Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          2GMCHPxsyWXR7YdFBI+AHPjQZBd12FVKumog6kPe7SQ=
Subject key identifier:   7B:90:3F:6F:3C:99:B6:61:35:E8:62:A1:6A:BF:A3:7D:06:CB:3C:8C
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019E5892CC7089FCE7268003DFFCCF2F0386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          1905
Signing time:             Sun 24 May 2026 06:01:15 +0000
Manifest this update:     Sun 24 May 2026 06:01:15 +0000
Manifest next update:     Mon 25 May 2026 06:01:15 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: Ind2yhQb5tSKqgiZ4TcwdgaR+RqEPP9pxLD0RvaNhfc=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:58:92:cc:70:89:fc:e7:26:80:03:df:fc:cf:2f:03:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: May 24 06:01:15 2026 GMT
            Not After : May 25 06:01:15 2026 GMT
        Subject: CN=7b903f6f3c99b66135e862a16abfa37d06cb3c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:a0:9a:2a:c9:41:a0:99:cd:7c:81:c3:ff:
                    91:12:b9:71:ef:6a:bc:ec:c1:57:ea:b0:f9:a9:99:
                    2c:6d:50:65:db:43:4f:95:89:55:61:e4:bf:bc:19:
                    1f:74:ab:40:3a:8f:9a:2d:c1:d2:ae:2e:fc:3b:2c:
                    f7:02:39:88:f6:ca:79:7f:b7:ca:c7:af:c8:a0:46:
                    83:d5:78:32:36:85:97:c1:df:73:4f:67:86:9f:8d:
                    cd:8b:6e:ee:6d:54:20:22:c1:a9:94:3b:e8:e8:f6:
                    ea:f6:22:11:83:40:25:90:fc:cb:b8:f5:81:21:d8:
                    01:4d:08:94:06:ef:48:87:fd:76:04:e2:f2:ef:03:
                    26:20:59:dd:48:1f:81:36:f6:ea:db:cf:7f:11:2c:
                    d1:d5:df:e2:0e:b3:b8:dd:c9:00:1d:58:ae:61:62:
                    76:c7:04:a0:66:0f:89:9a:9f:99:e8:eb:89:5c:ef:
                    7b:1b:f8:82:63:80:e9:51:64:49:df:2d:2c:9c:21:
                    bf:fd:ab:58:a5:bb:fb:48:71:1c:b8:d3:19:b4:21:
                    8f:53:b4:45:14:bb:c5:19:df:22:16:7a:66:a2:62:
                    c4:5a:93:f8:06:cd:0d:ee:7a:41:ad:c2:9d:1f:1e:
                    23:a8:36:e6:2f:0a:9e:f2:c6:bc:58:de:74:4f:a9:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:3F:6F:3C:99:B6:61:35:E8:62:A1:6A:BF:A3:7D:06:CB:3C:8C
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:42:70:0e:c9:c0:0d:dd:b7:fa:16:44:2a:2b:dd:a4:0a:
         5b:9a:19:0c:ae:1d:d5:85:04:58:bf:1c:dc:27:0e:32:85:2e:
         82:3e:a0:d0:86:a3:d2:8b:2c:6f:a2:54:bb:da:ae:e6:6d:40:
         5e:6e:a2:69:c8:70:b7:f3:d9:d8:e5:1f:7a:95:1f:9a:15:72:
         9d:30:19:78:61:63:d6:b0:3a:d2:19:d3:45:12:e5:b9:23:c4:
         d9:42:ed:b8:3c:88:14:70:e1:bd:65:77:a0:13:c4:2f:66:63:
         68:40:50:52:08:b3:84:e4:31:bd:c3:b7:42:48:73:7a:45:47:
         33:8a:d9:80:0c:e9:8c:d0:33:1a:98:b8:3a:76:4c:bb:65:fb:
         b3:35:7e:06:71:be:fb:34:50:5a:ab:a5:27:c8:81:2a:6b:8e:
         00:6d:90:f6:4e:5b:ed:a5:ba:33:51:36:13:0c:2d:82:97:e0:
         08:2a:aa:27:fa:ba:49:23:3e:e9:21:92:87:f1:eb:cc:6a:af:
         e0:82:3a:40:a4:74:f1:7e:28:4a:1a:c8:54:3c:60:b6:60:47:
         d1:d5:eb:7d:5d:03:ef:cc:b0:77:29:40:48:fb:e0:98:39:63:
         48:57:87:c0:07:f9:e2:7f:cd:48:1c:50:60:a7:86:62:26:af:
         af:74:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:02:48 2026 by rpki-client