d9:4b:
                    85:01:20:03:50:17:ed:3e:1c:03:87:97:ad:6f:e3:
                    90:a4:7a:44:33:33:9e:d3:0f:99:be:af:44:57:35:
                    72:6c:61:12:ea:e4:7a:93:a3:72:6a:b1:41:b9:27:
                    3b:98:00:ea:54:7a:74:f7:cd:0f:93:2f:15:06:c9:
                    75:44:09:0b:eb:ac:70:9f:69:a5:6f:18:f7:91:e7:
                    ff:26:a7:ed:2e:1e:4e:cc:71:d7:ff:5b:39:94:30:
                    b1:e3:e6:10:a1:c3:de:c4:98:bb:4c:b6:b9:73:ee:
                    01:10:83:d9:d6:fd:3f:43:fd:0d:82:b6:d5:7e:20:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:53:B7:DF:5A:7C:5D:B4:31:FB:68:51:2D:E8:FF:F7:06:F1:40:03
            X509v3 Authority Key Identifier:
                keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:76:63:02:de:a9:d5:ca:dd:d5:48:53:67:88:ab:9d:50:
         2b:98:d3:8d:39:59:03:23:91:58:38:05:92:6e:2f:c7:7f:1a:
         6d:e8:b8:75:0c:4a:4c:ae:ac:d0:70:a0:a7:a5:1b:e7:fd:03:
         81:dd:68:31:33:a9:f6:e4:30:4e:87:fd:52:d7:c7:73:98:d4:
         41:6e:31:b8:74:d7:f6:85:d5:4e:8d:31:e2:53:a4:ef:9c:24:
         cb:2c:b1:8a:19:68:07:ca:8a:41:55:2c:aa:30:47:59:e8:b2:
         7e:fa:e5:81:02:a8:8b:25:32:1f:e7:47:b9:23:a3:78:d5:34:
         2c:69:0f:78:a8:5f:36:18:5d:6f:cd:ac:1c:ba:06:72:a0:60:
         a6:32:a7:bd:ab:34:65:b2:ea:3e:40:93:3d:6c:71:d4:10:cd:
         4a:3d:dd:2a:af:2a:7a:8f:95:89:8d:e5:7c:84:ec:7e:75:36:
         1e:dd:43:4e:1c:0f:6d:df:33:38:21:bc:d3:a5:82:cd:cc:cc:
         f3:69:75:4f:ef:6c:3f:d8:4b:28:08:ac:c9:e2:f7:ad:33:1d:
         44:1e:89:94:c1:bd:88:87:3f:66:8a:e0:65:db:dd:30:a7:4a:
         99:de:2f:94:ce:64:84:01:c2:21:5c:b1:86:4f:dc:87:b0:85:
         86:93:3a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I5/AriMC3KMPpYuJ2y4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1
NDdiMmYwHhcNMjYwNjEzMDQwMDQzWhcNMjYwNjE0MDQwMDQzWjAzMTEwLwYDVQQD
EygyOTUzYjdkZjVhN2M1ZGI0MzFmYjY4NTEyZGU4ZmZmNzA2ZjE0MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4ioVUeXiqLg18MJzZ468ip9nRpa
krBEzM8HaIDMnUI51jGI6oHMj4Dh0d3lzh24PgndUixD+pQQel1Nds+lLu4/0aK+
Bwb52a9iXa4qTpjzUO1r0RasNIu6Nuv/EqjPpKOLCe0I1EZXP9XSP2TuKMvyR8Cs
B9iAK5JMJfxNnX1CsbUo2UuFASADUBftPhwDh5etb+OQpHpEMzOe0w+Zvq9EVzVy
bGES6uR6k6NyarFBuSc7mADqVHp0980Pky8VBsl1RAkL66xwn2mlbxj3kef/Jqft
Lh5OzHHX/1s5lDCx4+YQocPexJi7TLa5c+4BEIPZ1v0/Q/0NgrbVfiA7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClTt99afF20MftoUS3o//cG8UADMB8GA1UdIwQY
MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt
OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4
LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/92YwLe
qdXK3dVIU2eIq51QK5jTjTlZAyORWDgFkm4vx38abei4dQxKTK6s0HCgp6Ub5/0D
gd1oMTOp9uQwTof9UtfHc5jUQW4xuHTX9oXVTo0x4lOk75wkyyyxihloB8qKQVUs
qjBHWeiyfvrlgQKoiyUyH+dHuSOjeNU0LGkPeKhfNhhdb82sHLoGcqBgpjKnvas0
ZbLqPkCTPWxx1BDNSj3dKq8qeo+ViY3lfITsfnU2Ht1DThwPbd8zOCG806WCzczM
82l1T+9sP9hLKAisyeL3rTMdRB6JlMG9iIc/ZorgZdvdMKdKmd4vlM5khAHCIVyx
hk/ch7CFhpM6ww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:28 2026 by rpki-client