Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File:                     nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier:          +6pRhMGG914vqLJTxrOz9Pf/kgKDFGRJmedILzgNVQY=
Subject key identifier:   F6:6A:D4:FC:D1:25:5C:B8:3F:7F:82:91:2B:26:56:75:C0:14:BC:C5
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer:       /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial:       019EB80F6302AD41AC7798F358E7BD5EDD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number:          0C0D
Signing time:             Thu 11 Jun 2026 19:01:16 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:16 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:16 +0000
Files and hashes:         1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: Y1GeDm9T42Azu4v8anAB/qnj8sCIvsJrzMUCXGXaNFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:63:02:ad:41:ac:77:98:f3:58:e7:bd:5e:dd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
        Validity
            Not Before: Jun 11 19:01:16 2026 GMT
            Not After : Jun 12 19:01:16 2026 GMT
        Subject: CN=f66ad4fcd1255cb83f7f82912b265675c014bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:bf:e4:69:34:17:c6:b0:e6:31:51:02:15:
                    14:47:d8:28:11:a7:1e:ba:c2:a9:a3:6a:dd:1d:d4:
                    e8:e2:bb:c2:c8:2e:d9:f1:bf:87:d2:53:2b:dc:37:
                    19:ac:f7:12:89:66:fc:f0:74:16:68:8b:a0:eb:38:
                    fe:15:83:c8:44:c8:a0:61:5c:a7:b2:54:cb:22:b5:
                    16:b4:0f:22:20:cd:7f:7e:40:e0:c0:3c:14:61:c7:
                    de:fc:2c:d8:1e:7f:d3:55:22:da:0c:e9:e2:20:03:
                    ea:8f:b9:17:5f:50:f2:17:3a:6c:ac:c4:70:c8:37:
                    f4:5b:59:20:43:ec:65:48:a2:6a:f0:42:3f:33:02:
                    e9:ea:e9:5d:86:2f:0b:82:1a:53:40:2c:1b:35:97:
                    a8:99:93:d6:ec:de:bb:0a:61:d8:0e:01:2d:72:ca:
                    d7:6d:ea:6d:bb:fc:14:7a:41:cc:ee:de:49:04:d7:
                    b6:5a:88:b0:4e:bd:8a:91:fc:77:24:af:d8:fa:2c:
                    ad:4f:9a:e8:d5:ad:9b:f7:5e:fc:b1:5b:32:06:20:
                    95:34:f2:9d:e8:bb:37:ef:58:99:2b:ed:9e:07:f9:
                    98:1e:ba:c1:66:14:84:f9:54:41:d1:a3:fb:bf:4b:
                    8b:07:07:94:ab:2e:81:1f:04:9f:3b:7b:c7:c0:50:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6A:D4:FC:D1:25:5C:B8:3F:7F:82:91:2B:26:56:75:C0:14:BC:C5
            X509v3 Authority Key Identifier:
                keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:3b:eb:2d:70:47:e5:89:63:23:0e:5e:b3:9a:69:94:bd:
         da:a6:90:e4:9a:c3:c2:62:28:80:bb:ac:d9:16:7f:e8:7f:1c:
         3e:b4:2c:5a:05:34:bc:5c:8e:32:b4:1d:83:47:0c:b1:4f:67:
         89:01:20:69:56:5e:fd:e4:4d:0e:4f:04:08:f7:82:5d:6a:46:
         ce:ad:13:d6:f6:b3:9f:26:78:c6:b1:8f:68:8f:cc:ba:f0:2c:
         91:0c:fc:e0:57:61:43:58:2c:ca:19:c5:0e:db:80:82:3b:53:
         2c:19:f4:36:5f:b1:00:27:9a:39:af:f5:d0:2b:a2:52:ed:72:
         2d:7f:08:9f:9e:63:fd:0a:9d:f0:95:4e:e3:84:a6:91:c4:05:
         56:44:92:ed:dd:5c:8e:f8:ce:74:d8:47:dc:27:ec:b1:19:c7:
         d8:58:e3:8f:4e:e2:86:96:35:22:b0:ae:43:d0:7f:0f:f3:51:
         94:df:a3:cf:c2:8f:27:8d:6b:ef:18:e2:d2:e0:3a:2e:05:3a:
         93:06:55:7e:36:31:9a:57:ac:b9:64:0a:e4:d5:8e:ea:3c:b6:
         09:4a:2a:96:03:4b:ca:e8:86:c6:15:1e:f1:ab:b7:0c:ed:0a:
         6b:57:2f:50:13:cd:36:75:af:7b:de:4c:f0:65:89:0e:5d:20:
         10:3b:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:52:57 2026 by rpki-client