Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          PhnqyWsSGHv4qlToS3RnoPDSZoUHTS9aXo5Xrc9fh4o=
Subject key identifier:   51:9E:15:7F:7F:7D:50:B2:EF:A9:F0:52:DB:1C:2A:15:14:77:4F:79
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       019EC3A57DE5C4F1AA29478A73E90F32BDAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          097D
Signing time:             Sun 14 Jun 2026 01:01:03 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:03 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:03 +0000
Files and hashes:         1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: 1pBeUL/cRyVV3J8/rhc4BUW9viaGeqN6M5JJV8msKME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:7d:e5:c4:f1:aa:29:47:8a:73:e9:0f:32:bd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Jun 14 01:01:03 2026 GMT
            Not After : Jun 15 01:01:03 2026 GMT
        Subject: CN=519e157f7f7d50b2efa9f052db1c2a1514774f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:49:d6:0f:83:f4:ad:30:3b:3c:2b:41:28:
                    dd:b8:bb:4a:7a:35:22:c3:79:09:c8:fa:b8:bd:ae:
                    f6:63:f5:4a:5a:02:b1:49:ad:f7:61:7f:f0:c2:d1:
                    d7:1d:ed:36:70:f2:17:0b:ae:16:84:f2:59:d7:ec:
                    f8:eb:a2:91:32:00:31:81:4d:37:3f:b3:46:b2:dd:
                    90:06:73:f2:ff:31:a5:ae:e5:45:c5:91:58:ed:b1:
                    e9:41:ca:c1:47:ea:f2:98:58:c4:ea:7f:50:71:6a:
                    f5:10:51:2a:07:1d:4b:0d:1a:7d:4b:18:89:f6:38:
                    92:1b:8c:1b:03:b7:ca:e6:29:49:ce:01:06:f0:e0:
                    0e:19:aa:49:df:f7:8b:26:dc:36:c0:ce:70:57:a9:
                    a6:0d:65:71:95:c1:e4:4c:b7:fb:24:46:26:5e:80:
                    c2:29:e8:50:74:dc:aa:89:8e:05:13:9a:cc:c6:c2:
                    cc:cf:e0:64:4f:11:7b:ed:45:c8:47:29:3e:7a:bf:
                    c4:8c:41:82:67:11:19:19:be:a7:55:62:63:61:e6:
                    57:96:99:4a:f4:80:80:c6:a6:16:8d:db:27:de:88:
                    8c:40:a5:2d:5b:e9:39:6e:af:2c:00:51:31:e2:6f:
                    3e:01:30:8f:9d:2a:b2:99:86:4d:4a:91:7e:8c:96:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:15:7F:7F:7D:50:B2:EF:A9:F0:52:DB:1C:2A:15:14:77:4F:79
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:9b:9f:33:64:4a:b2:72:18:55:82:db:45:44:3c:4c:b4:
         3b:aa:87:52:2a:09:4b:f4:71:b8:24:73:8d:55:da:76:d1:28:
         3c:72:6a:21:e9:6b:e8:92:84:42:40:ee:eb:dd:67:60:33:ed:
         59:d2:ec:0d:6a:71:5c:39:b6:e8:01:41:12:49:09:f8:ed:6b:
         bc:50:97:6c:9d:35:2b:27:ee:a6:dc:61:7a:19:55:1b:9f:c5:
         91:81:82:e1:0e:e3:d5:27:67:8b:81:e7:d3:4a:07:d3:ff:19:
         3e:9d:8a:f5:bd:25:29:f7:68:de:53:c2:e6:78:bc:be:88:e6:
         dd:ba:b5:f7:3e:49:fd:6b:50:41:52:ab:5c:c4:ba:45:c5:10:
         94:21:86:7b:6c:50:43:e6:0f:dd:7d:24:b2:7f:e6:4b:55:04:
         6c:f2:19:6a:a1:4a:ef:5b:12:d9:bd:d7:72:03:fa:0a:f1:13:
         07:c1:22:38:49:6c:57:88:c2:f0:61:69:df:8e:d6:c3:5d:42:
         6a:3b:ea:be:d2:6a:e2:38:a9:f3:74:20:ef:74:12:39:66:0d:
         50:35:5b:ca:3c:44:c4:7a:f1:25:d8:ed:88:30:a1:d7:37:d9:
         b3:79:71:ef:6b:49:07:ec:f4:36:77:bd:5f:ac:e8:c6:48:61:
         b5:db:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:07 2026 by rpki-client