Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File:                     NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier:          4AaMHq8zkvMYxLzejoeKmqKxAsdfhRZhbevNfropmrs=
Subject key identifier:   60:28:A6:8C:AA:57:93:8E:7D:12:DC:3C:DB:E6:F4:B5:22:5C:78:57
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer:       /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial:       019E1ED9EDE823B60C23C463185B21919384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number:          1406
Signing time:             Wed 13 May 2026 01:00:59 +0000
Manifest this update:     Wed 13 May 2026 01:00:59 +0000
Manifest next update:     Thu 14 May 2026 01:00:59 +0000
Files and hashes:         1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: UT5QxzbNkL1bJinsM97dH8y3bLRURYVGT3/wyObvhXA=)
                          2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ed:e8:23:b6:0c:23:c4:63:18:5b:21:91:93:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
        Validity
            Not Before: May 13 01:00:59 2026 GMT
            Not After : May 14 01:00:59 2026 GMT
        Subject: CN=6028a68caa57938e7d12dc3cdbe6f4b5225c7857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:2c:03:44:35:21:75:c0:51:41:39:1b:64:
                    02:ec:44:6a:dc:fb:1b:02:fb:5f:d7:bd:5b:18:08:
                    c1:2c:1e:5f:24:ff:34:8f:4f:13:c0:40:ee:6d:f8:
                    ad:92:76:57:f1:18:5f:07:7f:cd:7d:b4:a6:27:c2:
                    1f:94:cf:ec:df:2e:ca:c6:fa:7a:71:17:23:4a:45:
                    e2:88:2c:a8:83:b5:8c:78:21:7b:b9:4f:47:ad:71:
                    88:2a:fc:f2:44:a8:96:48:04:ad:af:9b:b8:32:af:
                    73:0f:0c:9c:0f:a6:fe:4e:bb:44:a2:74:36:a2:bb:
                    e2:92:20:ea:8a:05:9a:da:49:ee:01:60:82:9c:4e:
                    e6:b3:74:32:45:9b:c2:45:a0:ba:a8:99:97:8d:71:
                    bf:61:d0:0f:8c:a1:cb:59:35:3d:a7:99:14:49:a4:
                    69:59:9a:e7:db:7b:b9:4f:30:c7:fc:0d:5f:2b:e6:
                    41:08:ce:a0:0f:11:71:e6:36:8b:c3:b7:16:c7:9f:
                    e5:89:8f:06:ea:6f:e5:7d:04:d0:94:ac:74:d8:49:
                    c6:ea:47:a7:9e:82:d1:2f:c8:39:64:65:d6:1e:48:
                    4d:4d:e9:77:78:a5:52:38:c8:ef:3a:63:8a:eb:7f:
                    14:65:e2:06:2b:c1:f5:78:51:29:38:65:0a:8e:7a:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:A6:8C:AA:57:93:8E:7D:12:DC:3C:DB:E6:F4:B5:22:5C:78:57
            X509v3 Authority Key Identifier:
                keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bb:2d:97:2f:52:f3:bb:30:21:49:78:f0:59:39:39:06:9d:
         0a:83:4e:4c:07:92:e0:69:1a:d1:60:80:9b:45:88:cf:d4:dc:
         df:10:86:4a:bd:97:24:e3:f7:10:c2:02:21:71:96:72:e4:8b:
         5a:85:62:c5:f4:5f:72:cb:12:cf:1f:89:33:ee:6a:76:e2:8d:
         fb:c9:bb:fc:98:2f:84:d0:fd:cb:d5:25:c6:c0:b1:c0:c0:88:
         e9:dc:9e:30:0b:e0:8c:31:82:80:4f:e5:56:e3:3b:d5:b5:6a:
         8b:11:98:36:78:88:56:5c:ce:23:04:90:63:3d:89:b9:bc:c4:
         c3:34:0a:30:bd:3a:40:c7:ab:93:34:9a:23:5a:ec:af:d3:a1:
         34:ff:53:ff:a0:bc:88:f0:be:29:b2:35:57:4a:8a:a7:50:22:
         d7:d0:eb:ed:bd:28:85:1a:06:0e:da:10:01:07:d6:99:3c:20:
         b9:76:4a:b1:83:f7:7f:2f:e2:a9:2e:06:d6:87:a9:ef:64:aa:
         65:d2:03:c2:55:b1:44:e2:ff:8d:af:77:18:3e:ca:77:a2:56:
         ad:4d:1e:ef:85:76:29:7d:bc:67:10:2e:41:94:17:59:d0:ff:
         4a:6d:3d:18:9a:67:7a:be:4a:34:d8:e8:1a:77:03:e2:7d:c0:
         53:ff:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:59 2026 by rpki-client