Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File:                     NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier:          lvkhST1mwYg594BHsWLFq1HyKXNtpWC9ccOskz+Vv6k=
Subject key identifier:   C7:CB:BC:B1:33:71:CB:6D:D5:3B:CF:15:67:54:94:EB:4D:A8:B1:B6
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer:       /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial:       019E2023998170846EF5554C05E97B10E721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 07:01:04 +0000
Manifest this update:     Wed 13 May 2026 07:01:04 +0000
Manifest next update:     Thu 14 May 2026 07:01:04 +0000
Files and hashes:         1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: Rh5Shf1ofE5iZa9E6PafgGaaZ7/gOZiJNbHYK8L2A9I=)
                          2: h9csAbPkQWfATuuCxHD4BYCCVSo.roa (hash: uOXNbpvZvHEf4Spk0vf1dg88f9LIRcDmba0q2K0ziEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:99:81:70:84:6e:f5:55:4c:05:e9:7b:10:e7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
        Validity
            Not Before: May 13 07:01:04 2026 GMT
            Not After : May 14 07:01:04 2026 GMT
        Subject: CN=c7cbbcb13371cb6dd53bcf15675494eb4da8b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:6c:70:74:54:22:4a:10:dc:39:ab:7d:81:
                    c7:62:c0:8f:3d:0f:54:aa:42:90:3d:1c:58:fb:a5:
                    41:cb:66:c6:66:c2:f3:8c:99:01:e1:50:6a:0c:a3:
                    fa:6e:9d:2d:00:2e:da:92:f4:fb:3a:a3:9b:a4:fc:
                    54:8f:5a:9f:df:8c:a2:9b:e7:70:21:31:7b:5f:e2:
                    69:f4:a6:f2:e7:5b:f7:b3:cf:29:10:30:14:ce:8e:
                    0a:f7:ee:73:ea:bc:23:c6:9e:41:58:02:ca:c7:54:
                    4c:50:53:f7:b8:c4:5a:88:48:d6:ff:04:30:b7:93:
                    48:9a:5a:4e:83:7a:e2:82:fd:9a:4a:1e:0c:b9:4a:
                    1c:93:25:78:d0:ff:b0:1c:69:a0:16:4e:bf:98:06:
                    33:47:dd:81:54:90:6d:98:b8:e1:5e:c5:84:c9:b7:
                    3a:a7:96:cc:26:c0:02:84:34:f6:35:41:ac:4f:d4:
                    25:14:df:f7:f3:6e:a1:fe:83:f8:de:10:51:61:c7:
                    4b:6c:cf:8b:5d:79:06:bd:27:01:b4:39:fd:5a:5d:
                    0f:29:ec:3f:47:cc:ee:d4:3d:36:b4:85:39:b7:83:
                    33:20:40:6c:c3:70:12:66:4a:4f:2d:a3:f4:cd:a2:
                    bd:af:11:36:57:dc:84:11:49:15:1c:bc:f2:52:dd:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:BC:B1:33:71:CB:6D:D5:3B:CF:15:67:54:94:EB:4D:A8:B1:B6
            X509v3 Authority Key Identifier:
                keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:b1:3d:10:a5:ef:86:e2:09:c6:c0:a9:2d:94:e9:7e:f7:
         e1:72:bf:93:56:c5:79:0b:78:aa:34:70:54:77:f2:d1:ad:04:
         a2:4c:fb:ad:9d:7c:cd:66:47:d5:f7:0c:84:7f:c1:5f:8a:80:
         f5:8d:66:98:5e:58:24:3d:9e:7e:97:9c:85:92:ab:18:e0:a8:
         9c:1e:af:01:8c:14:5b:ad:27:d1:0e:bb:ba:93:bb:8c:88:b1:
         87:80:94:14:0e:bb:4e:be:a7:d3:e5:d9:e7:10:e1:bd:3c:07:
         4a:fd:c5:c8:38:3c:af:bc:6d:82:24:67:1a:cb:44:f7:2c:6f:
         91:09:8f:57:ab:c6:37:f1:d5:7d:9e:11:e2:6c:92:7e:5c:73:
         20:53:e2:d4:d4:4d:fc:6c:40:6e:f6:6e:7a:9c:2a:11:e9:f8:
         c3:c8:38:07:bf:5a:ab:fd:f7:a5:19:b8:35:0f:93:24:7d:4b:
         54:74:1f:7a:c9:9d:17:b1:92:3c:da:75:73:73:15:cc:ba:dc:
         ab:0b:7b:38:c2:10:e3:85:18:8f:ec:ac:0a:dd:2d:ab:70:d6:
         1f:18:02:91:9c:f5:d6:b4:9f:79:e5:db:4b:97:6f:36:fc:6f:
         e3:cf:99:10:e2:68:05:6d:5f:e0:89:0c:a3:38:22:9e:ef:45:
         f9:1a:20:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI5mBcIRu9VVMBel7EOchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjYwNTEzMDcwMTA0WhcNMjYwNTE0MDcwMTA0WjAzMTEwLwYDVQQD
EyhjN2NiYmNiMTMzNzFjYjZkZDUzYmNmMTU2NzU0OTRlYjRkYThiMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KtscHRUIkoQ3DmrfYHHYsCPPQ9U
qkKQPRxY+6VBy2bGZsLzjJkB4VBqDKP6bp0tAC7akvT7OqObpPxUj1qf34yim+dw
ITF7X+Jp9Kby51v3s88pEDAUzo4K9+5z6rwjxp5BWALKx1RMUFP3uMRaiEjW/wQw
t5NImlpOg3rigv2aSh4MuUockyV40P+wHGmgFk6/mAYzR92BVJBtmLjhXsWEybc6
p5bMJsAChDT2NUGsT9QlFN/3826h/oP43hBRYcdLbM+LXXkGvScBtDn9Wl0PKew/
R8zu1D02tIU5t4MzIEBsw3ASZkpPLaP0zaK9rxE2V9yEEUkVHLzyUt1zgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfLvLEzcctt1TvPFWdUlOtNqLG2MB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwmxPRCl
74biCcbAqS2U6X734XK/k1bFeQt4qjRwVHfy0a0Eokz7rZ18zWZH1fcMhH/BX4qA
9Y1mmF5YJD2efpechZKrGOConB6vAYwUW60n0Q67upO7jIixh4CUFA67Tr6n0+XZ
5xDhvTwHSv3FyDg8r7xtgiRnGstE9yxvkQmPV6vGN/HVfZ4R4mySflxzIFPi1NRN
/GxAbvZuepwqEen4w8g4B79aq/33pRm4NQ+TJH1LVHQfesmdF7GSPNp1c3MVzLrc
qwt7OMIQ44UYj+ysCt0tq3DWHxgCkZz11rSfeeXbS5dvNvxv48+ZEOJoBW1f4IkM
ozginu9F+RogLg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:25:31 2026 by rpki-client