Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          rIUNimcJnyKYbez9NFwOOhD3PAdKrhl2oJMWLSqzAHY=
Subject key identifier:   B1:EE:3C:15:66:9C:34:6B:9E:68:A1:50:77:17:14:EA:7C:51:7C:E3
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       019E8948389C9305554BD18700E539BE586A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          16A8
Signing time:             Tue 02 Jun 2026 17:01:12 +0000
Manifest this update:     Tue 02 Jun 2026 17:01:12 +0000
Manifest next update:     Wed 03 Jun 2026 17:01:12 +0000
Files and hashes:         1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
                          2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
                          3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: WR6GtM9+eX/XnEH4PEDTGUPD+/0ESEAnfyhL00l3iro=)
                          4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:48:38:9c:93:05:55:4b:d1:87:00:e5:39:be:58:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Jun  2 17:01:12 2026 GMT
            Not After : Jun  3 17:01:12 2026 GMT
        Subject: CN=b1ee3c15669c346b9e68a150771714ea7c517ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:69:58:2b:ce:25:4e:6e:ae:34:fe:42:4e:
                    17:71:6e:c7:37:f6:ee:b1:42:93:93:f5:c8:27:b1:
                    56:29:3f:36:31:aa:c8:d1:e5:bc:f2:3f:3e:b2:b5:
                    8d:6f:5c:c1:a5:2d:50:c5:8b:c7:d5:e4:c4:c1:67:
                    49:13:59:f0:4e:6a:24:a5:92:a9:32:a6:cf:1b:50:
                    01:50:8c:52:a5:a9:7a:5e:83:ed:a5:3f:bb:7d:ce:
                    59:9e:03:eb:01:04:87:59:80:b4:51:97:d1:5c:a8:
                    9b:ad:7c:98:2f:fb:4b:30:ed:56:d1:43:2f:fd:b1:
                    02:db:da:ae:91:fd:e9:99:b4:55:34:c4:9d:ab:4e:
                    83:bc:d2:1c:e7:49:3a:00:cd:09:82:6f:93:76:99:
                    ac:ef:b9:17:12:09:67:a9:01:91:0d:4a:81:95:5d:
                    ce:5b:08:cd:1a:dc:40:af:c0:dc:af:08:27:0b:de:
                    ab:fb:8c:1a:76:8f:d0:31:cb:74:7a:74:74:02:5e:
                    69:83:ff:b4:76:8f:2c:91:4f:da:ce:7e:78:e2:d1:
                    31:af:6d:52:11:08:24:66:82:67:d7:bf:9c:46:78:
                    ba:dd:b1:a3:f7:e8:30:ac:90:d1:8c:8b:41:f3:92:
                    f3:e0:24:c4:c2:38:b5:7c:d7:f4:52:2e:22:c4:2a:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:3C:15:66:9C:34:6B:9E:68:A1:50:77:17:14:EA:7C:51:7C:E3
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:69:0f:57:d5:95:e2:58:f9:ca:48:c4:87:52:62:26:89:
         e2:04:02:d0:5e:e6:9c:41:30:90:f8:7c:26:d7:fb:9f:84:f7:
         d2:d1:36:cd:7c:66:4e:3c:35:58:b4:f4:68:62:71:93:52:20:
         43:d4:ea:f1:98:f9:2e:72:65:7a:41:92:9d:04:79:fc:32:b8:
         cb:b5:3b:13:e8:13:0e:cb:25:d3:ca:d5:42:33:41:31:e8:ca:
         89:69:c0:7e:1a:30:ea:b4:c8:37:f1:b4:85:7e:3c:87:c5:6e:
         81:80:32:87:8a:52:b8:c7:34:86:e9:22:5b:46:81:3a:59:de:
         a4:83:3f:b0:a6:42:7c:16:3e:eb:8e:fb:a8:bc:da:e0:d6:d0:
         cf:da:5a:8c:92:ab:27:76:8f:99:bb:9a:5a:fe:c0:3e:d3:98:
         4f:43:bf:f8:78:ef:12:18:52:75:f7:72:f3:cc:4a:fc:e0:4f:
         6b:79:bf:22:e4:2b:56:9c:4e:b3:d0:36:27:37:8c:eb:b0:84:
         58:67:bf:99:a8:c4:b6:79:a1:a7:3c:7d:17:c5:4c:72:e5:a6:
         c2:27:4a:7b:3c:f8:fb:33:33:f4:3a:e2:a6:a4:60:21:c6:9a:
         94:5b:97:95:57:6b:a8:af:79:67:be:b3:62:e1:cd:25:59:4d:
         db:f5:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:13:17 2026 by rpki-client