Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File:                     Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier:          9lJWR11fORG0L0xJbx9+GT3kdMSd2NU90X4Gq4OQvPI=
Subject key identifier:   51:E3:B0:71:D9:DE:D5:5F:7B:E5:70:3B:F7:F3:97:22:75:33:B5:96
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer:       /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial:       019EB958A63C3E95D14DA35DA2D751F62F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number:          0567
Signing time:             Fri 12 Jun 2026 01:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:55 +0000
Files and hashes:         1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: jv7OpXUIsRLdDZV/Kub4Yi3N5FXb8f8IfF+RzP1oxJk=)
                          2: m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa (hash: JyQkpr8DHxnP4GkQcPbRn8ESMBpHk6iJejQz7SBKaYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:a6:3c:3e:95:d1:4d:a3:5d:a2:d7:51:f6:2f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
        Validity
            Not Before: Jun 12 01:00:55 2026 GMT
            Not After : Jun 13 01:00:55 2026 GMT
        Subject: CN=51e3b071d9ded55f7be5703bf7f397227533b596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:5d:0d:11:9d:dc:f8:42:a1:79:1a:9f:b3:
                    86:6c:61:42:40:ac:f5:ae:57:a8:e1:01:bb:98:09:
                    04:db:7e:05:de:8d:1f:04:28:34:42:3d:bc:72:cb:
                    40:84:ac:8c:3b:86:41:d8:ff:62:09:2c:c5:b8:a6:
                    60:9c:52:bb:d7:b9:06:2d:1b:2d:48:18:23:58:32:
                    a5:6a:22:91:c1:00:2b:7e:4f:6a:ed:cd:68:ea:90:
                    14:29:78:45:dd:e5:05:41:4f:f0:b7:3a:98:06:ab:
                    a0:fa:f8:0a:b4:d2:2a:1a:d5:86:78:39:56:9a:e6:
                    74:15:a1:b8:16:dc:82:98:41:35:7d:7c:6e:a9:fb:
                    08:3f:39:82:69:a0:11:eb:f6:bd:8b:ea:92:95:c5:
                    b8:7a:89:83:28:92:1a:e1:e8:67:8d:fa:4a:3e:2b:
                    1d:5e:81:8b:4f:89:f7:87:16:cf:e3:b2:33:18:3c:
                    86:93:61:19:af:31:6d:fe:bf:f4:fd:18:da:50:68:
                    6c:d5:73:52:7a:d4:a1:6d:e6:4f:78:05:08:fa:87:
                    fc:44:96:ec:c6:7f:c7:10:bd:0a:c9:5f:01:37:ba:
                    7b:34:f4:3c:9a:ae:c5:b0:d4:00:38:4a:36:1f:87:
                    f2:c5:7e:a0:97:48:ef:ae:4e:ae:67:c3:45:30:86:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:B0:71:D9:DE:D5:5F:7B:E5:70:3B:F7:F3:97:22:75:33:B5:96
            X509v3 Authority Key Identifier:
                keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:16:2b:4a:4e:3f:3f:90:e4:bd:2d:8e:01:c9:3f:a4:42:b3:
         9f:10:4a:b5:22:53:06:8b:43:8e:14:c5:80:a3:d0:ef:78:d0:
         36:b8:8d:08:98:62:e4:f5:ee:c5:a4:e2:b9:fc:02:34:2d:aa:
         74:8e:f5:d1:c6:19:4c:3b:5b:81:62:cb:03:51:41:c0:18:3d:
         10:57:d9:c9:fe:97:49:72:95:7a:25:dc:24:ea:ef:10:93:ce:
         fc:46:a3:be:b5:8c:4d:47:17:3a:bb:2d:b5:37:22:13:56:e2:
         ce:a0:58:27:ca:de:e1:68:dc:48:db:9d:4b:46:13:75:ff:e9:
         f6:1a:ad:ca:21:5f:75:4a:7f:94:ca:11:75:5d:92:28:52:30:
         51:80:4f:75:bc:67:3e:58:5d:fd:2d:dd:e7:21:73:ec:2a:b1:
         24:8b:65:50:f8:d3:ed:22:09:fd:ac:d8:a3:aa:06:66:00:34:
         c4:a0:73:7b:76:4c:74:50:1f:6d:ca:e4:0a:dd:5d:38:89:8f:
         46:11:f3:e8:fe:db:27:d6:90:e1:7a:5e:a4:9e:68:ed:cc:f5:
         e7:20:fe:03:3e:7f:11:de:9c:66:36:6d:34:1b:26:90:53:db:
         63:b5:b9:d3:34:4a:88:59:cf:52:22:ea:d7:10:7c:d4:a9:b9:
         2f:98:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:14 2026 by rpki-client