Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File:                     NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier:          2jkfiXjwXnVaCTR7qqahc9gklKBIiUEidbhf6LoMqxY=
Subject key identifier:   FD:55:71:B3:5D:92:52:06:F4:DC:F3:09:39:EB:11:2A:F8:14:D4:B9
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer:       /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial:       019EBF9172E9DF6ECF2E0F90D18AD1B45B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number:          0172
Signing time:             Sat 13 Jun 2026 06:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:40 +0000
Files and hashes:         1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: l+wGmPsROAkC77Xs2T4jo4whb9zz3uRe3T8RHfd3oCM=)
                          2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
                          3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:72:e9:df:6e:cf:2e:0f:90:d1:8a:d1:b4:5b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
        Validity
            Not Before: Jun 13 06:00:40 2026 GMT
            Not After : Jun 14 06:00:40 2026 GMT
        Subject: CN=fd5571b35d925206f4dcf30939eb112af814d4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:83:8e:b4:65:1b:ac:22:af:de:69:41:17:
                    01:1b:2f:40:07:9c:c4:40:36:92:65:6d:18:2a:cf:
                    59:78:03:95:3a:3d:f6:eb:94:75:78:11:4b:5d:32:
                    d6:ae:5d:23:c5:41:61:d6:a8:72:ff:27:4a:cd:a4:
                    0b:bc:fe:6f:69:a2:27:25:b7:33:d6:ff:0d:e1:2f:
                    af:57:52:56:3a:6f:65:33:23:34:20:ce:e1:f8:40:
                    60:01:99:a5:eb:c1:a0:69:bc:42:76:ef:3c:be:8a:
                    bd:d9:01:b9:51:15:40:d0:44:a1:d2:12:03:e7:0d:
                    25:f8:04:27:0b:ff:e8:ed:d2:f5:4a:e0:4d:02:88:
                    04:2d:24:9c:e2:05:0a:fe:67:45:58:7e:3d:46:8a:
                    dc:4f:47:64:c6:ae:a7:92:7d:0a:a7:2d:95:5f:c4:
                    40:ce:b9:55:c7:06:61:ad:4b:6b:71:a9:22:e4:db:
                    98:27:e0:f4:b2:02:4d:c7:62:5e:97:30:c4:76:e2:
                    0d:bc:b9:11:d0:d3:66:5c:72:27:9e:d6:b9:9f:e9:
                    f2:28:a4:31:83:95:26:c1:99:9e:12:8b:1a:c3:9c:
                    a8:9f:38:2c:1f:c5:b0:2a:83:e0:eb:ca:ed:7e:db:
                    40:6c:14:60:d5:43:4a:2c:d5:3d:81:5a:87:77:cd:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:71:B3:5D:92:52:06:F4:DC:F3:09:39:EB:11:2A:F8:14:D4:B9
            X509v3 Authority Key Identifier:
                keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:fb:74:05:76:6e:b2:44:5b:ff:9a:71:93:4f:37:11:45:a4:
         6e:50:44:db:ad:77:82:4c:16:61:c5:1b:61:89:f4:96:53:20:
         ab:e1:67:16:03:47:61:82:97:6e:6e:27:88:b2:4f:90:6b:68:
         d2:f8:52:06:59:17:77:b9:8c:c6:ce:bb:3f:2b:de:44:97:15:
         b2:20:13:0a:b1:cb:b7:8c:48:46:fc:38:89:b3:92:2e:75:05:
         62:e2:1b:7b:11:76:d6:63:e1:79:93:8e:b7:65:0f:e8:0c:12:
         46:d4:14:3b:83:db:20:26:04:00:18:a3:44:76:12:be:95:0f:
         b6:5f:f1:cd:62:b8:89:ca:11:9d:7a:73:8d:0a:cf:63:e2:47:
         a3:ee:93:84:f1:6b:9b:14:b0:8e:18:0c:e9:0e:0e:37:0e:3c:
         08:d1:44:11:7d:cb:e5:2c:b8:aa:2e:ab:e8:8e:39:64:26:16:
         35:21:91:86:a7:4c:fe:73:9a:19:01:7b:bc:3a:f9:2d:0f:c1:
         e1:c8:9e:2d:0e:d5:85:ba:a9:22:0f:c9:b6:7a:57:10:64:94:
         60:02:2b:9f:64:e0:24:7d:0c:df:1e:1b:d5:98:53:fe:90:7a:
         60:49:9e:ba:f0:e2:d5:fa:5d:a9:15:52:98:44:d5:10:0b:98:
         49:30:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:44 2026 by rpki-client