Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          is0RB1N8q68t6UBfAVnEN8fNhprB1yZXBjSKNYeo6lo=
Subject key identifier:   99:40:19:62:F1:37:94:32:4B:B7:EF:04:B1:87:FE:57:7F:13:A0:DF
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       019EB9C5E2D9E6E69A8B9DF8B4383E564560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          0660
Signing time:             Fri 12 Jun 2026 03:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:13 +0000
Files and hashes:         1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 8ifs9LAFvKoEBL1TRvDu5wu30ygH6Vnb0hwgdO/AJHA=)
                          2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:e2:d9:e6:e6:9a:8b:9d:f8:b4:38:3e:56:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Jun 12 03:00:13 2026 GMT
            Not After : Jun 13 03:00:13 2026 GMT
        Subject: CN=99401962f13794324bb7ef04b187fe577f13a0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:0c:ec:28:b9:92:35:de:ec:47:96:03:f9:
                    e9:91:64:05:b3:c7:3c:db:9c:e6:71:ab:25:94:8d:
                    e6:e2:90:de:02:4e:54:bb:26:86:c7:89:fd:a4:e2:
                    26:c9:cc:80:12:ff:c3:7f:1c:e6:f6:23:93:64:c8:
                    0d:dc:bf:07:7f:f6:80:3f:11:c2:3c:1c:43:86:95:
                    38:39:e4:72:8b:0f:19:00:b0:c2:ea:0f:af:1f:f4:
                    27:87:ce:7d:55:9a:36:63:70:d1:22:7d:3c:da:bc:
                    1e:30:9a:c6:2a:1b:3c:68:59:27:f5:3f:8f:4f:13:
                    5a:2d:bf:62:be:d1:6d:66:73:df:8b:58:97:8c:00:
                    a7:9e:98:ad:3c:83:12:cb:bd:e5:62:67:9f:1d:99:
                    14:85:38:fe:b4:ab:e4:21:63:da:84:71:aa:6c:c7:
                    e3:fe:66:7c:d0:ae:27:02:91:d4:08:f1:5e:86:e5:
                    af:cf:41:47:df:46:27:d5:0b:99:dc:9f:f9:9b:25:
                    7e:2d:be:56:0d:5c:80:d7:b0:3e:3a:9d:dd:56:97:
                    c2:69:30:ec:e9:d2:26:05:9d:3c:ea:f0:c7:97:93:
                    97:32:be:79:7d:f8:e4:c9:9b:1f:eb:77:56:ea:38:
                    22:dc:8c:b7:0a:5a:4e:5f:ee:ec:fd:25:5d:90:b4:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:19:62:F1:37:94:32:4B:B7:EF:04:B1:87:FE:57:7F:13:A0:DF
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2b:0c:1f:9a:80:bd:7c:f7:62:cf:03:95:9c:cf:b8:a4:ae:
         c8:dd:4c:df:60:ff:64:25:53:26:af:24:37:11:32:07:42:eb:
         09:5c:31:49:8f:80:25:fe:63:92:cf:9b:ed:37:19:a6:62:a9:
         5f:6e:99:ad:3e:cd:43:fb:38:62:64:ff:2e:64:63:50:4c:f3:
         87:25:99:49:ba:9d:dd:3e:37:50:b5:ac:21:ab:26:0b:a0:92:
         fc:48:c9:86:81:94:0f:b9:52:66:a9:e9:04:13:b4:a4:18:e3:
         cd:24:f8:61:17:ab:63:7f:d5:26:67:b1:3b:50:11:6e:2a:81:
         d0:82:1b:8d:e8:77:87:6f:f0:df:c3:c5:5f:10:87:72:0e:fe:
         cb:e7:0d:15:1a:4e:3e:ad:ab:68:a0:dd:f3:63:f7:15:f4:d9:
         32:9b:32:51:e2:56:78:db:b0:2d:a9:dc:30:5c:c1:ce:da:ce:
         0d:b3:a7:b7:9e:f9:bc:29:6a:2f:e3:7e:45:77:7a:d3:86:cf:
         e1:e3:c0:97:7b:a6:0c:13:26:df:ab:03:6b:25:2e:74:3b:38:
         91:d1:ff:4d:f0:ef:d3:24:f7:fc:cb:31:68:ab:78:dc:6e:1f:
         40:b2:7e:71:9a:fa:1a:44:2e:6e:d0:6a:ec:05:49:e4:49:d8:
         c3:36:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:47:48 2026 by rpki-client