Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File:                     NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier:          RFGvkdf4lIjcgGZytTvWQT3jvGDZNO3MNrAuGjbPgOE=
Subject key identifier:   5B:01:25:45:D7:1D:C5:67:70:57:41:15:30:3E:1D:43:59:11:2C:3A
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer:       /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial:       019E3261A3F0974A59C1C3E984C8C1936CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number:          11A3
Signing time:             Sat 16 May 2026 20:02:00 +0000
Manifest this update:     Sat 16 May 2026 20:02:00 +0000
Manifest next update:     Sun 17 May 2026 20:02:00 +0000
Files and hashes:         1: CuLXTApTY665Qqw5qFqzkskM4Y4.roa (hash: 7Izzut+1ogoYvoMfOGiIDjD5ckHSQdRcpDniAQU0kyc=)
                          2: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: JDGCuNNKbG5pPnFiMjYd3eq/qM+WiaXaHXYEYX2+hxQ=)
                          3: cIznhG-7FFlY99slwXQBHSyGArI.roa (hash: 6HAUnj4ChowrLAx0R+vc3a/ycSWndHfVoayw20SNgbQ=)
                          4: f4nPS6ohtqHTChuoe7zsCtGbZk0.roa (hash: sDMFZIqzqP0HnmKISKRvCr3JlZX4SyHrkPjSdRU5xGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:a3:f0:97:4a:59:c1:c3:e9:84:c8:c1:93:6c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
        Validity
            Not Before: May 16 20:02:00 2026 GMT
            Not After : May 17 20:02:00 2026 GMT
        Subject: CN=5b012545d71dc56770574115303e1d4359112c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:f0:e2:b6:4f:f3:d4:d4:ef:b0:3b:24:5d:
                    b0:3c:19:9c:f9:c3:77:fa:ba:c2:f9:11:c0:2f:16:
                    09:99:0c:9f:3d:11:8c:9a:f2:37:35:63:49:69:83:
                    b2:ba:2d:7f:69:28:e9:fa:88:b7:07:27:bb:b7:54:
                    b0:57:e5:e9:14:5d:f5:56:c3:35:fe:b9:3f:ea:50:
                    9f:ce:15:3e:0e:8e:e2:71:53:2d:86:02:96:7c:51:
                    96:e3:32:a0:4a:6b:28:a2:a0:d0:08:96:8b:18:c0:
                    65:88:f1:91:51:d9:26:11:66:b0:24:ff:02:5f:d8:
                    d8:8f:48:f1:eb:0a:30:20:cf:09:8c:04:15:49:12:
                    45:1b:70:fd:5b:bf:2a:5c:e4:95:82:87:74:62:09:
                    66:98:17:34:e9:eb:cc:c1:b6:15:e7:3e:8f:21:bc:
                    b2:54:2e:81:51:a8:ca:1e:3c:3e:85:88:3f:9b:b3:
                    3a:2d:8a:a3:29:6d:cb:c5:ff:d4:cf:f9:de:7e:e8:
                    57:ff:f1:d2:f9:86:2f:e0:90:89:33:1d:a2:34:1f:
                    97:e8:3b:3f:b3:44:be:a1:d3:2a:8f:d7:d4:6e:a3:
                    00:bd:7d:98:27:46:94:94:87:1d:62:36:12:1c:be:
                    bb:7f:21:8f:dc:06:5a:82:31:c7:b0:cb:5b:60:05:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:25:45:D7:1D:C5:67:70:57:41:15:30:3E:1D:43:59:11:2C:3A
            X509v3 Authority Key Identifier:
                keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:15:0e:c6:52:58:f8:ec:8e:5c:70:18:fe:f5:df:0c:78:57:
         5f:dd:32:1d:d0:fc:3a:30:25:ae:d6:e0:5a:42:da:f4:a9:0f:
         55:33:c3:e5:ec:b1:39:c0:ed:d7:3b:3c:1c:72:96:30:a3:41:
         ec:a3:89:fd:1d:be:33:90:41:73:ae:e6:b1:e9:aa:a7:54:db:
         ca:30:77:6c:87:b9:78:86:e9:15:17:a7:f1:a7:1e:54:ca:5d:
         94:36:2d:fe:91:79:8c:45:5d:50:37:0d:1a:62:d7:5f:80:26:
         32:82:ee:56:b7:bc:62:4e:0d:2d:88:ee:63:59:2f:27:ab:8f:
         3e:ce:a4:98:a8:8d:52:47:54:6c:e4:6c:a4:b1:3e:03:79:6f:
         34:1c:7d:e3:f6:92:af:34:64:1f:52:1f:48:b0:7c:ad:b8:67:
         c9:17:5a:39:56:d0:50:f6:81:1d:08:9d:37:a7:78:25:9e:57:
         67:4c:22:ee:c4:aa:4c:45:25:cc:4e:40:0b:da:89:30:13:1c:
         63:db:7e:15:ad:ab:07:06:61:0f:68:91:af:46:84:99:ab:26:
         61:d5:4e:d9:8a:f1:b6:4b:74:0a:28:7b:36:f7:28:cd:0e:34:
         6f:80:fb:31:aa:d4:60:ab:64:47:c5:7b:6d:f2:4f:8e:c1:0a:
         d3:1e:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:30:03 2026 by rpki-client