Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File:                     Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier:          lZAqZozRYukCsbelLcLS0g9e/UqTUA1zPdU2d3IsAts=
Subject key identifier:   48:A1:38:04:A2:F4:19:30:14:17:E9:C4:D4:79:6F:80:40:BF:30:41
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer:       /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial:       019EFC842675748EBB041D4684AAABFE1ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number:          44
Signing time:             Thu 25 Jun 2026 02:02:59 +0000
Manifest this update:     Thu 25 Jun 2026 02:02:59 +0000
Manifest next update:     Fri 26 Jun 2026 02:02:59 +0000
Files and hashes:         1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: ZEWGbjeG2epM0N2kvEds5sZ9TyFP+C2OiLRnvIEVlOg=)
                          2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:84:26:75:74:8e:bb:04:1d:46:84:aa:ab:fe:1a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
        Validity
            Not Before: Jun 25 02:02:59 2026 GMT
            Not After : Jun 26 02:02:59 2026 GMT
        Subject: CN=48a13804a2f419301417e9c4d4796f8040bf3041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:68:39:c8:ec:d2:41:fa:fe:f1:31:22:4b:
                    1e:ad:cd:3c:d3:b2:8f:99:df:ed:4e:42:e7:cb:3e:
                    72:b4:84:cd:cb:30:4c:61:6a:b7:00:33:dc:3f:d0:
                    ca:b2:ee:e0:89:2a:3f:60:ec:f8:b7:8d:e8:67:85:
                    7a:ae:9e:c7:9e:b0:95:17:e4:81:b6:8d:50:2d:14:
                    f6:7f:b2:25:5a:ce:0d:96:41:f3:a9:d8:00:a9:59:
                    96:66:62:38:07:fc:69:97:f2:61:0b:18:91:dd:8a:
                    fb:61:ec:03:07:a0:bd:5a:0e:70:73:ec:73:e5:9a:
                    26:7f:16:57:8b:35:47:f9:c5:a2:58:a1:ed:cc:e0:
                    ae:ce:b3:c8:d0:2b:96:31:07:b8:9e:1b:87:f8:2b:
                    12:28:2d:3e:f1:75:ff:68:01:66:03:ec:e8:f2:34:
                    47:b9:d1:65:0f:a7:d8:61:a6:0e:ca:06:4e:ee:7b:
                    6f:90:3c:af:96:5c:76:0c:65:73:2d:c2:a7:8b:9d:
                    b8:1a:78:2e:df:9f:2a:83:10:4d:d0:a3:4b:79:84:
                    93:04:c3:27:1b:9a:86:04:01:f3:9d:52:9f:78:85:
                    6d:39:59:4d:82:8b:50:04:82:11:8f:35:90:d0:ef:
                    fe:70:1e:d4:7e:2c:4b:6e:55:5c:ca:ef:4f:74:a2:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A1:38:04:A2:F4:19:30:14:17:E9:C4:D4:79:6F:80:40:BF:30:41
            X509v3 Authority Key Identifier:
                keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:39:7b:32:25:a5:39:29:e2:55:fe:08:a3:19:96:ea:99:a6:
         72:1e:5a:ed:ae:72:b0:fe:5e:f8:3e:d7:1f:be:ec:4b:2d:cf:
         2e:41:90:d1:f8:f6:6a:57:68:c2:4b:36:90:a7:52:1d:0f:62:
         55:11:f3:34:9b:7a:38:db:e0:f5:57:2c:1c:2c:c4:02:fe:7b:
         3a:8f:50:a2:43:b9:9b:ce:67:e7:bc:b7:69:3f:c4:b4:e9:6b:
         92:73:cf:61:95:37:47:fd:50:f6:e8:4a:af:dc:54:3c:87:99:
         89:13:44:d1:2b:fa:ad:b6:56:05:09:d5:20:b4:77:36:e8:53:
         47:45:90:cc:f9:9a:ad:43:be:f0:51:ef:f6:6a:f3:d9:05:ef:
         e1:78:f8:d2:fc:a7:88:e7:4b:bf:9b:1b:46:84:78:3a:b3:1e:
         22:d1:2e:09:6e:0a:61:29:9c:70:2f:b4:fe:fd:11:6d:0c:5c:
         5b:f7:d4:eb:65:30:e5:11:00:fc:49:44:a4:ba:f4:1f:ff:75:
         cf:e3:fe:e4:43:8b:0e:b4:27:88:27:f3:cd:ff:f2:20:d7:d6:
         25:4c:75:94:ef:7c:d8:4d:bb:f8:38:52:7e:a6:2a:4b:d6:33:
         04:e5:ed:a0:ae:e2:61:e4:fd:5b:43:d1:d4:0f:6c:66:9f:be:
         03:ba:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:34:30 2026 by rpki-client