Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          DsqEvqztEdbpVAOdiepY+fvA3tsVCe664H7OJFe3rjI=
Subject key identifier:   95:A2:04:01:D6:A2:2D:5F:2C:A9:78:20:7B:E2:FB:57:24:9F:4D:82
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       019E1F7F14FAA43053E83E951E700D2CE5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          08C7
Signing time:             Wed 13 May 2026 04:01:22 +0000
Manifest this update:     Wed 13 May 2026 04:01:22 +0000
Manifest next update:     Thu 14 May 2026 04:01:22 +0000
Files and hashes:         1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
                          2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: ZJ7v4bmqyN77jpRSLNZfTYVlj9aSdI8xdX4I4YXy924=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:14:fa:a4:30:53:e8:3e:95:1e:70:0d:2c:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: May 13 04:01:22 2026 GMT
            Not After : May 14 04:01:22 2026 GMT
        Subject: CN=95a20401d6a22d5f2ca978207be2fb57249f4d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:7b:20:f6:f7:ed:0d:a6:b5:f1:d8:af:cb:
                    d0:d6:61:56:ea:a3:49:dd:a7:ab:51:cf:fa:d4:c5:
                    36:21:03:87:56:15:f9:82:0d:e7:3a:7d:55:e4:90:
                    bd:dd:44:96:e5:8e:ec:4e:22:52:07:9c:b9:c5:d6:
                    89:02:4b:99:91:73:ab:75:6c:59:05:c6:07:4d:57:
                    d2:9f:31:fb:11:1a:98:82:b5:2c:fb:2c:ab:e9:04:
                    05:a4:3c:ac:50:c2:6a:65:4e:6f:e8:df:ad:bb:cc:
                    3f:24:2a:f2:6e:5f:22:1a:73:6a:94:0c:4e:e8:37:
                    3a:a0:83:9f:43:ad:cf:fc:50:91:f8:fc:e3:b8:14:
                    69:b3:96:98:8c:e7:c5:2b:fe:a2:ee:08:c6:4a:8f:
                    d0:38:e5:c7:11:ed:11:1e:90:64:90:d5:37:a8:75:
                    9f:a6:22:0d:e7:bc:9e:d3:e5:9b:e2:48:16:3b:b7:
                    60:19:a2:ed:f3:da:13:b7:29:2a:34:f8:69:87:62:
                    14:f8:63:99:ba:f2:64:9b:86:1d:c8:a6:83:7e:cb:
                    6e:08:9f:4b:09:d9:82:69:bd:fc:43:2d:43:d9:7b:
                    2b:2d:e5:b1:82:f9:82:94:47:e9:ff:f5:94:41:92:
                    91:8b:83:38:e5:d2:6c:ce:ad:19:fe:84:aa:53:63:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:04:01:D6:A2:2D:5F:2C:A9:78:20:7B:E2:FB:57:24:9F:4D:82
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:0d:ef:a2:85:f1:3e:e1:d1:a2:82:10:cd:13:31:e8:11:
         a4:19:f3:af:cb:d3:2f:35:1d:38:fb:bb:43:22:80:db:11:b7:
         9c:8d:42:66:24:4f:04:73:99:e4:44:23:9b:d7:5b:c2:40:ab:
         d0:e7:ff:f2:04:15:db:fe:0d:96:26:1b:05:0a:b7:10:ec:d6:
         49:fe:dd:af:f4:37:91:e3:f7:2f:c4:50:b6:96:4f:f7:42:bc:
         cd:2a:50:17:87:53:ce:db:45:0d:7a:73:12:e1:a1:20:87:77:
         de:66:c8:f3:57:03:a4:f6:f5:01:a2:a7:34:62:a5:c1:88:ec:
         1c:ec:d7:9c:ee:71:0e:7d:a8:c8:57:e0:06:65:6e:e8:c0:88:
         98:f9:5e:f5:fd:39:0b:5f:4a:04:59:20:23:3a:cf:60:ce:57:
         83:fa:b1:1e:66:f6:0c:12:7a:8e:76:3b:df:2c:93:07:f1:62:
         47:5c:1d:1f:f5:de:74:80:7b:20:19:f8:6d:ec:f2:a2:86:f6:
         13:f1:2d:79:bd:b7:3b:48:9a:37:e4:c3:31:c3:d3:a0:46:62:
         2d:27:72:f8:e5:95:d8:db:2d:f7:86:45:d9:16:06:ba:21:d5:
         bf:fe:2b:17:ce:92:f9:7f:ad:17:e9:97:cf:20:84:b7:de:35:
         92:c1:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:03 2026 by rpki-client