Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File:                     neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier:          bdM1th8GFnYaUDR5mtwqXEgvxUI3baMu9d0AYRlLrXw=
Subject key identifier:   BB:0F:66:94:8A:09:BB:33:8A:97:E5:A8:BC:4B:96:AD:FE:F8:8F:6F
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       019E1D9109AA6F5F8343F1257F2357190C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number:          08CA
Signing time:             Tue 12 May 2026 19:01:44 +0000
Manifest this update:     Tue 12 May 2026 19:01:44 +0000
Manifest next update:     Wed 13 May 2026 19:01:44 +0000
Files and hashes:         1: jmLtJUxHPxpB7box3rNypwD46s0.roa (hash: ioSXmdZQKPgQzhxeOsda7o3/dqgp5Z2LIfjrfCe2EH0=)
                          2: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: sp9rb8ROzNLor36AcEYHugwUufDcXo7QpwfQCnq9LsM=)
                          3: sw_qXOJcT7aPlg79f_kZ5SOwzuY.roa (hash: 6VGxZZ/iPxc1qh6Yge74XKfSiCFqKQcv/prGXeIZ/9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:09:aa:6f:5f:83:43:f1:25:7f:23:57:19:0c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: May 12 19:01:44 2026 GMT
            Not After : May 13 19:01:44 2026 GMT
        Subject: CN=bb0f66948a09bb338a97e5a8bc4b96adfef88f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:61:8d:67:b1:36:3b:12:90:b1:93:3a:75:
                    8a:39:e6:cc:8e:e3:25:9f:7a:e3:8b:23:59:36:3e:
                    30:ee:04:bf:2c:28:3d:89:01:24:12:0d:b6:99:60:
                    76:95:0a:31:99:4a:7d:94:7a:3b:68:33:19:3f:5b:
                    cb:a7:c9:02:4f:37:8e:ad:89:43:f6:e1:2e:7a:b1:
                    4f:ad:56:3b:c0:83:31:d0:02:42:10:15:22:79:d2:
                    89:9e:e7:f0:c9:e5:a3:cd:d4:f2:1e:59:a7:f0:54:
                    d1:99:e2:65:e4:02:2e:06:40:aa:b0:13:64:5c:6f:
                    c1:c1:1f:13:12:1a:48:d4:6a:81:1a:83:0c:66:9f:
                    e3:6e:6a:a4:1a:6b:7d:0d:b6:35:75:af:38:a8:c3:
                    cd:ca:ab:77:01:3d:a1:a4:ee:3f:3b:79:d4:c1:18:
                    df:db:f5:aa:e8:78:42:1c:54:54:73:92:f7:5f:85:
                    2b:38:e8:2f:3c:51:8f:b1:71:ca:b4:6a:33:d3:2e:
                    28:31:19:18:15:90:ae:6f:67:2b:82:de:02:92:d8:
                    20:1b:64:fd:a2:61:54:9f:69:8e:74:60:cf:35:8b:
                    fa:79:df:f9:0e:d6:93:92:a3:cd:0e:8a:46:14:6b:
                    fc:14:74:9f:ab:c2:d8:83:58:0c:72:ba:e6:e9:03:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:66:94:8A:09:BB:33:8A:97:E5:A8:BC:4B:96:AD:FE:F8:8F:6F
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:da:81:97:e9:de:16:a2:e4:30:c9:bf:11:b0:01:0c:3e:
         e4:d7:35:60:c1:e4:20:af:21:9a:dc:bf:2d:d7:d2:38:ca:85:
         e5:9b:a4:79:ea:66:5e:08:ab:ad:89:00:2a:0d:5f:fa:82:86:
         d3:56:c9:40:80:46:7d:83:eb:3d:7d:c4:d3:c6:e2:8d:fc:8b:
         e9:85:a1:0b:a7:55:89:d9:1f:49:ad:10:74:6a:92:59:86:73:
         5a:7f:84:2b:e4:e9:4d:ee:5e:4b:6e:7f:c7:d0:76:98:98:c8:
         07:69:af:ae:3c:93:f3:a3:17:4c:71:38:cb:77:e8:ae:dd:25:
         08:f6:4c:31:98:63:df:a9:f3:54:c3:2c:5a:ec:9e:5e:40:8e:
         cd:b0:e0:23:d2:40:50:c4:b0:ae:fa:21:89:65:4a:11:ce:a3:
         31:8b:46:bd:eb:9e:96:15:4b:1b:20:19:be:1b:d6:d7:48:94:
         ab:90:b4:fc:bd:41:90:5b:cf:28:08:6c:d9:70:11:64:6a:1b:
         a7:97:27:32:b3:7d:35:70:15:8f:50:85:f9:a0:a4:5c:3f:70:
         52:0e:62:41:87:f8:02:8b:42:14:34:0d:2a:6a:d9:2f:33:ae:
         e4:dc:c1:26:45:cf:43:64:51:6c:a4:8c:12:e8:2b:ef:20:53:
         4a:7d:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:27 2026 by rpki-client