Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
File:                     NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft (raw, json)
Hash identifier:          Z5paRMXfTGBLHpfaoesldm7iPCo6BI7YL2f+SFChvx0=
Subject key identifier:   02:5A:B8:BA:F7:A0:29:EC:C8:36:8F:0D:07:38:97:97:1B:77:CC:DF
Authority key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Certificate issuer:       /CN=36f6ee6d32790e498950d63877b0321232a7f833
Certificate serial:       019E1C7D9C3F98A28F09F4D16854A5BE63AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
Manifest number:          48
Signing time:             Tue 12 May 2026 14:00:54 +0000
Manifest this update:     Tue 12 May 2026 14:00:54 +0000
Manifest next update:     Wed 13 May 2026 14:00:54 +0000
Files and hashes:         1: NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl (hash: RnFGUwEDfwtJjx81SgJQCYM/Ysxc3Jb6RD7E7nvCTRU=)
                          2: yBl-iSaUfI7bcxIhJeIgiImqRKo.roa (hash: 9dLNN0+YEJaEEsS+kzacLskIpN4LaeoKWqYx0OkBv1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:9c:3f:98:a2:8f:09:f4:d1:68:54:a5:be:63:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f6ee6d32790e498950d63877b0321232a7f833
        Validity
            Not Before: May 12 14:00:54 2026 GMT
            Not After : May 13 14:00:54 2026 GMT
        Subject: CN=025ab8baf7a029ecc8368f0d073897971b77ccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:6c:15:88:32:00:36:ab:dd:d7:60:9f:f2:
                    51:ad:86:fa:c6:36:07:a2:2f:87:2c:09:e8:40:91:
                    ff:0d:ed:43:43:4e:96:65:9a:a5:17:15:c9:b1:38:
                    bf:21:c2:b0:42:86:97:80:29:10:c7:10:62:86:b7:
                    35:c8:95:4f:e9:b0:5f:b9:a8:4b:45:42:15:03:e9:
                    1b:6c:b5:b3:f9:55:87:0c:b2:fa:85:c0:e0:8a:fb:
                    89:d8:a6:98:4f:d9:75:e6:fd:56:f5:52:f9:14:bf:
                    15:07:07:f1:5b:0c:eb:a9:c1:b3:56:bf:c7:b6:62:
                    a8:1b:ba:c9:bc:04:24:0b:57:52:21:ee:d3:cc:d2:
                    66:28:8b:31:75:b2:64:a2:0b:ef:6a:50:36:06:58:
                    68:19:8f:ec:68:79:4e:d9:7d:20:e7:96:73:3c:58:
                    ab:cc:cf:36:99:3b:b7:77:99:44:af:c9:20:ff:ce:
                    e0:24:f8:ad:0c:bf:af:00:bd:8e:c7:89:cf:76:af:
                    48:08:2a:19:b4:1f:ee:e2:8c:ec:5b:07:f1:11:ce:
                    2a:6f:7d:28:be:eb:01:3e:96:e6:b6:89:93:e7:37:
                    73:5f:93:de:e7:b6:c2:2e:31:92:a1:fb:16:2f:3d:
                    e8:82:d8:20:05:48:89:19:57:98:7e:f0:1a:a0:8a:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:B8:BA:F7:A0:29:EC:C8:36:8F:0D:07:38:97:97:1B:77:CC:DF
            X509v3 Authority Key Identifier:
                keyid:36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:33:54:f9:74:fc:3c:d8:55:13:66:68:1d:71:be:4c:03:
         42:ef:d5:20:17:3c:ac:d3:a4:9b:20:6e:dc:cc:74:d6:ed:2d:
         1c:33:32:4f:b7:5f:6f:e6:70:f9:92:ae:6e:a2:54:86:95:1c:
         7a:08:70:33:29:a5:cd:41:de:47:6a:37:f6:84:bc:72:b6:35:
         bf:0f:e0:24:68:62:0c:0b:9f:87:49:6d:40:3e:6e:e4:cb:e7:
         4f:fd:1c:da:d2:23:37:68:64:bd:ba:9d:12:ff:af:66:0a:7c:
         d9:de:46:66:1a:f5:20:bb:2a:0f:67:5b:e7:79:4b:63:59:e7:
         8b:b1:92:ca:4b:63:ef:f0:57:4b:88:18:ca:83:7f:b8:b2:e2:
         bd:31:0e:01:85:89:89:c3:77:9d:9d:23:47:bd:ee:0c:47:04:
         0d:bc:48:21:cb:22:f7:8b:ae:9c:50:d3:79:41:d2:08:00:6a:
         2c:4e:4d:51:a5:f0:fc:b5:88:f4:66:09:ac:d9:63:24:77:bf:
         f1:10:10:7f:eb:a5:67:96:c8:3e:db:bf:ff:f5:35:dc:62:c4:
         2d:f2:1c:e8:ce:07:2a:be:d0:10:68:7d:ac:48:b9:f3:b8:39:
         02:7e:1e:31:d3:b4:b2:e6:8b:53:0f:dc:92:1e:ac:01:48:ea:
         26:7c:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:06 2026 by rpki-client