Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File:                     nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier:          CSwSgKjTXaJ3VMZjExpO2zklFbvNXqy5himlrRivLUo=
Subject key identifier:   E7:37:FA:D8:36:C4:AB:9C:61:04:13:C5:29:56:FF:88:0F:56:68:AB
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer:       /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial:       019EBF912182CB8D1AABAC082CBF97D7B26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number:          16CB
Signing time:             Sat 13 Jun 2026 06:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:19 +0000
Files and hashes:         1: R7Ev9HH_K9DOIOMp6xmYQSBJ3LQ.roa (hash: X1Rxis2xsh9D70KdlclAD1iUcJEca7H7zmBLpXbXixs=)
                          2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: feQljAAUqj5AUKrsEjfCF91ahA1/O1UqlQaZrvObQG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:21:82:cb:8d:1a:ab:ac:08:2c:bf:97:d7:b2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
        Validity
            Not Before: Jun 13 06:00:19 2026 GMT
            Not After : Jun 14 06:00:19 2026 GMT
        Subject: CN=e737fad836c4ab9c610413c52956ff880f5668ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:a5:dc:2e:e3:a0:5c:50:51:e8:58:1e:ae:
                    2a:75:5d:80:e2:aa:a2:a6:97:13:30:b9:5a:03:c4:
                    e4:61:95:53:bc:c6:15:c8:1b:a3:3b:71:d0:a7:0b:
                    db:16:06:f7:05:3b:88:f4:e5:d6:ff:50:29:93:b2:
                    15:42:26:30:d9:df:41:b8:a9:0b:05:14:13:a6:01:
                    3d:e3:09:33:f2:16:f2:6c:13:67:28:46:ad:3f:64:
                    6f:ed:0d:92:79:38:b1:5e:11:e4:cf:7d:67:ee:df:
                    19:7f:4b:49:ee:0d:67:d2:ab:13:44:64:02:99:34:
                    12:3e:d8:6f:5d:f0:b8:0b:c0:98:78:a6:74:b4:d0:
                    07:05:c3:47:92:fe:bf:b1:4b:a5:71:6a:ab:c6:a1:
                    f6:85:bf:6d:81:8a:19:2e:e5:67:ec:12:68:03:2c:
                    4a:4e:69:34:35:f3:ec:27:38:20:e3:59:65:db:80:
                    c8:92:f0:34:d1:18:cd:e7:c4:08:49:8d:63:25:5f:
                    bc:56:74:9b:e2:f3:f5:83:44:03:12:8e:94:f6:f4:
                    39:b0:23:a9:ba:87:32:11:2a:17:cc:21:3d:90:82:
                    8d:e5:16:c2:99:8e:b6:9b:71:be:7b:b5:b7:28:1b:
                    26:c7:76:e7:23:a6:eb:df:70:54:4b:3f:e8:99:67:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:FA:D8:36:C4:AB:9C:61:04:13:C5:29:56:FF:88:0F:56:68:AB
            X509v3 Authority Key Identifier:
                keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:84:9f:99:be:68:2f:38:d4:e4:59:4f:be:c8:70:cf:56:3c:
         ef:7b:0f:ec:c5:9e:5f:ce:4a:32:8d:8b:0c:f6:79:4c:11:a8:
         2b:ec:0e:a4:9b:e3:23:42:ae:55:8d:d0:46:c2:51:3c:c0:c9:
         2d:c9:cf:31:3e:d2:43:de:0e:df:2e:86:74:51:0a:bb:2d:b3:
         f0:f9:9e:2f:13:97:84:e5:5e:bf:bf:0b:ac:41:fc:65:97:75:
         4f:68:10:20:28:c9:1e:51:d3:89:12:75:a3:c5:50:bf:30:4f:
         80:a0:52:d0:f4:00:3e:47:87:0d:3e:93:b9:77:be:cd:f6:55:
         cb:cd:2c:94:10:b2:cc:91:b9:02:2e:a8:e5:62:f2:03:e3:0f:
         3c:8e:83:43:ab:10:19:fb:02:3b:f2:56:2a:77:c2:02:84:76:
         ba:de:0d:dd:39:65:0e:1f:86:b0:97:c6:91:e0:8c:db:4d:6e:
         b5:99:3e:6d:31:bf:48:e5:7b:72:2a:38:12:5c:91:16:a1:db:
         17:d6:b5:3f:43:a7:19:34:f1:99:f4:bc:20:f5:52:63:ff:5b:
         4d:f6:04:7d:2e:19:71:53:ed:94:16:6e:4c:6c:ed:a7:d0:50:
         97:7c:40:6b:f5:fd:9e:ed:a7:d7:2f:da:ac:5c:d4:29:e5:a1:
         e7:95:75:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kSGCy40aq6wILL+X17JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2
MjBlYWEwHhcNMjYwNjEzMDYwMDE5WhcNMjYwNjE0MDYwMDE5WjAzMTEwLwYDVQQD
EyhlNzM3ZmFkODM2YzRhYjljNjEwNDEzYzUyOTU2ZmY4ODBmNTY2OGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7il3C7joFxQUehYHq4qdV2A4qqi
ppcTMLlaA8TkYZVTvMYVyBujO3HQpwvbFgb3BTuI9OXW/1Apk7IVQiYw2d9BuKkL
BRQTpgE94wkz8hbybBNnKEatP2Rv7Q2SeTixXhHkz31n7t8Zf0tJ7g1n0qsTRGQC
mTQSPthvXfC4C8CYeKZ0tNAHBcNHkv6/sUulcWqrxqH2hb9tgYoZLuVn7BJoAyxK
Tmk0NfPsJzgg41ll24DIkvA00RjN58QISY1jJV+8VnSb4vP1g0QDEo6U9vQ5sCOp
uocyESoXzCE9kIKN5RbCmY62m3G+e7W3KBsmx3bnI6br33BUSz/omWfjGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc3+tg2xKucYQQTxSlW/4gPVmirMB8GA1UdIwQY
MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt
MGVkZGViNDhlM2FlLzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl
LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4Sfmb5o
LzjU5FlPvshwz1Y873sP7MWeX85KMo2LDPZ5TBGoK+wOpJvjI0KuVY3QRsJRPMDJ
LcnPMT7SQ94O3y6GdFEKuy2z8PmeLxOXhOVev78LrEH8ZZd1T2gQICjJHlHTiRJ1
o8VQvzBPgKBS0PQAPkeHDT6TuXe+zfZVy80slBCyzJG5Ai6o5WLyA+MPPI6DQ6sQ
GfsCO/JWKnfCAoR2ut4N3TllDh+GsJfGkeCM201utZk+bTG/SOV7cio4ElyRFqHb
F9a1P0OnGTTxmfS8IPVSY/9bTfYEfS4ZcVPtlBZuTGztp9BQl3xAa/X9nu2n1y/a
rFzUKeWh55V1JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:10 2026 by rpki-client