Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          wUqGe3RDi4WHcyxhMF9wSnypUpoJIC9sf7pWFpBJ+3I=
Subject key identifier:   02:C5:5F:D6:5C:C1:48:52:2E:57:05:6D:29:6F:EF:83:B8:B5:F1:84
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       019EB76AA51F7E4AB9625CD995D2F291CD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          167D
Signing time:             Thu 11 Jun 2026 16:01:20 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:20 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:20 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: f7UEj1DJ8C2ceLiEVpb+bRaHX4ZttJqfWaQsT/caCy0=)
                          2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:a5:1f:7e:4a:b9:62:5c:d9:95:d2:f2:91:cd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Jun 11 16:01:20 2026 GMT
            Not After : Jun 12 16:01:20 2026 GMT
        Subject: CN=02c55fd65cc148522e57056d296fef83b8b5f184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:79:b0:43:24:ad:05:5b:a0:8f:96:b8:6e:
                    11:c3:13:0b:32:8d:95:00:6f:23:6e:68:28:a5:11:
                    ec:fe:6e:b5:cc:a5:7b:72:75:60:f2:5b:0c:a1:51:
                    59:f6:2f:c8:61:2f:c5:ec:e9:ce:bd:b6:14:98:34:
                    b3:99:43:22:2c:bb:ed:0a:4b:d0:a0:f7:23:e0:24:
                    f1:59:35:0b:39:14:a5:0c:f5:5e:a7:7c:f5:56:bf:
                    84:cd:e2:bc:33:cd:70:5a:8a:d6:61:b6:02:85:14:
                    21:a1:a6:9a:90:e1:60:77:ec:3f:39:74:fd:c8:33:
                    7f:0a:7c:56:be:d3:46:12:57:ea:40:23:a5:e8:a9:
                    23:b0:12:f9:2e:9c:ee:65:4f:6e:76:fe:d5:a0:eb:
                    16:04:92:93:d5:7c:73:b5:89:b3:25:f9:47:4b:06:
                    cb:4b:0a:9e:0b:73:b2:7e:d6:3a:16:ba:84:df:91:
                    bc:72:3b:d7:6b:2b:5d:b3:90:b7:0c:cb:db:95:33:
                    e5:bf:9f:3f:48:70:84:a1:b2:d0:60:e3:f2:3d:f3:
                    fe:e6:8a:85:f7:9b:c3:9b:f8:08:47:9e:af:08:b7:
                    fc:b0:04:f5:ca:b4:cb:65:6d:70:e1:d7:9d:29:9b:
                    01:80:9c:46:c2:b7:43:de:25:1f:c1:dd:da:b3:7e:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C5:5F:D6:5C:C1:48:52:2E:57:05:6D:29:6F:EF:83:B8:B5:F1:84
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:06:9b:db:22:2f:18:a5:21:5b:d3:6c:f5:30:4d:ad:67:
         05:15:2a:d2:dd:87:cf:3a:4d:43:59:30:b5:4d:0e:8a:88:9b:
         15:32:96:ed:75:54:68:16:06:ee:f0:28:4b:eb:79:72:2d:90:
         86:15:29:f8:42:61:dd:e3:f1:04:0c:1a:be:52:5e:bb:df:63:
         58:4f:59:18:84:55:31:80:6b:cf:50:bd:4c:1f:c7:0a:2b:ee:
         2b:d3:28:9a:e3:5d:5d:18:fe:70:d5:a8:f3:a9:c1:2f:19:25:
         23:be:68:d0:13:05:0d:b1:59:53:86:84:d2:41:8b:35:32:0c:
         b8:94:e9:99:4f:3e:ba:2a:2a:78:7a:2d:8a:6b:e0:fe:10:d3:
         90:bb:9e:f5:50:45:f4:eb:81:40:b5:06:af:41:15:5e:d1:ff:
         c4:3d:78:65:35:e5:87:14:2f:0e:16:2e:68:f8:b5:10:bb:2e:
         91:fb:d7:5f:9c:95:c5:77:37:76:4d:08:4c:68:e8:92:b1:05:
         fa:0e:c2:e6:6c:b5:7f:0d:73:a2:01:a2:c7:53:e9:e1:e5:8b:
         5d:da:85:91:ae:d0:5b:9d:4f:ee:3b:8c:fb:8a:80:16:7c:b2:
         21:49:0a:80:1a:46:d6:c9:72:19:e6:c6:d8:4f:fb:ca:1e:8f:
         2c:ed:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:25 2026 by rpki-client