Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          g0ZacExUuzUZkjzXM2Blcip/0eVq5uxEVzWmndFaDQw=
Subject key identifier:   F0:CD:3B:08:B4:FB:1E:99:1A:92:3F:51:EB:0C:B1:C0:1E:16:17:C7
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       019E1D9091BCC0742B90ACF91124FC46CAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          0927
Signing time:             Tue 12 May 2026 19:01:14 +0000
Manifest this update:     Tue 12 May 2026 19:01:14 +0000
Manifest next update:     Wed 13 May 2026 19:01:14 +0000
Files and hashes:         1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: L9sUdFMg0V+0MyByoJrSw4DbSvRqHqVxpssNQEz2wQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:91:bc:c0:74:2b:90:ac:f9:11:24:fc:46:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: May 12 19:01:14 2026 GMT
            Not After : May 13 19:01:14 2026 GMT
        Subject: CN=f0cd3b08b4fb1e991a923f51eb0cb1c01e1617c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:4a:90:96:b2:67:26:ec:1b:59:8a:47:dd:
                    95:f2:4e:2f:08:3e:b9:65:91:23:47:46:92:3a:62:
                    fb:04:27:2a:09:28:a0:76:d0:da:26:c7:4e:37:22:
                    92:25:25:bc:87:41:c6:5e:38:b8:61:b5:56:20:73:
                    55:04:51:62:f9:30:b5:ea:26:41:2a:20:73:67:6d:
                    00:d9:4d:c8:b3:a0:fd:ad:eb:23:e6:06:b1:a0:38:
                    0d:5c:7e:e1:a1:77:60:8d:71:0b:31:04:2f:51:b6:
                    73:8f:fe:fc:bf:82:e2:74:d8:4e:87:73:f1:58:52:
                    c0:b3:9a:37:dd:3e:c3:7c:41:7c:72:b6:11:86:75:
                    b6:f2:63:03:90:c1:45:a3:55:55:5b:c8:b7:3d:4d:
                    37:e3:b3:d2:9e:7d:71:df:1b:d6:98:f2:56:4c:30:
                    7d:d0:7f:08:04:03:00:af:01:60:ff:5e:8f:07:75:
                    e9:45:fb:a8:80:5e:81:26:ed:09:2a:6e:37:28:11:
                    11:1a:3a:29:ec:52:0c:16:d1:8c:af:03:ae:69:e0:
                    50:17:4f:0f:dd:99:8f:ef:cb:32:12:1d:ba:03:cd:
                    7f:e1:bf:db:d3:ba:43:f3:c6:55:ed:23:c3:47:50:
                    c1:b0:74:23:8f:2f:11:1a:43:65:fc:7e:0b:c2:67:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:3B:08:B4:FB:1E:99:1A:92:3F:51:EB:0C:B1:C0:1E:16:17:C7
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:22:f8:93:75:0e:f0:db:4d:18:5e:30:b5:2e:96:0d:1a:
         4d:69:d6:3f:47:f3:da:ef:74:85:eb:98:48:4a:db:07:b8:0e:
         a2:d7:ef:83:a0:a3:09:d5:ac:d1:53:1e:80:a0:eb:d9:c9:5a:
         b9:b0:b5:d0:f8:01:5a:7a:b0:ec:2c:5e:14:39:69:d5:6a:82:
         bd:b2:35:e0:8c:43:50:63:7a:09:ec:7a:21:b3:42:32:c3:5f:
         d7:b6:32:10:b1:4b:5d:14:f7:99:14:f5:7a:e6:90:4b:3d:5a:
         e8:44:31:d7:3c:ea:ee:a4:89:5b:58:56:fa:27:ba:db:30:c2:
         31:73:e7:fc:84:ee:d7:d0:f7:f3:cc:19:73:4f:f0:10:25:ab:
         84:70:7b:e6:36:c2:53:6a:df:ef:0a:7a:b1:a7:e7:d8:12:5a:
         24:63:b1:20:3c:28:2d:a8:41:6e:f3:7e:9a:69:16:d3:ba:00:
         97:d6:20:0c:8f:ee:05:cb:52:97:31:d2:e7:28:ff:39:49:cf:
         f1:70:2c:82:c1:e6:1a:af:90:53:58:3d:07:08:10:e8:46:94:
         ed:89:77:be:32:4d:45:d1:ca:d8:3b:cf:20:ab:04:cf:c8:58:
         9a:50:06:a9:8c:d8:33:3e:9b:1b:fd:59:a3:ed:fc:f4:9f:af:
         5e:f1:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:55 2026 by rpki-client