Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          42trkOuDgbAzpEivw/kZrvZoYgyQl1dgL2YszsLSoL4=
Subject key identifier:   6C:52:CB:86:9A:FD:CD:CA:46:A9:70:B1:56:40:E0:A6:81:5F:67:D0
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       019E1F47AB1074F5F31DDF2359229C503333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          0610
Signing time:             Wed 13 May 2026 03:00:50 +0000
Manifest this update:     Wed 13 May 2026 03:00:50 +0000
Manifest next update:     Thu 14 May 2026 03:00:50 +0000
Files and hashes:         1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 4n6feYeFREsGOj3TH62KwAPQYWbWTEPYbAtQVOkD4Ag=)
                          2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:ab:10:74:f5:f3:1d:df:23:59:22:9c:50:33:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: May 13 03:00:50 2026 GMT
            Not After : May 14 03:00:50 2026 GMT
        Subject: CN=6c52cb869afdcdca46a970b15640e0a6815f67d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:ee:a7:3e:80:d9:8f:58:30:45:55:a6:bc:
                    ea:43:5f:96:c6:0b:e9:46:4e:65:fb:07:64:c9:67:
                    c6:d0:75:a9:af:9b:79:45:ec:81:97:71:20:19:24:
                    08:41:83:10:03:ce:d5:b4:31:be:4e:45:c9:c9:53:
                    31:5f:b8:d8:98:8c:ca:59:c9:a3:a2:d8:59:0e:31:
                    ad:6d:30:62:2f:ca:32:13:64:71:57:b0:68:77:6a:
                    c9:6d:61:79:f2:d2:9d:d4:83:7a:a8:07:bf:53:d9:
                    25:a5:37:32:82:52:06:ca:23:46:e0:96:55:2b:1d:
                    03:5c:2d:f0:94:d8:be:64:cd:4c:f7:42:ef:dd:8d:
                    e5:5d:39:f7:72:22:50:f9:93:81:c0:21:dd:1b:00:
                    59:c8:25:f7:c2:ca:9f:03:97:b8:23:ef:db:78:96:
                    46:75:a9:90:2a:07:4c:c3:a7:36:6d:df:a0:55:f3:
                    fd:e4:d4:b9:3c:ca:bf:8a:99:e8:29:3a:3d:7f:2d:
                    97:43:e8:9c:55:ee:e2:3e:1a:7d:43:03:9e:d4:28:
                    ab:f3:1d:0e:3f:26:88:bc:b4:c6:6f:2d:ea:35:a4:
                    91:7a:e9:8e:e3:d8:b6:5f:46:a8:05:9b:ce:21:d1:
                    d8:7d:a7:46:b3:87:eb:5d:be:ef:9e:d7:cc:bd:1b:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:52:CB:86:9A:FD:CD:CA:46:A9:70:B1:56:40:E0:A6:81:5F:67:D0
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:66:18:d0:6e:7a:3e:9c:00:f5:62:f7:60:ce:05:b5:b4:4b:
         21:4d:7a:09:85:cd:59:86:ff:04:e4:f9:4f:a0:7d:81:b1:e2:
         4f:82:7c:1a:14:7d:3b:ba:be:9d:2e:f0:52:fd:9e:db:82:8d:
         85:b3:3b:c6:7f:87:be:8b:62:06:0a:c8:24:ca:94:be:08:cb:
         53:ae:8f:7e:2a:f0:73:a2:02:0d:b6:2b:f7:cb:44:c2:2e:10:
         0b:22:91:3e:35:50:a5:d0:1e:02:d1:7d:43:fe:dd:25:d8:54:
         54:8e:e8:fd:e2:2f:d8:e1:d0:04:a8:0f:d5:a2:6c:ad:a4:7a:
         76:e7:92:58:b9:24:4a:30:6b:d0:59:59:f9:9d:1c:32:93:ef:
         e1:ca:d4:1d:8c:f5:4f:fb:64:99:6b:60:74:d4:fb:4a:0d:5d:
         5d:24:b5:72:43:1e:e5:05:bb:a8:71:46:7d:e7:bf:f8:ef:a9:
         8f:61:68:8d:5e:a2:f0:e7:2e:be:84:ee:1a:13:b0:e6:40:64:
         43:e5:08:fb:a3:50:06:b4:8b:f0:db:11:2f:c7:5b:a2:7f:46:
         dc:4c:cc:3e:41:c0:21:05:d8:9d:84:8c:81:55:ac:ed:b3:47:
         41:0a:32:c6:c9:d0:99:83:c0:b9:13:1c:a2:97:42:7d:ef:82:
         6b:fd:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:07 2026 by rpki-client