Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File:                     N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier:          e6CQofZGCMM9pS1jRyeyIfzL1MDR0LsblnkGyJh163k=
Subject key identifier:   BA:10:F5:BA:41:39:DD:A8:59:26:91:A2:C2:50:A3:A5:24:34:A7:5C
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer:       /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial:       019E1EDA70748783513C3B8C28D99EF7F63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number:          18FD
Signing time:             Wed 13 May 2026 01:01:32 +0000
Manifest this update:     Wed 13 May 2026 01:01:32 +0000
Manifest next update:     Thu 14 May 2026 01:01:32 +0000
Files and hashes:         1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: 78RocO/8XSVTllKt0cG5zL6JMWro068p8QO5s62DQfg=)
                          2: Xu_M6qzcK7mfWZCHmn6JKUUrAt0.roa (hash: 3PFCQYjH23ubKta8UeYrfDkFec6WuV94yV14I25LNoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:70:74:87:83:51:3c:3b:8c:28:d9:9e:f7:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
        Validity
            Not Before: May 13 01:01:32 2026 GMT
            Not After : May 14 01:01:32 2026 GMT
        Subject: CN=ba10f5ba4139dda8592691a2c250a3a52434a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:ca:13:44:5e:b0:0d:a0:4b:79:b1:2b:8d:
                    55:54:04:05:8b:4b:32:0f:a2:d7:44:81:41:ff:b2:
                    92:0d:0a:40:78:66:9c:16:c4:d0:f4:de:a3:b3:d7:
                    dc:c9:c4:5a:0b:74:68:7e:d9:66:60:3f:de:15:6b:
                    80:b1:6b:d8:3b:10:3b:04:c8:6d:4a:67:95:fd:1f:
                    ff:f1:b4:b3:74:6e:d1:3e:70:a7:b9:92:3f:47:2d:
                    5e:a9:55:ef:45:8e:28:05:68:8d:53:dc:cf:69:c0:
                    45:cc:9d:2d:98:89:f9:c4:9e:84:d2:69:eb:b6:0e:
                    4b:d1:28:af:b8:ae:8d:71:79:f3:52:ce:d8:b5:a3:
                    85:5d:1a:63:36:b2:d7:be:a8:74:fe:b1:bb:be:65:
                    c5:fc:ad:a5:68:1a:b5:81:77:42:60:8a:93:f7:de:
                    1c:48:80:43:c6:dd:ba:bb:2c:06:0f:62:a1:98:65:
                    37:24:3d:2d:3a:fc:1c:b5:d5:c9:c9:bc:fd:10:9c:
                    e2:46:a7:ab:4f:73:db:d3:2c:f9:a5:e3:80:fe:06:
                    a7:e3:6d:44:c9:b7:68:3e:9e:f9:8a:02:6b:6b:d9:
                    2f:fe:0f:bb:0e:7a:d3:04:8d:16:dd:75:b7:d6:15:
                    12:9a:e9:c3:d4:b6:16:83:3e:bf:ed:33:7d:b9:a5:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:10:F5:BA:41:39:DD:A8:59:26:91:A2:C2:50:A3:A5:24:34:A7:5C
            X509v3 Authority Key Identifier:
                keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:94:28:be:81:db:d2:d8:04:4f:4e:31:d7:f4:66:9a:7c:
         a5:a3:5e:59:d4:9b:ca:5b:11:19:1b:20:96:b1:7e:44:40:50:
         13:e1:cb:10:37:ac:48:50:b9:de:d4:ac:18:98:f6:c8:ce:b0:
         4c:0e:79:b5:80:8f:13:75:5c:f2:3f:86:82:c0:03:77:82:ce:
         79:1c:d0:00:40:9d:67:1c:46:8c:b4:6b:a3:a0:52:e4:d3:9f:
         1c:de:41:0a:47:e9:c5:81:8a:a9:e2:65:8a:05:3b:23:e0:2b:
         17:6d:97:89:61:5d:c4:02:33:ed:49:05:31:25:2a:ae:59:f5:
         2e:11:ed:cb:58:de:6d:ee:d5:52:00:e1:f2:f8:1b:e8:08:d0:
         d6:01:e7:3a:84:18:26:1b:c5:16:a9:94:60:0c:d2:fa:d3:51:
         e9:e6:7a:0e:43:40:81:68:89:af:bf:ff:4c:ad:ab:03:9e:2f:
         88:8b:ea:cb:bf:57:bd:5f:20:56:e3:02:00:da:d4:cb:c7:6a:
         0f:f7:18:81:94:dd:df:75:6c:5e:73:17:30:52:4b:c8:21:55:
         57:a6:56:9f:a6:51:24:4d:f3:d3:0c:f1:71:c8:9e:89:ab:ed:
         be:e2:9b:72:63:e4:ce:38:19:0b:15:99:11:71:d0:52:59:26:
         11:28:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:44 2026 by rpki-client