Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          RTYvAgt9+ksScqdPch2I2nbo6+cvSmIOSqWYQeWmyYc=
Subject key identifier:   1E:5E:E9:2F:9A:07:41:6F:BA:15:3F:2D:9C:E2:17:77:0F:4C:54:5D
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       019EB8EA34A1A60704A243088EDA3F1B4630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 23:00:17 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:17 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:17 +0000
Files and hashes:         1: KCT3SvLM78fZHK_bwx-01sokz2Q.roa (hash: OoFA7HfGIfDwj/WUeEPXL8zVfd0rTjqyDSVQwZXvdKY=)
                          2: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: PvhXKFoA66Y6GTNQ7Cgg6LKJsb9BwtVFXh4ylPvYYKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:34:a1:a6:07:04:a2:43:08:8e:da:3f:1b:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: Jun 11 23:00:17 2026 GMT
            Not After : Jun 12 23:00:17 2026 GMT
        Subject: CN=1e5ee92f9a07416fba153f2d9ce217770f4c545d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:18:73:40:63:82:b3:31:77:fb:8a:23:ac:
                    99:68:ea:f5:91:92:e5:93:73:10:88:4a:bb:9d:2f:
                    ce:81:89:14:ee:ba:ee:a2:a6:be:a9:5b:c2:74:32:
                    f1:6d:83:7b:f6:5a:93:c4:70:d9:cd:84:66:f6:a5:
                    52:d4:e7:64:76:8b:14:6b:9d:5d:89:f1:77:b4:5a:
                    48:74:b6:d1:f5:0f:a3:42:b0:d3:ba:fc:08:5c:29:
                    3d:e5:6f:c2:f1:d1:92:e7:d8:54:6a:5a:6f:69:61:
                    aa:3e:99:6e:00:c0:e2:71:f4:37:14:59:a0:fe:e1:
                    bf:8f:41:f6:12:f9:56:bc:0a:88:d5:c0:b4:6e:e2:
                    3a:a5:f4:0a:eb:96:9b:25:1e:ac:05:37:bf:05:67:
                    f0:12:af:b9:60:a3:7e:1d:f6:da:42:2b:f1:bd:d9:
                    5b:5e:76:e9:ab:63:ce:c9:21:08:5c:25:58:26:31:
                    44:0d:04:f0:af:6f:c2:f5:f4:a8:87:7f:62:62:61:
                    12:16:c5:c9:ee:ef:0e:76:77:be:51:b0:dd:47:50:
                    09:71:ba:8c:0b:c1:41:9e:83:f6:b0:3f:c9:28:a8:
                    9b:d7:95:7c:ca:c0:04:b9:5b:78:c3:2f:39:1f:e6:
                    08:93:6c:b5:70:63:f1:81:b9:fc:fd:d9:20:01:08:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:E9:2F:9A:07:41:6F:BA:15:3F:2D:9C:E2:17:77:0F:4C:54:5D
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:aa:6f:b0:70:b8:47:f8:ca:39:49:00:2c:bc:ce:83:79:
         72:79:95:cf:3a:3f:7a:3e:b2:7a:ad:7d:1c:79:db:16:f0:e7:
         d8:87:bb:f1:97:be:1c:40:6b:24:de:4b:0d:e5:5a:ce:b0:e4:
         c0:80:f0:4e:b4:24:a5:a4:fb:94:89:be:fd:0d:6d:f8:cf:fc:
         65:19:f4:69:11:39:0d:29:de:af:f6:d2:78:0f:83:d8:69:15:
         8e:82:40:57:ae:05:be:b5:9c:21:17:a7:89:65:25:2f:57:1e:
         3c:b6:97:7f:72:25:1d:35:27:07:2a:d6:6e:84:97:0c:4d:ea:
         cd:e7:51:73:50:0b:56:bc:b4:e1:37:5c:65:b4:17:3f:19:cf:
         4e:fa:52:0a:64:ff:ec:e4:c1:c6:fb:09:26:c9:c4:ef:45:3f:
         23:bd:76:ef:53:04:d7:9f:78:e5:70:20:3a:86:f5:35:f4:1c:
         8d:12:93:f2:09:24:e4:67:51:d7:7d:ba:ed:f5:6d:39:68:3a:
         44:93:03:2f:74:33:6f:0d:91:8a:f7:c1:3a:77:7e:56:3b:66:
         e4:33:4e:ec:43:13:f5:06:de:e5:e2:e8:34:f4:16:d5:8d:5d:
         69:eb:bb:e7:26:78:0d:37:56:50:e7:a2:d4:7a:65:86:2d:9f:
         97:97:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:11:41 2026 by rpki-client