Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          FUY6AlCIDCk8VX5wcl1Cj2y/YTOSseUzG4kgLdKcn9M=
Subject key identifier:   9B:E8:F3:FA:F0:A9:F8:CC:B5:01:5F:74:F7:11:E7:8D:2E:5E:52:C9
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       019E1D591728EF316FE4611405D2D7012B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          08B1
Signing time:             Tue 12 May 2026 18:00:38 +0000
Manifest this update:     Tue 12 May 2026 18:00:38 +0000
Manifest next update:     Wed 13 May 2026 18:00:38 +0000
Files and hashes:         1: Ai8Bugd7lzzruNa57KT-lV3wYm8.asa (hash: BwsAqkJnuFBXHrVkW12Nt079T8kms4s4hbMPa9Sf/0I=)
                          2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: fJhZ1KQQ5o8hIGReXJiN6AJbX+2XAQ+WpdQi9OElaPE=)
                          3: ZCvgjfcdUvB5emDgJUqlCNrfN4U.roa (hash: 9CWeQ56fOiBQ0iE9QR8Rty2enOxfpS87kCa0J2lyyi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:17:28:ef:31:6f:e4:61:14:05:d2:d7:01:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: May 12 18:00:38 2026 GMT
            Not After : May 13 18:00:38 2026 GMT
        Subject: CN=9be8f3faf0a9f8ccb5015f74f711e78d2e5e52c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:69:25:2f:e1:87:eb:6d:45:53:c0:d2:61:
                    e0:df:91:48:c1:73:c3:87:1d:26:8c:d9:0d:54:90:
                    c0:25:51:80:48:8f:c2:f8:0d:b4:3a:e5:55:25:78:
                    73:27:71:8f:a0:0a:72:00:2b:03:da:e0:4c:45:67:
                    47:46:af:bd:0d:d9:66:40:d8:28:2a:72:54:63:90:
                    fe:d2:ee:33:ac:32:f6:78:47:c1:b8:fe:8d:2d:9c:
                    8d:85:ca:4d:6a:e4:7f:d5:92:63:46:eb:17:3f:a2:
                    e1:e4:d9:0d:00:a5:e1:ef:31:30:43:93:ae:87:44:
                    c6:fb:46:ee:fe:3d:1c:7f:c8:b6:b4:d9:83:68:b3:
                    98:82:9e:4e:0c:2f:b9:52:a8:db:74:e3:7e:dd:aa:
                    31:a3:05:7e:97:d1:29:92:11:4a:83:77:6c:24:3d:
                    5b:3d:22:25:56:3f:c4:eb:c7:e7:81:30:46:68:5b:
                    eb:ea:79:0e:0e:31:dd:ff:9a:de:70:1b:b8:dd:5a:
                    0b:be:5c:0f:30:be:bd:3b:5d:f1:d5:41:48:71:8f:
                    e4:51:7b:57:a3:cc:80:2a:ca:65:e1:04:6c:3a:2f:
                    83:de:8b:53:4e:fa:85:d0:82:2a:1d:c3:57:f2:ca:
                    4c:89:2c:d4:42:9d:13:7b:ff:44:44:38:94:5f:0c:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:F3:FA:F0:A9:F8:CC:B5:01:5F:74:F7:11:E7:8D:2E:5E:52:C9
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:68:d0:ec:e4:ca:17:04:77:c8:97:99:5b:9c:c2:d8:43:f7:
         40:7c:90:51:ba:03:59:6e:ee:fc:c7:32:fe:3f:aa:f8:92:d2:
         0a:2b:0b:ed:be:ce:d6:08:70:86:ce:c9:6b:b0:51:5c:26:91:
         da:da:d4:bc:76:f7:c4:ab:c6:33:dd:c2:17:91:f2:70:0d:d1:
         ab:ab:25:bc:be:9b:7f:41:fe:3c:e6:76:99:c4:0a:a2:89:32:
         8e:35:2b:e7:59:7b:0f:28:b8:fe:a7:32:57:b6:3a:5b:7f:fe:
         b3:e4:66:bb:44:8d:d9:d5:46:1f:a2:c1:6c:91:56:ea:f0:8a:
         5e:5d:92:99:96:31:1c:c8:24:e6:25:3f:2e:a3:45:7b:05:b0:
         c0:2a:04:f6:31:e4:0d:29:a5:88:46:dd:f0:ab:69:c0:af:4a:
         f5:89:48:3f:2f:17:2b:f2:7c:9f:4d:1f:fd:06:af:e2:83:c4:
         5c:b8:d7:e0:d3:76:8d:ee:79:24:b6:8a:17:98:2e:47:a8:1e:
         07:b9:a3:aa:f1:1b:6d:58:2e:80:02:9a:bc:f1:7d:4f:f5:88:
         10:89:f5:8a:43:94:af:b5:33:0c:77:cc:e2:db:a8:00:f2:d0:
         2e:7b:37:e7:b4:e2:45:9d:ec:e0:1c:7d:8d:46:b0:fc:ad:04:
         6e:5b:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:24 2026 by rpki-client