Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
File:                     NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json)
Hash identifier:          mEcniQDWTY2Ex6IhQoIhRZnhptFKjqel/wdi9aBT4tE=
Subject key identifier:   39:30:48:75:CD:CA:68:48:DB:62:82:6C:B7:C7:B7:B5:5C:73:07:19
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Certificate issuer:       /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial:       019E1D907635780AF36D04440C0AC07C3C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
Manifest number:          0B42
Signing time:             Tue 12 May 2026 19:01:07 +0000
Manifest this update:     Tue 12 May 2026 19:01:07 +0000
Manifest next update:     Wed 13 May 2026 19:01:07 +0000
Files and hashes:         1: Gcvg1TOFDjpajp7odbqwFDKpBAs.roa (hash: UMt5peYripqOkorgu+LitEPMKkctWUjnSWw9aPRzg/0=)
                          2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: UGYSQ9OIgwZ4OtuvEoIF8j+9BjYeWlevFOWp6VmttOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:76:35:78:0a:f3:6d:04:44:0c:0a:c0:7c:3c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
        Validity
            Not Before: May 12 19:01:07 2026 GMT
            Not After : May 13 19:01:07 2026 GMT
        Subject: CN=39304875cdca6848db62826cb7c7b7b55c730719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:00:f1:21:5e:d5:7c:ae:e4:fd:d6:5d:00:
                    d7:84:d4:9f:07:f1:1d:a5:7b:bd:95:81:ce:1b:82:
                    ef:aa:d8:47:a3:5b:ad:5b:98:79:4f:7c:3f:d2:89:
                    2e:00:e3:96:fb:4a:06:23:3a:02:fd:eb:d3:be:c7:
                    04:86:36:69:5f:f0:0e:63:9d:3d:d8:59:5e:0f:4d:
                    95:f5:6c:99:34:17:b3:e0:49:58:0e:56:2a:d1:70:
                    ca:e0:f4:a0:db:15:66:8d:8d:e9:d3:b3:14:c0:bf:
                    03:92:46:6c:b6:54:16:64:cc:bb:ba:29:31:85:81:
                    64:72:76:19:03:a2:7e:09:f6:3a:46:d4:0d:82:60:
                    ff:74:4c:43:34:e3:6d:36:83:29:d5:ad:91:31:2f:
                    82:7e:5d:b8:eb:f6:5d:a5:e7:64:3e:28:60:6a:72:
                    ed:35:a8:31:12:2f:00:d2:77:30:fe:fb:6f:53:34:
                    fe:64:b9:37:c6:84:f0:ec:29:cf:c8:c4:e4:79:bf:
                    c8:ee:f4:52:8a:18:9b:b8:e5:d9:f1:5f:8a:3d:15:
                    27:85:23:8d:cc:6e:45:f1:39:e6:20:af:bf:45:e1:
                    d2:a2:ca:44:57:79:d3:5a:2f:50:09:44:d1:e8:bf:
                    4d:bf:02:4a:35:8a:7b:0d:cd:11:1d:d8:15:ac:6e:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:48:75:CD:CA:68:48:DB:62:82:6C:B7:C7:B7:B5:5C:73:07:19
            X509v3 Authority Key Identifier:
                keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:f4:83:a0:03:d5:e4:41:4c:bf:42:e9:b0:0c:d5:62:82:
         60:2f:00:3e:27:9d:4c:c6:80:ab:6e:8f:6b:57:e2:70:84:86:
         e0:6c:00:46:44:f8:1d:81:b3:c0:b6:6c:b3:85:d2:8b:0e:ac:
         09:4d:d5:c3:84:d5:d9:dd:f0:5c:e1:6c:0f:41:ae:a5:c3:97:
         02:5a:7f:31:68:14:6a:de:be:3e:a6:50:46:88:22:b9:3c:5f:
         54:c0:53:e7:8f:d8:d1:7f:f3:b6:3f:8d:b0:f1:b3:3e:0d:05:
         7d:52:62:23:5f:c9:4f:6d:8f:b3:d8:53:49:41:bd:24:5c:6e:
         bc:82:20:4b:1a:13:51:0a:05:d5:43:02:8a:f8:16:4a:b4:79:
         26:2c:b5:e1:b1:3a:bb:03:bf:66:30:46:6c:ea:87:d8:41:de:
         4e:94:87:27:9b:80:f2:77:ff:4d:67:dc:4f:ef:1a:63:ad:5b:
         a5:d4:dd:cd:8e:d2:9f:2f:cd:e3:b7:69:2c:10:41:b4:54:e0:
         f8:93:e0:ae:65:d9:c5:28:89:39:c4:ea:88:cb:9e:9f:75:fc:
         3a:35:2b:00:46:64:8c:b5:f7:61:57:dc:e5:fe:a5:61:21:3d:
         50:f2:e3:87:4c:c0:05:9b:82:6f:d6:68:f6:42:4a:fa:02:07:
         c6:c8:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:13 2026 by rpki-client