Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File:                     nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier:          ej2KQRcoLIOJrzB4DlmN9+yxo2I3+xhfKogNl7NNLPs=
Subject key identifier:   BF:68:D1:44:47:21:E0:BB:33:B4:BD:5B:C1:27:67:B3:D5:AF:1D:B8
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer:       /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial:       019EB76A03BE2DA3A3022027F809F877205F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number:          09F7
Signing time:             Thu 11 Jun 2026 16:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:38 +0000
Files and hashes:         1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: TX+fubWSfcRMm0v1Ig2EvyqiTnoPoAsOjUctEn+2toE=)
                          2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:03:be:2d:a3:a3:02:20:27:f8:09:f8:77:20:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
        Validity
            Not Before: Jun 11 16:00:38 2026 GMT
            Not After : Jun 12 16:00:38 2026 GMT
        Subject: CN=bf68d1444721e0bb33b4bd5bc12767b3d5af1db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:70:c9:90:59:9d:f2:b9:ea:9b:c6:f1:74:
                    5e:86:f1:cd:3b:08:22:db:dc:de:87:ea:3a:11:29:
                    b2:5b:46:c9:96:d6:9f:a3:53:f0:cf:fe:3f:b7:bf:
                    2f:57:60:ae:68:57:f9:db:f2:ef:f8:da:c0:6b:4a:
                    06:ee:6e:77:56:a3:9e:92:90:b3:bf:98:aa:45:1e:
                    6c:35:1d:1c:da:66:11:e4:ba:61:ed:cf:8e:a5:8e:
                    3a:36:49:e9:56:30:ce:44:dd:12:33:52:32:ac:95:
                    53:3d:e2:fa:dc:fa:77:38:f2:cb:7c:0d:cf:44:15:
                    71:8a:49:7f:65:b7:00:82:96:ec:21:3b:7f:18:92:
                    42:4b:04:81:44:18:b8:c9:38:3c:6c:f7:e5:b6:ad:
                    2b:b3:f9:5d:fa:85:48:46:35:7b:d6:a3:e2:da:4c:
                    94:f9:22:34:3e:77:7f:af:13:c1:5d:b6:61:08:42:
                    22:2b:21:14:9c:69:5f:f9:4f:8d:07:95:e9:fb:c6:
                    92:45:d8:ef:53:11:9f:fc:09:1e:76:77:20:2f:80:
                    85:e3:74:b8:03:e0:3c:ae:3c:27:dc:c4:42:05:2d:
                    1a:28:5f:ec:59:11:33:88:83:4f:ab:02:20:c7:8f:
                    95:21:dc:cb:46:c5:59:30:b6:3c:d5:2d:8c:8f:f5:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:D1:44:47:21:E0:BB:33:B4:BD:5B:C1:27:67:B3:D5:AF:1D:B8
            X509v3 Authority Key Identifier:
                keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:e9:8e:31:16:b3:1b:07:0a:65:0e:3a:ae:f9:ea:eb:d6:
         64:62:b5:1c:8d:32:db:bc:1a:d5:b8:16:17:d1:83:8b:36:b2:
         28:3a:4c:4f:d6:34:b7:38:41:6f:7b:44:77:e1:06:a9:52:c8:
         54:a2:e8:11:12:1f:cf:54:41:47:f6:7c:c0:0b:d2:90:64:76:
         b8:0c:ff:44:4f:ca:8e:56:c8:7d:b6:a1:86:43:75:db:e3:d6:
         83:22:33:52:f1:32:29:8d:3a:d5:83:c7:11:65:9a:1e:8c:b5:
         3d:1d:80:4f:46:bd:92:7d:ac:90:e8:8f:f3:e1:cb:b6:ef:18:
         86:f7:00:b5:f5:7a:c5:0d:d8:42:b9:8e:ed:1d:13:04:35:ca:
         6b:1f:86:50:8e:69:77:1c:c4:d8:23:b8:79:34:c7:44:d1:1f:
         44:e7:85:00:50:2a:e2:1f:f7:37:6d:72:b9:44:73:3b:d5:50:
         81:52:3b:c8:dc:c1:37:e0:63:3c:03:d3:1a:44:7f:9d:45:a4:
         c0:00:6b:1a:ab:d1:00:3d:39:18:af:0b:db:a7:71:29:c6:54:
         71:91:fd:b2:aa:b8:1c:46:d8:28:1d:a1:27:1b:a8:06:6d:fd:
         86:c0:3a:8d:9c:26:72:0b:f4:2b:de:8b:6d:2a:ae:ac:59:87:
         87:4f:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:15 2026 by rpki-client