Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          G0gZ+vZnXJfuVK6PcEd0sVLuFFDT0i0Rma+FvENzMUo=
Subject key identifier:   B2:69:FC:4B:B4:B2:41:BB:5D:48:6A:83:C4:9E:6A:02:40:34:0C:B9
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       019E9C6053B8D4D3B772E896C40AE6F84AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          128B
Signing time:             Sat 06 Jun 2026 10:00:18 +0000
Manifest this update:     Sat 06 Jun 2026 10:00:18 +0000
Manifest next update:     Sun 07 Jun 2026 10:00:18 +0000
Files and hashes:         1: QXvdf-kfkCqDOGFDPxtMYLWrQHI.roa (hash: f3NerkrqCiw7WLEljVvu/M9+wfwW4SsFhdBrrw3Fl+8=)
                          2: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (hash: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs=)
                          3: UT82bVvbFZN0Klu1mqOTYQBNxWw.roa (hash: oyZ/B5zzSvaRc9Ctci5GyXXQUAialxundovqq61f2VY=)
                          4: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (hash: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k=)
                          5: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (hash: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo=)
                          6: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: RQGn+2+V6LMgT6sGo6k6BCVxhFVEZllSZ+RuaWpSZPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:60:53:b8:d4:d3:b7:72:e8:96:c4:0a:e6:f8:4a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jun  6 10:00:18 2026 GMT
            Not After : Jun  7 10:00:18 2026 GMT
        Subject: CN=b269fc4bb4b241bb5d486a83c49e6a0240340cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:93:58:5c:49:ea:73:a2:24:16:36:23:52:
                    8d:be:b9:99:9a:8d:a5:58:eb:13:b2:ff:5d:c9:34:
                    55:94:69:57:57:fe:67:3d:08:d6:72:2e:7b:ae:f5:
                    d8:75:10:83:7f:09:2b:87:03:db:b3:45:78:1a:bc:
                    8a:1f:05:a7:85:12:e1:6a:25:0c:71:8b:63:8d:07:
                    3e:35:59:63:d5:8d:d3:59:4d:61:2b:c4:4d:cc:b7:
                    74:2f:1d:a5:a6:59:17:62:46:74:3e:c4:62:ca:26:
                    7a:48:22:9b:43:4f:8f:d2:4d:ae:03:42:a8:c2:5f:
                    75:42:bf:30:3b:9a:70:9f:fb:51:d0:fa:e7:49:ee:
                    aa:fa:fd:52:ff:45:a5:bf:83:84:96:43:30:87:4e:
                    10:0b:e7:f9:c0:3c:5a:56:99:99:8a:1a:07:d3:ee:
                    52:23:f2:e2:ff:c6:7f:11:6b:e0:2b:3e:b6:1b:dd:
                    ac:81:50:4d:a3:60:b5:2e:4f:b0:1e:1a:da:0a:92:
                    5b:c0:3c:f1:cd:71:34:0f:c0:67:88:72:78:77:6a:
                    d0:27:a1:9a:a4:17:dc:20:25:4c:27:32:c7:6e:69:
                    2e:5c:fd:bf:c8:c5:ad:36:53:97:16:d6:19:38:2a:
                    a8:60:a5:73:b5:d1:ad:26:ec:9e:78:39:83:84:0d:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:FC:4B:B4:B2:41:BB:5D:48:6A:83:C4:9E:6A:02:40:34:0C:B9
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:f7:06:c9:3d:87:36:51:5b:fe:de:fd:72:c9:6c:77:e5:
         34:e7:18:fc:c7:0f:f1:7a:33:dd:b6:4e:95:12:15:c6:28:35:
         b7:f9:f7:52:65:9d:ec:06:17:f3:fc:cc:32:16:df:0f:1a:35:
         60:e9:84:e6:33:a1:a3:7d:23:21:35:03:e8:9f:15:32:bb:f3:
         de:81:b1:6b:b0:22:c2:ce:89:a9:ff:a2:f5:16:28:5c:8f:01:
         b7:0c:63:22:da:2f:6d:9f:ac:d4:39:54:e8:af:88:f3:9e:e3:
         0b:ab:2a:26:15:11:b8:3e:aa:1d:94:4e:bc:14:dd:b6:78:e0:
         ad:12:b3:1a:7e:47:f4:4c:90:b0:07:18:0a:54:98:ce:e4:99:
         f0:21:b1:5e:f7:1d:49:51:a1:21:cc:af:58:4b:19:0f:d5:f0:
         f0:3a:1f:04:06:25:3c:9c:77:dd:6c:8c:ab:a2:d9:c5:8f:a6:
         51:63:87:6a:f1:05:91:0e:3a:61:b0:7c:5c:cf:23:60:e7:57:
         b6:02:6d:e0:de:84:6f:69:9a:06:c2:b4:44:9f:5b:af:7e:35:
         5f:bd:65:dd:7f:ef:5d:2b:e2:9c:1e:da:60:f4:dc:7b:03:5c:
         19:7f:3c:2a:a9:20:72:4c:42:a2:6a:34:7d:ee:2a:31:7c:9d:
         30:12:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:51 2026 by rpki-client