Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          yPlMa2a8A7whPiT6mTwJ4lmM0Fd56ESUwc+ryYMh/Gc=
Subject key identifier:   74:C2:8E:04:73:60:5A:40:30:EB:67:88:FA:80:F1:46:F6:65:39:22
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       019EBF5A38B2AD0583545C5D8861DDC3A611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0E0E
Signing time:             Sat 13 Jun 2026 05:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:21 +0000
Files and hashes:         1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
                          2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
                          3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
                          4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: VwYEnjhhMKXOzBqja4bCujK0ihlGjruaZuz9TtahbEE=)
                          5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
                          6: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
                          7: nwwR0-9CsEUMGPEOFFL_3bvgQUo.roa (hash: k8js5BOnSh6QgVLoeeNLri5jyLltfPNXIDWo5SvT1SI=)
                          8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
                          9: yp98x6yYYIuBZUC3bnf7MHgKEns.roa (hash: NAmEGNUz0k+oLVO5wpaWE9rr2iEdVjVHoP1KlrmllwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:38:b2:ad:05:83:54:5c:5d:88:61:dd:c3:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Jun 13 05:00:21 2026 GMT
            Not After : Jun 14 05:00:21 2026 GMT
        Subject: CN=74c28e0473605a4030eb6788fa80f146f6653922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:f0:07:3b:26:ea:fb:64:b8:91:3b:85:46:
                    a0:71:cb:22:c7:70:4e:cd:e5:40:cd:db:56:74:ce:
                    8d:ec:7d:2d:71:0f:60:de:2c:bd:0c:85:e7:1a:23:
                    3d:23:43:f5:3d:48:4c:e1:52:71:1d:2d:a3:0f:43:
                    a7:c3:9b:00:0d:14:93:d4:1a:0d:43:f1:3f:84:5f:
                    b1:0d:5c:c4:1e:65:2f:9c:99:90:c9:d4:c9:48:5f:
                    5b:7e:eb:02:76:f7:52:08:bf:d8:2f:de:e9:f0:cb:
                    93:2d:ce:15:0b:8a:fa:90:21:10:52:38:b6:b1:d2:
                    c0:96:60:83:e1:e7:cc:28:b1:c5:9b:8b:7f:3b:b6:
                    45:28:f7:67:84:17:11:a7:79:b9:14:30:22:d8:85:
                    4f:ba:b2:65:ea:1f:6d:0c:ed:6d:1a:42:a9:84:8e:
                    b8:3f:2a:bf:6b:04:c7:f7:0e:49:2c:5a:2d:83:42:
                    43:e0:3f:78:d4:d4:6b:3c:5a:d0:b1:83:8f:80:b4:
                    10:d8:5d:85:2e:ed:b8:21:4f:0d:0f:37:a8:d2:00:
                    bb:4a:11:cd:5b:a3:58:18:8b:8e:6b:c9:82:af:42:
                    b0:93:0e:af:83:82:84:1e:a1:d7:66:b2:bb:41:21:
                    8e:46:d4:70:6a:64:4c:92:d4:27:46:ca:22:ce:28:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:8E:04:73:60:5A:40:30:EB:67:88:FA:80:F1:46:F6:65:39:22
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:ac:5e:c6:6c:70:b7:d2:b1:08:ce:54:db:d5:35:14:13:
         54:16:90:9d:5b:02:5a:c7:c5:6f:e8:ac:51:bc:ff:35:59:27:
         cc:33:1b:b0:b3:d8:f2:15:0f:cf:79:e9:1a:3a:cf:07:a7:09:
         48:45:d8:9f:ee:a9:85:ae:ab:5f:d3:c4:81:44:d6:1b:46:55:
         37:ae:46:fc:72:f9:b4:1c:be:9c:b2:b1:ce:94:5f:cd:23:13:
         c4:f6:dc:68:ef:4e:f6:13:78:9c:52:fe:f0:7e:ac:3e:7a:36:
         64:51:41:63:1e:3d:a4:69:37:ce:d1:aa:8b:9c:ed:ee:a8:9e:
         78:b1:32:6c:e5:65:69:49:26:86:8e:9e:96:71:f6:83:ce:4a:
         33:c4:73:5f:e2:1b:b2:a3:19:5d:07:6b:a0:71:c0:76:60:eb:
         57:bc:3c:49:fa:81:06:9b:d0:a0:d4:0b:aa:af:67:72:46:ad:
         2b:09:6a:0a:58:94:f6:e4:fa:c7:ff:c0:90:d8:5d:25:77:08:
         23:83:a6:14:34:b7:4a:fb:c5:64:54:44:b0:d2:46:6b:2c:59:
         db:b8:29:0d:e3:01:f8:48:98:1f:ab:f4:c4:8a:e9:7d:f3:9f:
         a3:a8:74:35:1f:18:8b:74:fc:e3:df:77:88:71:d8:0c:e6:05:
         94:57:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:41 2026 by rpki-client