Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File:                     nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier:          hf0llfo5DGv4INJhHfMvjm8Z9BNWrSNZcphotRsoU6c=
Subject key identifier:   6B:90:24:61:52:94:9E:AD:87:AD:81:43:85:04:D5:90:95:44:B7:B3
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       019E28EF8A57CA7C2839BBA0BCBEFFD18FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number:          0130
Signing time:             Fri 15 May 2026 00:00:47 +0000
Manifest this update:     Fri 15 May 2026 00:00:47 +0000
Manifest next update:     Sat 16 May 2026 00:00:47 +0000
Files and hashes:         1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
                          2: Cbh9dTp-3Cy4lgTwDmqeWN3sMU8.roa (hash: jNPHrW3n9zuVbl+OCeOvx4EbhDNhT0wqb8YQdUfmVhY=)
                          3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
                          4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
                          5: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
                          6: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
                          7: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: R4CBdbxvWz7xvuki9LZ6Fsu7snoBJLyTasCHt5cM+MY=)
                          8: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:8a:57:ca:7c:28:39:bb:a0:bc:be:ff:d1:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: May 15 00:00:47 2026 GMT
            Not After : May 16 00:00:47 2026 GMT
        Subject: CN=6b90246152949ead87ad81438504d5909544b7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:63:cb:26:62:3c:ab:2c:c0:77:3d:0b:64:
                    db:3c:ea:5c:92:df:12:95:0a:9a:f5:a6:47:06:d6:
                    71:cf:74:ca:42:c3:c4:f8:04:1a:f1:fd:65:5d:6c:
                    8c:74:eb:e8:a8:7b:37:66:0c:0a:49:41:76:cc:bb:
                    31:bc:73:7d:3e:14:d9:13:c9:0c:ca:df:be:ee:25:
                    69:90:29:b9:dc:35:bb:df:45:aa:68:99:0f:f6:d9:
                    e3:04:e4:51:c3:a3:d2:9d:3f:19:0a:9c:40:e6:a5:
                    28:52:95:04:6a:fc:77:e8:b9:b8:38:62:a7:f3:9b:
                    dd:89:1d:73:d0:bb:24:53:c2:96:b8:62:22:1f:a0:
                    63:c0:e9:ac:eb:66:da:7d:de:af:0b:9c:29:94:f9:
                    97:00:d2:99:75:0b:89:69:65:47:63:a7:70:7a:49:
                    83:cd:84:4c:f2:bc:71:ad:f2:2d:51:c4:c3:ff:5f:
                    b8:c0:46:a7:3e:6b:c2:fd:0a:38:95:b1:b6:42:7d:
                    c7:85:6f:c5:87:68:62:c5:61:3b:26:6d:90:09:0d:
                    fb:6d:f0:7c:8f:f1:59:f4:65:70:ff:18:21:8f:1e:
                    8f:d0:4b:46:53:71:65:61:04:96:a3:2a:97:db:6e:
                    13:aa:6d:a2:b1:15:18:c5:cc:d9:03:af:4d:ae:68:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:90:24:61:52:94:9E:AD:87:AD:81:43:85:04:D5:90:95:44:B7:B3
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:15:8b:2d:05:48:2f:4c:9c:3c:77:46:1c:f6:92:3d:a8:61:
         94:0c:82:43:94:62:8e:69:5c:31:0c:6f:48:b0:b3:70:d1:38:
         0b:4d:13:8f:e9:72:83:ae:de:6c:63:b3:71:fb:8e:dc:76:be:
         bf:62:3f:2c:53:2e:c4:ed:2c:b2:ee:11:f4:db:c2:00:9b:94:
         bd:be:60:39:a1:85:83:c2:61:58:b3:a5:02:ac:45:bc:b7:dd:
         ae:78:95:71:8b:30:7f:0a:2e:6b:4e:9d:de:4c:7b:82:29:3a:
         af:81:38:b1:1a:0c:2b:8b:05:6f:9d:bc:02:d2:86:c2:f6:1b:
         b2:76:ae:21:f4:0b:a9:e3:29:d2:65:07:fc:ab:ea:db:9b:a3:
         12:30:51:02:e2:da:ea:58:68:bb:8c:94:5d:b3:89:5a:6d:c8:
         62:d4:77:7d:4a:a2:3c:c0:15:86:59:3e:39:ea:13:f6:fa:e3:
         4e:5a:bf:3c:03:5d:9d:d9:e5:95:3a:a9:19:4b:59:d8:65:94:
         50:6b:10:1c:25:4e:0a:6e:4c:fc:4e:13:46:4b:a6:12:07:48:
         ef:fd:a4:2e:1c:ad:bf:5a:9d:dc:09:9d:d7:a2:d2:de:da:77:
         94:4d:d1:ad:d3:74:66:c7:47:e6:31:36:33:f6:19:e6:73:07:
         bc:7e:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:30 2026 by rpki-client