Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File:                     nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier:          pbeJYmNskHx7jTjnx5HBw3MKIVdOHlEyp7hrfr0/0Qc=
Subject key identifier:   6C:50:8F:96:98:F1:D5:AE:0D:FF:55:EC:30:68:5A:7A:9E:FC:13:FC
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer:       /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial:       019E2994E719E18ED383939F270DC4833457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number:          88
Signing time:             Fri 15 May 2026 03:01:24 +0000
Manifest this update:     Fri 15 May 2026 03:01:24 +0000
Manifest next update:     Sat 16 May 2026 03:01:24 +0000
Files and hashes:         1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
                          2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: woc0CYXUBBzc5jUIse4jkqO0WOEeLKoshtWOBSUqyqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:e7:19:e1:8e:d3:83:93:9f:27:0d:c4:83:34:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
        Validity
            Not Before: May 15 03:01:24 2026 GMT
            Not After : May 16 03:01:24 2026 GMT
        Subject: CN=6c508f9698f1d5ae0dff55ec30685a7a9efc13fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:c9:d5:dd:9a:90:25:bd:9c:ca:0a:2c:c0:
                    0b:37:71:91:36:61:3e:32:8c:53:a2:3e:cd:6e:91:
                    b8:e3:2a:2d:25:b9:07:6b:32:62:39:28:f6:a9:c4:
                    41:e7:47:2c:bf:75:ae:1d:8a:fb:4e:67:8e:e5:6e:
                    2e:f7:b3:9d:f6:a1:05:28:54:96:7d:4a:0a:90:e4:
                    63:cf:60:33:a9:4d:bf:8c:a3:ad:59:8d:02:7c:b3:
                    0c:52:85:a3:d7:00:20:3c:8d:db:b2:10:ec:fb:89:
                    34:24:37:7e:fc:f9:ed:97:fd:14:6e:0f:12:a2:32:
                    fe:50:6b:e2:a4:fe:3f:e0:04:18:81:13:26:7c:97:
                    59:e4:0a:05:85:93:5d:3d:58:59:f5:10:b4:9f:28:
                    64:db:01:f2:66:3e:5e:2a:3a:3b:b2:5c:ab:2c:fd:
                    fc:82:85:f1:2f:47:17:4c:8d:20:71:ee:71:1b:f0:
                    05:b8:09:f4:de:f8:43:36:ad:2c:29:b1:bf:12:ea:
                    30:80:ec:8a:0c:20:8a:85:8d:19:9e:c5:b3:66:58:
                    21:ca:bb:db:0b:f6:44:7a:ad:db:b4:dd:85:83:53:
                    f8:00:89:2b:d4:31:69:a1:c6:3d:f4:fd:ec:02:2e:
                    23:fb:ec:f9:c2:9d:17:fa:cb:c4:21:24:f4:86:fc:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:50:8F:96:98:F1:D5:AE:0D:FF:55:EC:30:68:5A:7A:9E:FC:13:FC
            X509v3 Authority Key Identifier:
                keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:91:b3:4a:ba:76:84:56:05:f8:cd:c7:33:33:6f:93:0a:
         6c:54:97:d8:44:3e:31:44:e1:ee:d5:dd:98:bb:7e:64:7d:2c:
         7d:a9:27:62:bf:7d:3e:37:3d:8b:13:53:7b:f1:24:88:ae:d3:
         66:95:0c:f5:72:5c:04:30:aa:f1:41:7f:75:11:74:27:96:21:
         89:a4:e2:e3:2b:07:9a:59:28:7a:08:4d:cd:db:4c:5d:b0:d8:
         3c:f4:60:78:9b:e7:2a:41:bb:3c:13:22:78:ea:13:18:7e:f9:
         60:ca:2b:83:cb:50:b7:ab:2a:bc:09:00:5a:dc:b2:4e:88:5e:
         21:d5:55:de:d6:62:68:4e:14:b3:09:1b:7a:3a:31:12:29:06:
         a3:63:ad:16:8d:13:d8:a7:bb:c3:eb:4c:b1:3a:2c:82:8a:70:
         b6:91:e9:4d:02:03:8a:39:7f:b9:55:08:f4:84:03:84:72:5e:
         77:21:ee:5f:64:7f:70:cf:ce:0e:b4:91:ee:d1:94:91:bb:1f:
         f9:4f:9d:15:8e:75:6a:cd:81:f4:1b:dc:ae:31:ed:68:4f:8b:
         31:8f:56:65:22:ee:fc:72:3c:b3:4e:47:be:dc:61:5e:1b:39:
         d8:1f:70:c9:2a:2c:d7:fa:1c:96:b3:cb:5c:49:a9:9a:ae:a9:
         2c:dc:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:43 2026 by rpki-client