Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File:                     nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier:          N4JyH0CoAT52GQepoNp0e1eN7/2JcDSDf1bkNJnRLws=
Subject key identifier:   7C:E9:1F:59:D7:53:0D:9A:AA:D1:D0:66:42:69:D5:D1:7D:17:67:BC
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer:       /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial:       019EC337586ABACBF3672AC2BF12E627A082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number:          0461
Signing time:             Sat 13 Jun 2026 23:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:44 +0000
Files and hashes:         1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: 2NkpTCIYomgbmGU2lpRB0LDIZqtRgjUhYEH2WtHW/GE=)
                          2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:58:6a:ba:cb:f3:67:2a:c2:bf:12:e6:27:a0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
        Validity
            Not Before: Jun 13 23:00:44 2026 GMT
            Not After : Jun 14 23:00:44 2026 GMT
        Subject: CN=7ce91f59d7530d9aaad1d0664269d5d17d1767bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:7c:12:92:1d:3c:07:68:0f:be:0e:42:bb:
                    b2:bc:bc:87:29:ed:29:64:05:ee:36:1a:f8:99:63:
                    35:3b:c3:68:11:09:cc:5f:df:88:9f:f5:34:f3:98:
                    ff:4f:4e:cf:e5:ce:71:c7:8d:5e:58:1f:0b:3e:61:
                    1d:27:69:02:7f:22:d0:ae:3e:ac:48:c6:ea:86:db:
                    f4:46:b1:2d:dc:8f:7f:87:28:c7:9d:d0:24:99:77:
                    76:f0:da:36:71:31:da:43:6f:ae:45:4e:4c:7f:ee:
                    2f:4c:bb:33:cb:55:0d:25:60:7f:29:a7:5e:4f:f9:
                    c3:e7:a3:04:a2:53:93:38:ab:88:f7:b2:55:10:c2:
                    98:fb:55:1b:c4:1b:fc:e7:d2:2c:28:d7:01:30:50:
                    ab:59:39:e1:c6:93:45:83:ed:ec:67:28:eb:c8:23:
                    ad:d5:42:41:61:c8:bd:01:f3:d7:c8:9f:38:79:f0:
                    b7:a8:98:1e:52:8c:6e:4b:d0:37:c4:1d:46:ba:ec:
                    d4:6f:6f:e4:af:e0:f7:d8:a8:86:2c:e3:74:ab:66:
                    da:a0:ac:6a:44:3e:25:0b:9b:f2:ea:53:1a:a7:21:
                    d2:7d:e9:79:b0:9c:95:44:5c:82:76:05:ea:e3:47:
                    dd:27:66:aa:21:44:5b:f1:f7:cf:fa:b3:e4:91:61:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E9:1F:59:D7:53:0D:9A:AA:D1:D0:66:42:69:D5:D1:7D:17:67:BC
            X509v3 Authority Key Identifier:
                keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:c7:e5:bb:90:98:6f:80:96:de:55:16:37:4c:97:13:f1:
         fc:d4:45:cd:c4:65:ea:76:80:c8:ec:eb:ac:21:39:54:03:85:
         9f:34:23:6f:44:f8:d0:21:90:a8:4c:3d:0c:df:62:c5:91:6d:
         a0:58:81:bd:a1:e9:5a:e4:c7:72:84:66:8c:fe:7e:74:93:4d:
         7a:db:65:70:fc:18:7c:e4:4d:78:8c:b3:2c:12:ce:2f:c3:61:
         a8:c8:50:a3:86:80:69:65:b7:85:36:2b:c5:0b:2e:e5:c1:d4:
         ed:1a:93:3e:7c:1b:57:c1:49:4c:21:99:1c:c2:31:74:d0:f3:
         59:bf:40:f5:49:92:57:ff:f7:7c:85:47:65:3a:70:15:b3:5a:
         85:7f:0a:b4:76:61:d4:fd:a1:8f:dd:4a:33:eb:fd:b9:35:4e:
         e7:ff:88:db:c3:72:81:7f:09:b5:21:cb:e9:72:a2:1c:f0:64:
         1c:e4:ca:d6:f8:89:22:54:46:5d:c4:e5:fd:bf:48:67:6f:54:
         2d:d3:63:42:d9:19:b9:88:6c:17:41:85:ae:de:16:fb:e0:45:
         cb:fd:a6:d0:df:13:dc:19:3d:88:78:65:ac:4e:05:5c:ec:8c:
         bd:94:fc:45:f9:ee:7b:5a:11:32:c5:8b:b9:6e:dd:64:d1:d3:
         76:69:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:42 2026 by rpki-client