Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File:                     NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier:          LTzbW1gPEvyPDFlhO6U2EPZKQlTDMB731InpuyBYhlA=
Subject key identifier:   8F:A7:72:E2:46:F8:1E:CF:57:CF:E4:7D:C6:5D:FD:8B:79:43:C8:1B
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer:       /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial:       019E897EA243779E3B457266503D6F18797A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number:          86
Signing time:             Tue 02 Jun 2026 18:00:38 +0000
Manifest this update:     Tue 02 Jun 2026 18:00:38 +0000
Manifest next update:     Wed 03 Jun 2026 18:00:38 +0000
Files and hashes:         1: 54-l6_WE4mpSzibcgvfylxURMs8.roa (hash: sePGTr5+yfqTzWvL3Wjt87hvin99jlrgLvtLsAD9+VQ=)
                          2: 6Bd_dmaoEZ1Gs0FRJb3NyILTT9A.roa (hash: Mk+M/Fjc68fkukvC6/Uq0uxs0FLSquR7Kh7pIPdntc0=)
                          3: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
                          4: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: IPcEaiZamqBgkNB7Cl0aVy75C7WJeqGVcjdGHUO4Msk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:7e:a2:43:77:9e:3b:45:72:66:50:3d:6f:18:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
        Validity
            Not Before: Jun  2 18:00:38 2026 GMT
            Not After : Jun  3 18:00:38 2026 GMT
        Subject: CN=8fa772e246f81ecf57cfe47dc65dfd8b7943c81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:d6:f5:fe:0a:02:70:bf:83:af:d4:95:42:
                    3e:b9:93:6c:9c:84:ae:a8:44:c2:5b:e1:48:6d:b2:
                    01:1a:bf:ae:7c:a5:ee:8d:e1:0d:b3:82:05:c8:bf:
                    8e:30:06:77:c3:0e:6d:ec:23:92:8d:e2:a9:a8:0d:
                    9e:58:6a:36:ba:d4:ab:c3:9b:9d:5c:e7:62:4f:ad:
                    13:7e:cf:68:dd:71:56:b2:5c:64:d4:f3:67:92:eb:
                    9a:01:c1:f3:30:be:bf:74:65:76:fc:1c:12:51:48:
                    bc:91:b4:72:20:6d:76:9f:fe:b7:dc:e8:8a:3d:84:
                    4d:70:78:7f:9b:20:75:56:dd:16:ab:9b:81:84:14:
                    43:c7:ea:14:d4:66:c8:14:db:ca:96:e3:97:4d:2e:
                    32:87:c9:9c:32:b7:ea:1a:0d:aa:a4:91:26:58:2b:
                    18:0c:11:4c:b6:0c:d9:d9:24:6b:00:78:2c:ca:78:
                    cb:60:c5:31:f9:c4:04:c3:fc:48:4e:1a:c2:0d:c1:
                    ab:35:06:f2:34:8c:47:07:6d:43:f0:bd:e3:c5:40:
                    9b:91:5b:7c:73:85:22:35:ec:80:c9:e8:34:0b:81:
                    81:cc:ba:3e:a7:f2:a8:9c:f7:bd:13:9b:74:15:17:
                    7d:47:a2:d2:e3:97:ae:88:19:96:f7:f9:f5:dd:fe:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:72:E2:46:F8:1E:CF:57:CF:E4:7D:C6:5D:FD:8B:79:43:C8:1B
            X509v3 Authority Key Identifier:
                keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:b2:f8:69:86:31:cc:78:50:7b:69:c9:eb:8e:c2:0d:69:
         15:83:cd:f8:c8:c0:87:40:85:aa:94:83:bd:76:02:8c:fc:8a:
         d7:ad:0b:85:c6:66:de:15:86:c3:66:5d:4e:d9:11:7c:df:00:
         b1:93:1b:7d:7c:74:22:b9:6b:7d:ad:bb:e1:b4:7b:33:be:48:
         a1:00:1d:c2:ce:bc:f8:ca:eb:b0:5a:92:70:64:87:4a:43:96:
         6e:5f:f4:db:51:35:dd:69:10:94:b8:42:3e:9c:57:e4:50:06:
         10:2a:04:cf:31:f0:69:5f:0d:8a:9d:5a:c5:54:c8:a3:fc:18:
         c3:c5:a3:11:36:4b:fa:e7:b7:9a:63:e1:e7:8a:e1:ea:16:6a:
         94:09:59:36:23:b5:f5:1d:1b:61:be:20:47:fc:e2:42:bc:b5:
         11:d3:4d:c7:67:c4:74:8c:cd:90:02:1a:52:c5:87:aa:ec:59:
         34:a8:4a:85:bd:91:e0:db:8f:08:12:19:2e:2f:06:dc:86:0a:
         39:04:85:b2:54:ca:3f:13:52:99:1e:b7:f4:42:f2:4e:7c:de:
         22:9a:e4:84:51:fa:af:1b:25:87:7c:00:06:c6:07:74:4a:93:
         2c:0e:7c:86:7a:f8:bd:ac:a4:7c:6b:08:26:84:e8:50:ed:68:
         25:b0:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:34 2026 by rpki-client