Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File:                     t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier:          XQIQCFlGN08d0YA2JDEZivD9avfuZcxrboY+KT52LgI=
Subject key identifier:   B0:E8:7B:24:2C:DA:B6:6F:2A:B9:C3:8A:88:67:F2:89:74:E1:E0:85
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer:       /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial:       019EBEECBA939B78C6D02902710234775D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number:          0DBE
Signing time:             Sat 13 Jun 2026 03:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:45 +0000
Files and hashes:         1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
                          2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
                          3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: XSK30VkaraUpHD6bE/Lv6N6K/Y/OfCAIvoZIwuNIQjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:ba:93:9b:78:c6:d0:29:02:71:02:34:77:5d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
        Validity
            Not Before: Jun 13 03:00:45 2026 GMT
            Not After : Jun 14 03:00:45 2026 GMT
        Subject: CN=b0e87b242cdab66f2ab9c38a8867f28974e1e085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:cd:4e:b5:fa:50:bc:2a:6c:07:38:5c:81:
                    b1:d8:4c:61:36:47:4a:f1:39:9b:f7:34:d3:4e:f8:
                    00:29:90:99:e9:18:49:88:70:f1:a6:6f:82:5c:69:
                    4d:91:fc:41:5e:64:53:69:5f:54:a1:81:ba:9b:ce:
                    eb:f7:a0:34:4c:89:31:15:1b:7b:dd:d4:9c:5f:08:
                    d0:71:1a:2f:db:39:b0:88:7b:fc:4c:06:60:03:3f:
                    82:ad:ba:3b:70:47:cb:2a:98:af:52:92:b1:92:52:
                    c0:e7:25:b8:22:f8:f8:5a:05:51:da:76:5a:5c:f1:
                    3f:f9:cf:17:75:ca:b8:bf:b0:fa:b3:c6:fe:6f:1f:
                    67:de:19:cc:d0:bf:15:22:4b:06:0a:f6:b8:1d:1b:
                    b7:d3:32:b8:83:3a:37:44:3a:d6:45:b9:a4:6c:8d:
                    1c:9d:d8:31:95:ef:40:8d:61:77:aa:0a:6a:f7:75:
                    ff:a1:85:e4:f7:aa:ca:8f:29:d4:ef:e9:0f:fa:5f:
                    cf:f4:0b:26:e4:c7:e7:d6:18:a3:e2:36:a7:7b:0c:
                    99:3e:34:52:7a:00:e2:9c:b1:78:02:e9:f0:e4:37:
                    5c:e9:04:b6:e5:3f:5d:f3:08:8f:11:5e:32:54:1b:
                    9a:44:71:e6:5e:ba:53:dc:d0:fc:e9:4d:d4:7d:80:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:7B:24:2C:DA:B6:6F:2A:B9:C3:8A:88:67:F2:89:74:E1:E0:85
            X509v3 Authority Key Identifier:
                keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:47:1f:18:25:b7:b9:b3:03:e4:69:4d:d7:f2:06:f8:6a:b0:
         20:d0:8d:ae:b0:9c:44:ff:2e:04:c5:71:ff:02:7b:80:76:56:
         94:d7:4d:b9:b4:9d:e6:50:f5:4d:53:21:e2:4c:ef:ae:cf:1f:
         5d:a8:a4:da:a7:66:8a:eb:b6:e5:b3:4d:d2:5b:66:4d:34:d2:
         6c:85:7a:0b:33:f5:d8:33:6b:4d:92:d3:40:67:4c:20:6a:2b:
         29:b8:bd:c9:44:7d:8d:be:de:81:42:51:ba:a6:05:0d:ee:aa:
         85:a0:cb:d5:bf:1b:04:dd:58:22:67:7a:d7:86:e3:4b:d9:22:
         b6:5f:f4:59:3a:66:8b:fb:28:dc:70:06:29:71:af:86:4c:33:
         8d:fd:e1:b5:1b:69:22:cb:31:dd:35:15:44:89:7c:d9:76:fe:
         cc:c3:7b:c5:97:01:9e:68:fe:92:7d:e4:c5:8f:4a:94:16:6f:
         86:01:50:d8:b6:6f:3a:89:da:30:c8:73:90:c0:82:2d:df:bd:
         10:49:2b:df:8a:56:b3:e9:f3:2c:2a:0a:d4:40:30:05:58:05:
         d9:28:e5:eb:b9:6b:f2:95:5f:18:b0:a2:ba:2c:30:33:65:af:
         07:11:3c:f3:df:25:ce:56:4c:96:f6:8e:0e:5c:d8:19:78:fa:
         6d:3b:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:33 2026 by rpki-client