Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          7SO9O9hItFoZ65AuhyJfBL6PjG5dJoeumo0oKUI964E=
Subject key identifier:   70:9D:44:BC:43:62:39:2F:7C:DB:C5:21:C1:8F:02:0E:23:50:58:5E
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       019E1EA32DA251639839E6032D5B94701F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          05FF
Signing time:             Wed 13 May 2026 00:01:10 +0000
Manifest this update:     Wed 13 May 2026 00:01:10 +0000
Manifest next update:     Thu 14 May 2026 00:01:10 +0000
Files and hashes:         1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
                          2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: vX/7E1eLw1+E8BkTt0qFAYOAsinpKxKN4Lb6zBzjIz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:2d:a2:51:63:98:39:e6:03:2d:5b:94:70:1f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: May 13 00:01:10 2026 GMT
            Not After : May 14 00:01:10 2026 GMT
        Subject: CN=709d44bc4362392f7cdbc521c18f020e2350585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:fe:26:22:90:94:ed:7a:5f:73:13:9e:06:
                    e2:1c:79:9d:20:92:fd:55:ec:5b:17:cf:05:e8:a7:
                    97:6a:4e:37:52:80:9c:d8:ae:f5:a4:6b:9f:40:ff:
                    60:13:26:67:65:56:63:d8:98:2c:d7:49:78:3b:09:
                    92:26:d0:63:47:ad:03:ed:b6:34:56:c3:5d:a4:c7:
                    13:fa:0a:24:be:db:85:84:7a:01:a8:f6:5b:43:5f:
                    05:e4:d6:3e:9c:dc:55:fc:61:ac:0b:9f:0a:79:51:
                    af:d3:ec:a9:72:89:e7:0f:62:40:4f:ee:1a:b3:29:
                    66:76:cd:0d:99:b9:f2:ba:b2:cd:ec:db:72:98:fa:
                    7a:23:bd:e5:97:c2:6c:94:21:04:bf:5f:97:a0:c0:
                    a2:52:02:ca:70:5c:14:08:64:ab:d6:c4:a9:c0:7e:
                    58:39:ab:66:d1:cd:ef:08:a3:71:4a:94:a8:68:71:
                    bf:1f:cc:35:6d:ca:b7:fa:ed:fe:a2:b9:3d:7d:cc:
                    79:51:a1:ea:9a:87:01:00:88:f7:a3:63:a1:40:43:
                    6d:1a:c6:e0:19:e5:8a:d1:88:3e:d5:6d:0e:41:24:
                    2c:08:37:94:fe:16:4c:80:84:ae:b8:36:d7:d5:cc:
                    3a:72:9a:11:65:36:c8:1a:64:f2:42:0d:31:bc:5e:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9D:44:BC:43:62:39:2F:7C:DB:C5:21:C1:8F:02:0E:23:50:58:5E
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:a3:d9:3a:f4:16:d2:eb:9f:6b:67:bb:c7:a0:e6:b0:67:
         38:42:50:50:99:55:38:a5:d7:a2:9c:31:26:62:4f:9c:46:fe:
         dd:11:ab:39:8d:8c:e2:16:57:1e:1f:b8:ac:7f:90:11:6b:d0:
         41:5e:3d:97:a5:9d:51:ef:24:b1:47:07:9e:4f:80:90:3d:8f:
         bc:15:c8:18:b2:67:71:47:60:93:26:01:bf:b0:61:19:41:85:
         87:72:2f:e9:a8:4b:da:43:cc:56:d3:47:0a:6a:3e:20:14:5f:
         20:78:9c:31:9a:b0:ab:8e:82:c6:e2:8d:36:b7:93:f2:b3:33:
         f3:c9:a6:ae:c4:ae:03:0b:20:6c:10:d7:43:23:d4:bc:44:b8:
         0f:ba:f4:c0:f9:85:5c:e8:b4:6d:5b:b1:cf:51:e4:ce:9a:59:
         19:29:d4:ac:fe:e8:bd:e6:e9:1a:d9:74:ba:ee:58:1a:37:8a:
         30:d8:5a:19:43:f2:ec:93:d1:23:52:87:f9:9e:54:ab:14:c1:
         ec:a4:41:1e:68:56:fe:01:45:2e:21:4b:5d:f5:7d:85:c8:83:
         e8:dd:34:2b:67:09:33:59:5d:67:6b:ac:ef:54:07:4c:24:06:
         23:fd:79:2e:8a:30:4d:51:98:08:34:cd:17:19:18:ce:b2:b0:
         d6:52:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:11 2026 by rpki-client