Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File:                     np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier:          NsqLLfyFQzyiiNd2N2s1BbrlyjidirR7uk2PZ/0JwzM=
Subject key identifier:   C6:BD:76:96:06:09:54:58:FB:4D:0D:C4:C9:60:A2:75:46:3B:35:BE
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       019EB92240A1853162C9EE82B565CCE2703D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number:          150D
Signing time:             Fri 12 Jun 2026 00:01:30 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:30 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:30 +0000
Files and hashes:         1: 7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa (hash: 6yLayhUVccwVTayfXedjC+AWPa6ZfJFk+hN+rmaMZyA=)
                          2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: 8D/3Ylo2pybXDaFSxxi9InW9HC7CffmM72Yo0iAmVYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:40:a1:85:31:62:c9:ee:82:b5:65:cc:e2:70:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: Jun 12 00:01:30 2026 GMT
            Not After : Jun 13 00:01:30 2026 GMT
        Subject: CN=c6bd769606095458fb4d0dc4c960a275463b35be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:5b:48:28:65:cb:8d:42:ed:b9:47:2e:fd:
                    d8:3e:4e:3d:f6:4e:08:9c:43:01:76:4e:87:1e:b6:
                    21:60:c2:73:7b:58:3b:f5:09:3e:40:40:36:e0:cc:
                    6d:51:bb:34:8a:b6:5b:1b:fe:98:5d:a0:ba:f3:df:
                    6c:64:22:fe:6a:d0:cb:8b:f6:47:1b:41:a1:01:e4:
                    d8:3e:e0:89:02:8f:5a:c5:ab:d5:03:ac:57:75:e7:
                    3e:26:2e:9e:73:b6:01:7c:2f:cb:08:f3:7f:a4:f0:
                    39:04:68:95:d7:e7:a0:5c:53:94:3a:d3:1e:b0:82:
                    41:40:62:28:b7:5d:5c:13:a7:db:d7:c5:4e:0b:8f:
                    9b:84:f0:ec:66:c9:d0:c8:c2:3d:4e:ec:6d:a7:19:
                    80:76:a4:fa:12:59:5f:f1:29:ef:5f:c5:31:ea:e4:
                    11:27:9c:71:de:f8:d9:09:c2:ba:3d:8c:c2:60:08:
                    e9:a6:9d:67:09:7b:f5:d4:a7:e4:b8:1c:8f:b2:b5:
                    b9:cc:c0:16:79:39:37:94:2c:3e:bb:d8:0b:24:da:
                    6a:a5:95:8b:6f:00:68:c9:4d:4c:8c:5d:36:d1:28:
                    b1:11:b1:17:7f:87:a6:06:6a:a4:4d:bc:1a:53:26:
                    b8:51:7a:ca:11:0f:64:95:1f:79:74:53:0f:87:a9:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:76:96:06:09:54:58:FB:4D:0D:C4:C9:60:A2:75:46:3B:35:BE
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:2f:ba:48:b4:e1:37:d0:86:9f:29:04:53:c1:1c:e9:98:
         d7:3e:b8:82:67:a7:8a:11:b4:eb:28:4e:8a:2d:0c:2e:17:7c:
         5e:af:a1:ed:4e:82:48:1b:2e:a6:91:71:7f:ba:c7:43:f8:b4:
         10:7c:f9:d3:82:95:26:36:2f:db:6d:20:3e:e9:73:91:61:03:
         58:26:1b:cf:80:b4:4b:37:ca:38:a9:42:e9:e3:d2:8c:09:0c:
         e4:d4:d8:b7:c4:b7:03:fe:1b:b7:a8:c1:7b:e8:40:47:fc:35:
         06:1d:b5:d0:b7:ce:25:b7:f0:de:75:7a:a3:d8:ee:4e:b5:57:
         c5:50:41:47:ee:f7:de:fe:d7:33:fb:fe:f3:0c:13:34:00:36:
         a7:90:7b:56:99:75:d2:ac:62:f0:52:9b:aa:f4:9a:1f:14:5d:
         d0:f6:51:26:cf:af:8a:e0:91:a3:d1:99:1d:69:e1:a6:69:64:
         1f:ed:d3:d5:6d:5f:a2:07:83:43:b9:56:0c:74:6b:92:e9:e5:
         94:e5:d3:43:bd:c8:f3:3b:6b:1e:ef:27:5c:17:65:2e:d3:e6:
         44:35:a9:06:79:71:c3:9a:2a:a7:fc:92:79:7b:e2:b2:20:94:
         59:0a:0c:c0:ab:1d:eb:1b:78:bd:91:68:20:6d:97:51:92:03:
         78:e4:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:42 2026 by rpki-client