Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File:                     nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier:          OeZVoZ3qKAaXNSBjIyZ2jOzAvl8mwbopDpGNjjO0fN8=
Subject key identifier:   FD:CF:60:2F:27:CE:FB:A6:14:ED:D3:C6:CE:CE:7D:CD:58:2E:29:0D
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer:       /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial:       019EB869F304E52C5579385A6AE28298EDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number:          05F5
Signing time:             Thu 11 Jun 2026 20:40:11 +0000
Manifest this update:     Thu 11 Jun 2026 20:40:11 +0000
Manifest next update:     Fri 12 Jun 2026 20:40:11 +0000
Files and hashes:         1: V3K9KWekNpWdzBCyOPh9WJ-1dOA.roa (hash: RfmxQYOLMhqB3WkiPFFlvfTDE7h8LswiSenU1NHDqIc=)
                          2: aEdbH2gcMJrcI8LeEpWiiItu560.roa (hash: 2FbQgo/a/H9dMPsQCbyn1M5Rd/nKsnsa5CJ69qDU4Ds=)
                          3: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: ABypGwLAyn/VZ7elqdKi3v6h1jrXwIwkwjaRpGNI28Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:69:f3:04:e5:2c:55:79:38:5a:6a:e2:82:98:ed:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
        Validity
            Not Before: Jun 11 20:40:11 2026 GMT
            Not After : Jun 12 20:40:11 2026 GMT
        Subject: CN=fdcf602f27cefba614edd3c6cece7dcd582e290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:15:dc:ea:ef:55:8c:c1:d2:7d:3c:ce:41:
                    6d:a5:26:0e:58:96:b0:12:ae:c2:c3:79:9a:40:ff:
                    8c:85:d4:f1:4d:f3:51:57:6f:22:94:6c:e6:c4:42:
                    16:96:29:de:a7:43:31:d6:b6:05:10:eb:be:8d:af:
                    e7:3c:48:8e:a5:36:ff:bd:36:4e:d2:7c:c5:65:84:
                    14:65:b6:f7:3f:61:f6:d1:9f:9c:af:59:0b:61:82:
                    41:70:85:85:36:b9:54:05:d7:05:50:cb:f0:e9:00:
                    0f:8e:37:d1:7e:2c:5c:93:ea:85:36:ff:7d:e1:dd:
                    c3:1f:5e:e0:37:b6:30:14:82:65:78:86:9c:18:24:
                    5f:5e:e7:36:e9:e7:87:36:5c:6e:25:dc:10:0d:6a:
                    38:7c:9c:95:0f:07:43:37:ac:5c:8e:e9:b4:ad:86:
                    32:bd:ad:a2:f0:6c:05:12:8c:70:e2:c2:80:b4:57:
                    f1:e0:4f:bd:c6:d4:e5:2f:d9:ce:cd:f4:70:86:57:
                    c0:e8:f3:f3:99:41:c1:65:5a:d5:03:48:1c:f8:7d:
                    8e:18:cc:85:92:a7:51:74:80:cb:83:68:45:ef:d2:
                    ea:13:69:11:a3:fd:b2:8b:0f:c6:e8:cc:bd:ea:74:
                    0c:7b:0b:26:b5:60:71:96:cc:e0:2c:52:9e:ac:f5:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:60:2F:27:CE:FB:A6:14:ED:D3:C6:CE:CE:7D:CD:58:2E:29:0D
            X509v3 Authority Key Identifier:
                keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ed:75:2d:fd:d3:dc:1e:38:5e:c0:f7:48:36:ea:8c:d3:64:
         38:20:40:6d:08:5f:c4:11:c7:b5:c2:00:65:dd:00:d7:32:fc:
         f3:e5:59:aa:ef:59:d5:2e:be:64:2e:42:5b:cd:28:8d:09:f0:
         95:f6:e9:7c:9d:77:01:5b:5b:24:ee:69:56:4c:de:8f:98:63:
         fc:34:6d:be:a4:b4:19:d3:17:5b:38:0a:1c:ab:35:c4:d2:7b:
         a3:93:53:4f:74:30:5d:c3:05:11:7f:73:25:81:93:55:61:48:
         20:fc:8b:53:a3:a8:af:04:28:80:98:64:08:02:14:9e:db:13:
         ab:d6:d8:7f:8e:b7:0b:b0:4e:80:19:9a:2e:9a:cf:66:d9:f0:
         b1:f5:b7:1c:fc:cb:76:f9:39:6f:73:81:84:db:b2:74:2d:29:
         50:c5:f5:05:b2:8d:a5:55:c6:f8:96:ef:b9:59:6b:44:38:fb:
         70:bc:28:a9:63:cd:6f:46:96:d9:bd:e3:bd:80:df:05:cf:ce:
         d3:53:4b:b9:c1:79:20:83:18:4e:4f:80:ce:d3:d9:80:4e:31:
         1b:a3:2d:c2:b2:a6:ab:b9:a4:c8:29:14:a0:a6:88:6e:cf:ba:
         d8:e8:97:1a:17:c7:d2:c8:8f:cb:17:15:4c:db:12:bb:86:dc:
         7e:8d:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:44 2026 by rpki-client