Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          Fj3SrEdjisGm/+exEDzHzHxcNu6b/YniBu0L6MEVQ58=
Subject key identifier:   06:1B:0E:B8:7F:D2:A5:44:5F:C0:37:14:84:D8:EA:F9:8C:92:6C:B0
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       019E1E354AD8D1BBC4E440B44A3965989A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          07B0
Signing time:             Tue 12 May 2026 22:01:09 +0000
Manifest this update:     Tue 12 May 2026 22:01:09 +0000
Manifest next update:     Wed 13 May 2026 22:01:09 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: nLZloaW46EjQg53Tg9FraDVa0T78X8UieDvhbvpp6qw=)
                          2: G2J1mbO5SfOgCeh5sYzB_zBsUlY.roa (hash: yJMiIGusOoKDUJh8IDxxzE/Bfvy2Ug2/08WIutRLszo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:4a:d8:d1:bb:c4:e4:40:b4:4a:39:65:98:9a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: May 12 22:01:09 2026 GMT
            Not After : May 13 22:01:09 2026 GMT
        Subject: CN=061b0eb87fd2a5445fc0371484d8eaf98c926cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:0a:6a:2d:fc:e8:83:ff:78:7c:b7:05:72:
                    1f:4a:55:a9:2d:0a:dc:46:c2:1e:e5:3c:17:dc:a2:
                    6b:70:0e:df:8e:aa:fa:50:33:4a:2d:f1:f9:67:67:
                    c4:28:73:cd:06:bb:92:62:ee:14:5d:5e:df:75:f6:
                    10:0d:7f:26:03:ce:2b:5e:9e:12:89:9d:31:37:38:
                    79:1e:49:59:10:f3:fd:86:b6:67:f2:a2:94:cd:90:
                    38:d7:3a:22:d2:bf:6c:3e:67:ec:4b:9b:96:24:cc:
                    90:d0:e4:d7:49:00:3f:97:d7:a1:83:2a:b7:f4:fc:
                    b8:97:e8:d0:a9:bb:3b:67:78:a2:22:38:e7:82:89:
                    db:c7:2a:ef:02:d2:c2:59:d2:d0:05:ef:8b:cc:4e:
                    de:69:ea:b0:1a:38:44:ca:e4:07:bd:5e:d9:04:13:
                    65:a7:c9:4e:99:bc:59:99:00:4c:9c:e5:98:15:5a:
                    cd:ba:12:ad:92:cc:9a:9b:3e:a9:44:a0:0f:aa:2d:
                    ce:9e:01:77:03:c9:e2:fa:ea:e3:f1:28:d6:67:00:
                    51:23:c6:81:51:07:81:4d:56:c1:7c:f0:b8:0e:a4:
                    d0:0e:51:03:1c:fc:73:09:19:18:5d:9c:c1:68:ab:
                    92:89:c8:b3:66:10:c6:d6:f1:49:5c:ae:f0:fc:eb:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:0E:B8:7F:D2:A5:44:5F:C0:37:14:84:D8:EA:F9:8C:92:6C:B0
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:91:11:08:ef:bb:74:15:ba:ae:f9:af:8b:42:e7:a6:3c:bd:
         b7:dd:68:2b:7b:ec:45:81:57:7e:8e:ab:03:b1:30:40:a2:96:
         bf:69:c1:ed:22:8f:53:4f:49:7e:7c:06:5a:a9:7f:98:43:96:
         a3:1f:c2:94:75:bf:57:65:3b:68:ca:b2:a3:50:72:8d:2f:c5:
         dc:97:f9:98:c9:9f:0b:6a:5a:94:ff:68:06:fb:fe:82:d8:1f:
         08:be:ad:e5:d7:29:41:ba:e5:68:04:b0:2e:ae:37:1a:19:9b:
         08:f1:6e:ff:9d:81:98:1e:15:0a:9b:b5:19:c8:f2:b0:16:d5:
         20:bf:ff:43:dc:6f:e8:5c:ab:db:30:ea:a8:2a:a0:79:6e:88:
         76:4e:f5:a7:e4:ad:51:98:18:3e:dc:ca:fb:c0:f6:74:8d:c5:
         89:aa:a2:80:a0:ea:3d:96:c4:ad:c6:11:7a:ee:fe:d5:fa:72:
         4d:e2:7c:b1:ae:05:a7:e4:5c:5b:0c:ac:9d:5d:97:91:00:2b:
         70:fd:e7:70:ea:11:5c:05:b7:ac:40:f6:7a:9d:04:fa:69:f1:
         4c:39:69:68:6a:76:58:74:9d:d1:cd:91:7f:c6:e0:53:7c:f0:
         c9:60:72:91:4a:fe:74:f8:00:e0:00:e5:16:60:49:8d:a0:6f:
         b1:76:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:15 2026 by rpki-client