Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File:                     nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier:          iJcqaMWbuMQ2fA3POny+W/IDYPpF83YUtUqFEb3u+J8=
Subject key identifier:   69:7B:99:65:77:D9:0E:2A:E0:82:81:42:A0:DF:0E:6C:52:03:B5:D7
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer:       /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial:       019E1DFDFA42EE45D282397CA57557786FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number:          82
Signing time:             Tue 12 May 2026 21:00:44 +0000
Manifest this update:     Tue 12 May 2026 21:00:44 +0000
Manifest next update:     Wed 13 May 2026 21:00:44 +0000
Files and hashes:         1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
                          2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: HD+qQAUNL/6yORngmxln2wSnncAxye+2zmIZcds7Gg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:fa:42:ee:45:d2:82:39:7c:a5:75:57:78:6f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
        Validity
            Not Before: May 12 21:00:44 2026 GMT
            Not After : May 13 21:00:44 2026 GMT
        Subject: CN=697b996577d90e2ae0828142a0df0e6c5203b5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:fe:48:0b:8c:13:a3:e2:e4:cd:47:be:e1:
                    93:a8:1f:ba:5f:14:03:19:ba:a2:00:7c:38:f9:0c:
                    60:c4:c2:9d:d8:47:3e:52:75:bb:a5:2c:b0:38:e2:
                    8e:27:65:41:4c:bf:9c:25:53:86:dc:28:68:00:41:
                    47:de:65:e8:c2:00:c3:b6:43:7c:66:31:3a:0c:29:
                    29:27:c8:ee:20:70:5e:38:45:f0:49:b7:6b:51:51:
                    a0:56:96:78:1b:06:f6:b0:db:1e:71:a0:40:49:ba:
                    48:18:2b:d2:a4:3e:a3:52:ad:0e:4a:ff:06:00:3f:
                    d5:57:2d:44:85:c3:2a:1f:e8:a6:1d:b3:4b:30:42:
                    a7:64:02:dd:1e:83:e7:2b:29:07:1a:36:4a:f0:9d:
                    48:e9:db:b3:1c:81:c0:ae:90:78:78:d9:c1:84:46:
                    de:d3:e4:53:99:b0:8d:6b:78:43:3b:53:94:ee:07:
                    5c:6b:4c:4e:ea:4a:f8:b3:a5:c9:27:95:ea:6c:0f:
                    27:9c:3a:b7:c1:de:82:e2:f2:40:04:0b:10:5c:25:
                    49:39:7d:39:26:1b:d4:ec:c6:e9:67:17:6e:6f:b4:
                    97:49:a5:2a:32:1c:4c:7c:45:2b:03:6a:48:45:5b:
                    a6:ee:83:73:2e:dd:88:9a:5f:fb:57:b3:23:78:1f:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:99:65:77:D9:0E:2A:E0:82:81:42:A0:DF:0E:6C:52:03:B5:D7
            X509v3 Authority Key Identifier:
                keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:69:fe:d1:d1:84:af:b6:a1:d7:34:ea:39:f7:b2:58:1b:
         df:bf:56:70:39:ba:88:5f:c3:82:f0:b8:13:c2:64:41:76:7f:
         5c:f6:bc:bf:5a:38:d8:03:ab:30:be:a0:4a:e1:db:35:6e:92:
         74:3d:dd:34:d8:01:e1:a7:42:ec:c2:ac:05:b6:1f:a9:0f:f2:
         11:df:af:0b:34:39:f6:52:90:c1:7b:5f:37:19:69:3d:ad:51:
         0e:78:de:af:c3:f9:aa:65:e7:5f:ec:ef:da:87:b8:55:68:cc:
         62:da:14:d6:b9:ae:00:77:be:b5:81:d9:5c:2f:86:1a:6d:16:
         f4:97:b7:0a:16:78:0a:01:98:ca:47:1c:ca:93:1b:d5:82:79:
         44:17:6a:7a:8e:7d:81:bb:58:d1:c7:bf:f6:39:d5:c7:39:20:
         c4:ff:4a:6e:53:80:9d:f6:98:09:94:e8:d0:15:f6:92:f1:7e:
         90:db:26:6b:71:7a:3c:1e:bf:6f:bb:5f:c6:b2:04:01:ca:95:
         68:c8:ac:2a:44:af:68:be:69:f0:ef:fb:b1:6f:0b:81:c0:30:
         ec:b1:b1:a9:22:f4:b7:2a:66:4a:cd:4d:e0:79:50:8d:b9:4d:
         22:2b:23:58:cf:4a:6c:7c:df:9c:c7:47:34:58:24:17:1f:83:
         1d:16:94:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fpC7kXSgjl8pXVXeG/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjkxMWFmYjI5Y2UzMzUyNzY3ZTcxMzlkOWI5NWRmOGEw
NTk4Y2IwHhcNMjYwNTEyMjEwMDQ0WhcNMjYwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg2OTdiOTk2NTc3ZDkwZTJhZTA4MjgxNDJhMGRmMGU2YzUyMDNiNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5D+SAuME6Pi5M1HvuGTqB+6XxQD
GbqiAHw4+QxgxMKd2Ec+UnW7pSywOOKOJ2VBTL+cJVOG3ChoAEFH3mXowgDDtkN8
ZjE6DCkpJ8juIHBeOEXwSbdrUVGgVpZ4Gwb2sNsecaBASbpIGCvSpD6jUq0OSv8G
AD/VVy1EhcMqH+imHbNLMEKnZALdHoPnKykHGjZK8J1I6duzHIHArpB4eNnBhEbe
0+RTmbCNa3hDO1OU7gdca0xO6kr4s6XJJ5XqbA8nnDq3wd6C4vJABAsQXCVJOX05
JhvU7MbpZxdub7SXSaUqMhxMfEUrA2pIRVum7oNzLt2Iml/7V7MjeB/U8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl7mWV32Q4q4IKBQqDfDmxSA7XXMB8GA1UdIwQY
MBaAFJ65Ea+ynOM1J2fnE52bld+KBZjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYt
NjVlMjQ1NzEzMmVmLzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYtNjVlMjQ1NzEzMmVm
LzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlxp/tHR
hK+2odc06jn3slgb379WcDm6iF/DgvC4E8JkQXZ/XPa8v1o42AOrML6gSuHbNW6S
dD3dNNgB4adC7MKsBbYfqQ/yEd+vCzQ59lKQwXtfNxlpPa1RDnjer8P5qmXnX+zv
2oe4VWjMYtoU1rmuAHe+tYHZXC+GGm0W9Je3ChZ4CgGYykccypMb1YJ5RBdqeo59
gbtY0ce/9jnVxzkgxP9KblOAnfaYCZTo0BX2kvF+kNsma3F6PB6/b7tfxrIEAcqV
aMisKkSvaL5p8O/7sW8LgcAw7LGxqSL0typmSs1N4HlQjblNIisjWM9KbHzfnMdH
NFgkFx+DHRaUXw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:43:30 2026 by rpki-client