Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File:                     NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier:          tgTD0sYKxGsC4AwXtKzt8nnybhIEAW5DwDDTD5spj/I=
Subject key identifier:   6F:E7:35:FF:71:0E:39:63:80:D1:6D:24:DA:D2:F2:B3:F0:8E:B0:54
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer:       /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial:       019EB7A10BC7CDFA3390F18AB9E0FAEED815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number:          18E6
Signing time:             Thu 11 Jun 2026 17:00:45 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:45 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:45 +0000
Files and hashes:         1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: AlMwFAMhPT0skkly7kIY4/lkfHgkapBIxWnGAfbaCgY=)
                          2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:0b:c7:cd:fa:33:90:f1:8a:b9:e0:fa:ee:d8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
        Validity
            Not Before: Jun 11 17:00:45 2026 GMT
            Not After : Jun 12 17:00:45 2026 GMT
        Subject: CN=6fe735ff710e396380d16d24dad2f2b3f08eb054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:fa:f3:a9:7b:96:7c:6e:7a:40:44:ad:15:
                    ef:9a:a2:92:f2:bd:05:69:6c:08:45:80:8e:44:1c:
                    30:29:71:74:fe:c0:38:1b:39:a8:9e:19:51:a0:9e:
                    c1:28:8f:96:3b:df:dc:7e:e4:2c:5c:f8:5a:2d:88:
                    3f:0c:d7:60:34:f6:ba:a8:a1:db:d1:77:03:44:f2:
                    10:60:26:77:8b:7a:3b:54:e1:9c:5b:2f:c0:13:3e:
                    f7:e5:1d:34:2b:5b:eb:0f:6f:50:21:52:73:34:60:
                    f7:df:13:9f:3a:71:b2:70:54:2b:32:91:ec:f2:8b:
                    04:31:49:85:54:a3:1c:d1:25:7f:04:56:59:6a:3f:
                    a7:fe:52:43:4d:95:8d:8f:92:c2:b8:25:9a:ef:22:
                    dd:c5:a0:19:e7:f2:d9:b5:f7:dc:1f:f1:ae:20:c9:
                    10:72:52:7c:6e:4e:ab:02:ae:7b:07:27:f4:30:2d:
                    19:d8:58:42:4c:1e:79:2b:16:69:55:b1:9c:33:10:
                    ef:3f:b9:86:fb:4e:d3:34:53:85:6d:48:1f:7e:ae:
                    bf:3f:9a:40:ef:18:5b:24:70:b8:fa:5c:43:a2:d6:
                    87:e9:f2:d6:41:61:5c:93:5c:91:94:f1:38:be:36:
                    1d:1b:52:02:02:38:13:40:1d:8a:50:15:37:1d:61:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:35:FF:71:0E:39:63:80:D1:6D:24:DA:D2:F2:B3:F0:8E:B0:54
            X509v3 Authority Key Identifier:
                keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:71:27:ca:8e:14:da:fc:26:78:e4:b4:c7:4e:42:02:66:92:
         99:51:26:1c:98:f7:06:e7:58:ce:39:ed:8e:b0:45:8d:1e:3f:
         ea:08:f7:8b:ab:5c:38:4f:72:42:f6:81:0f:3a:34:67:50:68:
         08:d5:17:57:84:fd:22:9c:d7:21:70:91:d6:df:59:6d:6c:3b:
         eb:23:b4:b2:dc:d0:72:2d:fc:ab:a7:50:6a:a2:a6:4c:c0:52:
         90:a6:61:35:09:ce:af:8d:e3:4b:70:c3:68:24:a7:de:bf:68:
         28:ff:7b:1c:33:e0:6e:20:14:8b:98:68:49:14:ff:73:c3:4a:
         48:65:d8:cb:dd:9b:b6:1d:06:f1:50:2d:f5:87:93:88:57:da:
         97:fc:0a:c2:10:3f:f5:1c:29:34:89:a5:cd:93:f3:e1:03:25:
         b9:42:26:ce:bd:0c:f0:dc:0b:58:12:5f:67:16:66:ea:8a:cb:
         82:b6:af:f6:b6:a2:2d:02:cf:c2:27:b3:76:1e:6e:4f:4b:4b:
         a3:74:e4:1d:ea:8f:f6:d2:ec:ec:0e:ff:dd:96:e9:a8:6f:7e:
         5d:bf:78:c0:fa:c8:e2:d1:cc:9e:96:48:63:cb:45:bb:62:68:
         92:8d:0e:1e:ad:25:20:26:9f:af:62:b5:70:04:c8:a3:d5:df:
         e9:29:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:07 2026 by rpki-client