Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File:                     nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier:          Qb1NY3CfZwoTxKBoUMZcyIU6BMMPyCf8Q+gBFWGHvaU=
Subject key identifier:   E0:60:21:69:61:36:62:DD:77:F4:0B:4A:5D:98:BF:3D:EE:27:AF:9D
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       019E1DC6FF36DF7267A6EE38C43B5889F439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 20:00:41 +0000
Manifest this update:     Tue 12 May 2026 20:00:41 +0000
Manifest next update:     Wed 13 May 2026 20:00:41 +0000
Files and hashes:         1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
                          2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: 4X4Anhp19w962SgEqZY+64R+YR7IqBKhEBraPb6zO/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c6:ff:36:df:72:67:a6:ee:38:c4:3b:58:89:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: May 12 20:00:41 2026 GMT
            Not After : May 13 20:00:41 2026 GMT
        Subject: CN=e0602169613662dd77f40b4a5d98bf3dee27af9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:0f:31:aa:75:5e:d2:be:0b:93:6c:24:a5:
                    a6:7a:ed:94:cc:7d:ac:66:be:b8:92:92:12:6e:02:
                    90:1a:f7:16:5c:14:7c:ea:76:7f:44:8d:ed:d2:c5:
                    f9:bf:41:1f:50:a9:93:38:09:10:2d:65:b2:89:fc:
                    83:09:8c:57:f9:b9:e3:a8:2a:53:ed:72:a3:cc:6f:
                    35:0f:ca:39:da:ac:47:0f:b6:a2:70:1a:01:5f:16:
                    3a:cd:f4:cf:78:60:d2:0d:9f:cd:91:c5:94:29:de:
                    a3:78:53:34:17:21:10:db:bf:6c:23:48:a9:cd:56:
                    9d:94:b8:13:d9:33:9d:51:09:ae:8d:1c:67:6f:dc:
                    2d:bd:78:0f:bc:85:ca:96:dc:92:93:4b:4c:80:41:
                    87:82:61:ee:10:ff:a1:23:4e:e8:bc:ff:f7:e2:02:
                    e5:4b:42:0e:02:55:5b:19:a3:bf:58:04:5f:9f:34:
                    b3:d3:1d:5e:8b:0b:a1:e5:c6:58:cd:30:a8:a6:38:
                    27:96:cf:41:72:a0:c2:df:36:bd:01:80:fd:f3:3e:
                    56:53:18:c9:96:47:b4:f1:5c:0c:aa:f3:b9:21:c2:
                    03:e3:d1:f7:9f:4a:69:38:b8:87:82:02:f2:2a:12:
                    ee:a0:38:ec:db:0c:46:a8:e0:7c:91:b1:3e:cf:3f:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:21:69:61:36:62:DD:77:F4:0B:4A:5D:98:BF:3D:EE:27:AF:9D
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:cb:74:d8:84:e0:c1:4d:70:3e:90:7b:2a:d4:b3:a1:a6:
         ce:4b:e0:e0:6a:73:22:5c:38:12:57:7c:c2:a6:bc:d9:67:e7:
         b9:52:bc:1b:12:bb:9e:85:ef:17:31:fa:e7:9d:e4:88:d6:36:
         0f:6b:11:00:a0:03:69:81:3e:aa:5b:d6:6f:c8:08:55:5e:33:
         57:44:2c:3d:1e:6a:3a:e9:e5:87:d8:e5:6c:4a:3d:55:a0:07:
         44:a9:8a:9a:bc:ae:de:1b:bd:89:fd:77:49:f2:6e:e6:ea:a0:
         f2:0a:eb:28:4b:51:69:6a:9f:b2:a1:f9:dc:c8:a9:af:3a:87:
         fe:a1:9a:91:a8:85:4c:00:fe:01:a2:cf:22:b6:38:c8:70:0b:
         6c:93:0d:a8:a2:51:fb:4b:c3:2a:70:d2:4e:b9:2d:59:1f:b4:
         2a:f5:69:5b:9a:67:f2:e0:c7:98:45:37:eb:dc:b4:46:9c:8a:
         3b:67:93:ce:61:72:f9:30:e3:9f:72:73:05:e8:31:63:51:d7:
         19:39:b4:8b:65:ed:17:59:86:1b:af:5e:b6:23:2c:87:d6:6a:
         df:b8:66:3c:71:a8:39:c9:50:f2:81:09:5e:63:ba:88:b8:75:
         86:8b:7f:30:1d:f6:a5:97:e0:26:64:5d:3a:e1:27:e3:07:53:
         4f:f5:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:49 2026 by rpki-client