Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File:                     NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier:          jw7M2vL1CVPAnfHgeO6jTa6Y5OEmkC1ODM9szEcvDdQ=
Subject key identifier:   EA:FC:CB:49:8D:3A:2E:23:B9:7D:6F:C1:38:C1:45:F7:C4:8D:10:44
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer:       /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial:       019E8FEEC3921319224270440C8591DF59B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number:          06B6
Signing time:             Thu 04 Jun 2026 00:00:49 +0000
Manifest this update:     Thu 04 Jun 2026 00:00:49 +0000
Manifest next update:     Fri 05 Jun 2026 00:00:49 +0000
Files and hashes:         1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
                          2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: uAsTePsFtbdZb0UI72rb12Nse886095MwnsCROU294g=)
                          3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
                          4: r5VTzB_D--LT6ft6QpgyIKkudbM.roa (hash: 3oNMl/b2gquyHJLZema+rIR0bUrcCM54+yp4fRS/DTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:ee:c3:92:13:19:22:42:70:44:0c:85:91:df:59:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
        Validity
            Not Before: Jun  4 00:00:49 2026 GMT
            Not After : Jun  5 00:00:49 2026 GMT
        Subject: CN=eafccb498d3a2e23b97d6fc138c145f7c48d1044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:fc:83:fc:15:09:c5:63:57:c7:6e:59:da:
                    d4:24:19:79:9d:9c:2f:66:43:1b:fe:8d:3d:ad:24:
                    f0:1b:dd:ea:e5:f4:b3:a2:54:f3:d5:23:c1:f2:23:
                    e2:2b:b7:ab:29:72:84:c7:a3:e1:ea:46:4f:90:f5:
                    03:6f:08:a7:03:2e:3a:f7:93:3c:d2:a1:8c:1a:9b:
                    f8:f9:3a:95:95:32:43:b4:ae:e8:9f:c5:00:54:76:
                    b0:04:49:c3:af:45:d4:30:37:3d:39:7d:61:2c:0e:
                    12:53:7d:5e:c6:38:62:8a:af:ba:ad:ca:5a:59:c1:
                    15:e6:56:8f:a7:08:b2:7c:d3:d2:f1:0d:54:a3:de:
                    f5:95:f2:58:a5:43:f0:dd:34:ef:df:5a:bd:4a:cd:
                    79:44:0f:21:31:8a:98:0e:8d:92:9f:10:0c:08:1b:
                    23:95:e7:7e:44:6e:bb:a4:64:14:84:8b:4f:8e:48:
                    02:04:7c:91:29:94:f9:c0:57:35:07:a9:18:68:7f:
                    ce:14:85:48:80:a1:ff:a0:df:28:70:6d:d9:e8:d1:
                    55:43:9e:c6:15:95:77:3b:e5:92:c7:af:ef:5a:d3:
                    37:5f:41:09:f6:16:5e:b9:3c:f7:18:35:c0:2b:02:
                    2f:ce:e5:3b:30:90:91:cb:be:1c:fc:20:ae:ca:08:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FC:CB:49:8D:3A:2E:23:B9:7D:6F:C1:38:C1:45:F7:C4:8D:10:44
            X509v3 Authority Key Identifier:
                keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:64:49:8e:ee:f4:21:74:4d:d9:65:cb:b2:e0:b8:14:17:e8:
         66:e6:2c:59:86:a3:97:1a:a8:e1:e1:a2:78:25:fe:a3:39:d7:
         1c:6f:d8:cc:ff:1f:4e:b9:64:22:6e:98:db:a4:86:38:cf:11:
         1c:24:aa:74:81:cf:8a:20:38:62:4b:34:3b:b1:f3:83:4d:99:
         97:1d:b0:57:0a:57:b4:9b:ff:1e:d7:c4:15:cf:26:5a:7a:52:
         3c:8a:08:88:6c:c2:d8:f8:78:a6:1d:73:f3:80:2a:42:2b:32:
         6d:53:b0:4c:52:59:f5:6b:e3:0d:ec:67:77:97:60:71:47:dc:
         89:fa:ed:fd:dd:cd:8b:03:7a:1a:71:77:13:0a:bc:f4:b3:55:
         23:a5:e5:30:d3:b8:b3:55:c3:68:d2:88:47:91:79:67:13:ac:
         df:79:52:4c:17:72:56:de:bd:ba:2e:e9:dd:ee:ef:7e:be:84:
         a0:c7:67:97:de:b0:73:17:d0:17:f2:58:ae:ce:de:6a:1a:c4:
         0b:c3:4b:65:55:97:b1:b5:89:50:3a:98:9e:6d:c0:c7:7e:e6:
         38:50:25:b0:75:0d:dd:66:d6:9e:f9:e4:c8:44:05:fa:4b:d8:
         f8:da:32:68:a0:71:36:f0:f8:0f:c4:55:bd:f6:89:b2:45:3b:
         5d:20:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:15:18 2026 by rpki-client