Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
File:                     NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json)
Hash identifier:          YWWz73lFxs2aYqL8NvnT6mv0DT2EARipACARd2yzX7c=
Subject key identifier:   BC:9B:07:C4:D3:19:F9:E1:DA:4D:2A:C9:73:42:30:2C:4F:5F:F0:0E
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Certificate issuer:       /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial:       019E1E351F70B0035266EC6D36A97482C45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
Manifest number:          126E
Signing time:             Tue 12 May 2026 22:00:58 +0000
Manifest this update:     Tue 12 May 2026 22:00:58 +0000
Manifest next update:     Wed 13 May 2026 22:00:58 +0000
Files and hashes:         1: CISbF6n9QuqFQNm8mHoc5nc6W1g.roa (hash: HzRYUgonDOHDYVqUqdNB4UJzMf7057jbapRs6JAnALg=)
                          2: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: bBIHeoSoYDms++D4VGH2AwARr2IJbt8F/TCBeJdNzxU=)
                          3: QIZGTfbJUZSEUBIh0AL9MtcH9Xk.roa (hash: qB6jDuwQY99D5/eZYxuakQfw/gXp3nXt1jFtFS50sAY=)
                          4: S5UynofK7WJJ-xulmVkgmQs1QXc.roa (hash: TXD/V01KAky388bBNTxAgbyyS5aEJ2JYb1ASStpgwNI=)
                          5: fq4quGKeuWBPT0IffmD8dBRslwQ.roa (hash: QRgSQMP1nXgEyViTMvK7hl1p7O3ApOrMlu+swQwjZS4=)
                          6: gzEeLn8k2jwlK3xhzJAk6qQBIRE.roa (hash: h9UA/W0Zw0p4v9+Tj8AioNknXk0T9pDxNFrZrGENW2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1f:70:b0:03:52:66:ec:6d:36:a9:74:82:c4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
        Validity
            Not Before: May 12 22:00:58 2026 GMT
            Not After : May 13 22:00:58 2026 GMT
        Subject: CN=bc9b07c4d319f9e1da4d2ac97342302c4f5ff00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:c5:81:27:54:8e:ea:3f:1a:0f:cf:0b:b9:
                    1a:77:9e:30:73:ab:08:0a:9a:42:66:9e:74:cb:f0:
                    1c:77:9a:e0:c9:2b:fc:e9:b4:4e:be:72:8a:db:18:
                    61:aa:10:27:4e:ad:f3:69:6d:f8:f7:40:fa:cb:2e:
                    ac:f6:56:a2:a4:29:49:33:d4:84:28:b7:45:ae:de:
                    65:9a:13:f6:75:7c:6e:04:8d:ad:f5:45:4d:ff:86:
                    71:f6:7a:7d:dd:39:5e:21:9f:19:81:05:63:21:f6:
                    66:8e:20:f5:1c:c4:c9:0e:f9:bd:1d:6e:c5:73:ce:
                    78:60:59:8b:5b:b5:a8:37:0c:87:46:b8:83:cb:78:
                    6f:ce:84:28:10:dd:3d:1f:f7:c2:ac:c7:ed:50:9e:
                    20:15:0d:b2:8e:df:47:2b:ab:72:ff:a1:14:62:6a:
                    3a:08:d7:a5:aa:82:fa:71:f6:61:86:84:7f:ff:85:
                    fc:5d:48:1f:ce:54:c0:4c:34:46:99:0d:4b:d8:29:
                    4f:8f:73:b3:e3:1d:f8:3d:cb:cb:f1:01:66:90:5d:
                    46:5e:12:64:4a:50:81:34:a9:5d:b8:68:2e:1c:a0:
                    70:84:8d:82:a6:af:d4:7a:63:54:10:85:a1:1d:29:
                    c0:d5:fb:1c:b8:1b:51:05:36:97:aa:91:7e:c9:1d:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9B:07:C4:D3:19:F9:E1:DA:4D:2A:C9:73:42:30:2C:4F:5F:F0:0E
            X509v3 Authority Key Identifier:
                keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d8:8b:78:64:1c:d8:b5:82:fa:f4:58:f1:bf:95:94:d2:e6:
         9c:2b:0f:86:b2:3a:35:1b:72:68:fe:90:4c:4a:70:7e:67:a9:
         49:d5:53:cb:a9:4f:94:1e:1b:8e:fa:2f:47:e7:f3:e6:31:c9:
         65:d1:07:54:80:3f:a5:cc:da:dd:5f:02:cf:13:0f:2b:59:9d:
         26:0d:53:c3:66:96:a0:ef:81:92:49:e1:d9:7e:44:ae:01:68:
         53:d8:2e:2d:09:6f:9a:85:5f:56:a9:56:01:92:52:7a:b3:4b:
         3e:11:97:75:cb:41:64:a6:6f:1d:61:ec:fd:e0:6d:66:e2:42:
         97:7b:87:8f:11:76:f8:41:6f:22:cd:31:f0:dc:f7:d1:54:d0:
         bf:d3:ed:b6:fc:ee:a0:bc:a3:93:8c:d8:4d:15:b5:64:f0:3d:
         98:4f:34:bf:41:36:71:24:64:6e:a4:38:1d:53:b1:77:4e:bb:
         83:1d:e9:98:78:c0:24:88:ca:a2:f2:1d:d2:94:0b:12:64:41:
         d7:6c:54:22:71:93:4f:35:fd:34:04:95:4e:05:1a:58:27:84:
         8d:51:49:0c:72:8d:79:4f:ea:7c:cd:ad:a6:77:29:37:3f:c5:
         3b:f5:57:b2:42:db:0d:28:2f:f8:c0:85:10:0a:03:a6:84:17:
         ca:91:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:45 2026 by rpki-client