Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          9GVTujqweuouZhm4LFr4yHBor660A7CXmFYyRmRaoCI=
Subject key identifier:   E0:64:7E:5C:F5:43:D3:54:C4:17:DB:F2:12:B3:D4:78:92:D6:78:AC
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       019E1E35385977BB3304B1F241D580B82283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          1915
Signing time:             Tue 12 May 2026 22:01:04 +0000
Manifest this update:     Tue 12 May 2026 22:01:04 +0000
Manifest next update:     Wed 13 May 2026 22:01:04 +0000
Files and hashes:         1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
                          2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
                          3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
                          4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 4JM8SG2qDw20i+nPatqWNTjXGHiqjUQf1MOoVFv91Nk=)
                          5: q22VxMdSRIy60hnXGH9ZkvEl-VU.roa (hash: zg/MJ8qfVOHy4J7FHOIGJgHJYpom3/1tICP7KNToxU8=)
                          6: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:38:59:77:bb:33:04:b1:f2:41:d5:80:b8:22:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: May 12 22:01:04 2026 GMT
            Not After : May 13 22:01:04 2026 GMT
        Subject: CN=e0647e5cf543d354c417dbf212b3d47892d678ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:4c:15:b2:5b:20:8b:68:b4:64:e8:0c:55:
                    3c:5a:9f:fa:aa:80:71:d2:2f:f8:7e:8a:43:da:a4:
                    0c:b8:ef:f9:68:dd:79:0b:b5:39:49:6e:27:64:74:
                    16:cf:48:2e:b7:eb:21:8d:01:1d:51:a6:66:ac:e9:
                    b7:d1:30:14:be:93:d2:50:03:fe:73:81:94:b5:cb:
                    c3:84:6c:b6:5c:95:78:5b:4d:9d:7c:8f:2b:b5:12:
                    34:fc:ea:48:68:88:7e:a1:99:b3:73:9c:a6:04:4d:
                    d4:ce:b3:3e:d9:18:9e:47:33:50:cf:a2:c3:0d:6c:
                    26:ca:56:8e:4d:45:60:8e:31:ce:fe:d0:cc:da:98:
                    52:69:ab:ac:09:90:e4:9a:90:4f:44:8f:e9:4d:8d:
                    8a:c3:73:e6:27:55:38:ba:87:23:a5:d8:1e:ed:f0:
                    35:37:3e:11:b1:c9:1c:69:0e:9c:fc:01:76:fe:94:
                    5c:a8:5f:ce:f9:d8:df:f5:93:43:cc:68:3c:2e:f1:
                    59:92:21:d6:47:b3:8d:c5:ce:45:41:05:4e:17:66:
                    86:bd:ba:51:56:03:bd:ff:4e:bb:30:1f:0d:70:b6:
                    54:15:55:90:50:9d:11:81:fd:aa:2f:ec:73:42:0e:
                    73:87:15:30:cd:1d:ee:83:d3:cb:01:91:43:79:25:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:64:7E:5C:F5:43:D3:54:C4:17:DB:F2:12:B3:D4:78:92:D6:78:AC
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:45:61:0a:13:e2:cc:20:5c:90:3c:a5:0e:d5:95:8d:4f:49:
         7c:51:d3:1b:3d:9c:25:91:8b:b2:fa:0a:8c:2c:5c:6a:62:c7:
         a8:ff:28:34:9d:f8:15:44:07:97:fe:ea:28:b9:17:ea:5e:78:
         08:68:7e:34:e7:82:c1:da:2e:b0:5a:92:0e:f4:c9:aa:55:34:
         0e:4d:d4:18:fe:f2:14:8e:6e:35:b6:a5:9d:2a:41:bc:53:16:
         70:ec:dc:c6:d0:57:85:48:5e:76:df:45:f2:d3:bd:5a:b6:56:
         e0:dd:a0:9f:b4:08:a1:1f:30:21:95:4c:b7:f8:4d:ee:f6:92:
         97:1d:3a:e7:59:d0:3c:ec:d3:23:f5:6d:ca:a8:df:d7:81:96:
         5c:15:22:19:fd:fe:55:55:d6:c8:1d:5d:30:53:51:5a:a6:e3:
         54:db:eb:56:f9:3e:8e:40:0a:db:b1:85:36:84:90:f6:c8:3f:
         50:5c:7e:1e:5d:cb:d5:2e:03:01:c6:5c:65:9c:e4:22:c7:42:
         44:ab:30:2a:86:05:d1:45:34:9f:7b:8f:79:a7:40:90:75:54:
         db:51:95:fe:a1:ce:52:e7:25:42:57:25:44:9b:77:7a:68:08:
         39:84:57:c9:de:20:02:d3:5c:b4:86:58:01:e2:21:52:58:33:
         d4:fc:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:29 2026 by rpki-client