Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File:                     NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier:          eyZ0268wOkjmfplk6X8N2N6bfo7VtpL4BE1zu1UY1yM=
Subject key identifier:   E1:F7:78:05:A6:7A:35:DD:3C:6E:C3:A5:2D:3E:CA:F6:A5:54:F7:4B
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer:       /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial:       019E1EDA2954262A6B6E115C71AA85618022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number:          08D9
Signing time:             Wed 13 May 2026 01:01:14 +0000
Manifest this update:     Wed 13 May 2026 01:01:14 +0000
Manifest next update:     Thu 14 May 2026 01:01:14 +0000
Files and hashes:         1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
                          2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: bi+qJ3odjIwXsLOirnyGmXlv6HJCyN6b/NXZb1xB42I=)
                          3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
                          4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:29:54:26:2a:6b:6e:11:5c:71:aa:85:61:80:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
        Validity
            Not Before: May 13 01:01:14 2026 GMT
            Not After : May 14 01:01:14 2026 GMT
        Subject: CN=e1f77805a67a35dd3c6ec3a52d3ecaf6a554f74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:03:46:97:31:e1:36:e4:e7:e8:d1:5a:53:
                    3e:e2:6f:fe:0b:30:d7:c8:20:ce:f2:67:80:b6:64:
                    e7:a5:2e:d2:35:08:99:37:93:f4:8e:d3:1d:87:35:
                    70:da:86:3b:13:e8:a6:a5:89:55:f6:76:d0:56:b0:
                    b3:34:de:f1:f8:c4:d6:61:91:da:52:7a:d7:c4:8b:
                    e6:ad:43:a0:28:6a:27:c9:c7:51:fd:97:05:2b:17:
                    65:11:46:43:90:75:55:85:b0:ac:da:43:33:00:42:
                    f1:3f:0b:cc:1b:cb:1e:98:7b:4d:20:1a:50:7f:81:
                    da:2c:66:d8:c0:49:48:93:e9:36:c5:43:b6:41:ba:
                    87:9f:25:8f:63:47:29:78:48:6a:d6:c4:24:8d:e1:
                    4a:ee:f7:e5:67:2a:75:c1:e6:ec:e3:b4:db:0c:56:
                    e1:09:38:b7:b0:df:a1:b6:e3:69:d6:ec:54:60:ae:
                    65:9a:4e:d3:33:59:07:b0:a3:3f:5d:22:6d:23:2b:
                    d5:f0:39:2e:33:69:30:6a:c0:e8:5a:00:98:92:65:
                    c7:5b:cf:eb:72:23:79:e8:78:8f:d1:29:d0:fd:53:
                    73:8b:a2:03:19:64:7d:1d:70:5a:38:a8:9c:eb:73:
                    4e:59:50:21:5a:33:21:01:83:41:1e:b9:1a:6f:30:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:78:05:A6:7A:35:DD:3C:6E:C3:A5:2D:3E:CA:F6:A5:54:F7:4B
            X509v3 Authority Key Identifier:
                keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:27:be:54:94:b3:7f:7a:8d:67:02:ba:35:ed:43:40:6f:
         58:72:ab:7e:0c:af:a5:7e:d6:e7:a0:95:f5:19:df:e4:25:51:
         e6:f7:9c:7e:e6:18:c8:2f:72:59:93:7a:37:08:f4:ad:09:71:
         54:fc:bb:4e:7f:74:ea:6c:72:cc:74:a6:53:0d:47:a8:f1:78:
         08:64:89:56:e3:f0:7d:f7:04:10:72:8e:7f:aa:8d:5d:72:22:
         8d:da:94:f3:31:5d:eb:98:4b:13:bf:2e:26:97:cf:35:d6:1c:
         bf:ae:2e:56:cb:f5:f6:d4:7d:d3:06:61:db:a9:9f:50:f2:30:
         f5:1b:55:1a:9a:e9:d9:4b:2e:34:6d:fe:87:36:bd:ba:c0:70:
         51:51:3c:82:4b:1f:37:b0:53:c6:e9:70:39:5e:cd:59:2d:fd:
         98:fd:d3:d8:ef:83:a3:00:47:62:80:4b:d9:fc:56:52:19:e0:
         3b:2a:64:37:12:3f:a7:fe:12:50:ad:2c:28:13:16:dd:89:ec:
         6e:3e:49:11:c0:db:53:b1:6b:7a:e0:c8:d6:fe:bc:17:b0:68:
         c2:72:9a:d5:c7:12:c4:bd:e2:4a:05:70:15:40:3c:0c:38:0e:
         87:c2:a4:4e:ed:ce:4a:84:67:52:5c:41:ee:a0:bd:9b:dd:e0:
         36:08:65:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2ilUJiprbhFccaqFYYAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjYwNTEzMDEwMTE0WhcNMjYwNTE0MDEwMTE0WjAzMTEwLwYDVQQD
EyhlMWY3NzgwNWE2N2EzNWRkM2M2ZWMzYTUyZDNlY2FmNmE1NTRmNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIDRpcx4Tbk5+jRWlM+4m/+CzDX
yCDO8meAtmTnpS7SNQiZN5P0jtMdhzVw2oY7E+impYlV9nbQVrCzNN7x+MTWYZHa
UnrXxIvmrUOgKGonycdR/ZcFKxdlEUZDkHVVhbCs2kMzAELxPwvMG8semHtNIBpQ
f4HaLGbYwElIk+k2xUO2QbqHnyWPY0cpeEhq1sQkjeFK7vflZyp1webs47TbDFbh
CTi3sN+htuNp1uxUYK5lmk7TM1kHsKM/XSJtIyvV8DkuM2kwasDoWgCYkmXHW8/r
ciN56HiP0SnQ/VNzi6IDGWR9HXBaOKic63NOWVAhWjMhAYNBHrkabzBENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH3eAWmejXdPG7DpS0+yvalVPdLMB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7gnvlSU
s396jWcCujXtQ0BvWHKrfgyvpX7W56CV9Rnf5CVR5vecfuYYyC9yWZN6Nwj0rQlx
VPy7Tn906mxyzHSmUw1HqPF4CGSJVuPwffcEEHKOf6qNXXIijdqU8zFd65hLE78u
JpfPNdYcv64uVsv19tR90wZh26mfUPIw9RtVGprp2UsuNG3+hza9usBwUVE8gksf
N7BTxulwOV7NWS39mP3T2O+DowBHYoBL2fxWUhngOypkNxI/p/4SUK0sKBMW3Yns
bj5JEcDbU7FreuDI1v68F7BownKa1ccSxL3iSgVwFUA8DDgOh8KkTu3OSoRnUlxB
7qC9m93gNghl9A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:21 2026 by rpki-client