Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          IrDZQoZSH30zHKuKmO+KpKS3WSjoNT/1C4Ft70sJPH0=
Subject key identifier:   0F:D1:84:A0:D0:48:D8:C0:CF:43:C7:24:39:C0:48:49:F1:A0:A4:E9
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       019F19439B0341FF53DF2CC8C7DBFDA4A633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          0832
Signing time:             Tue 30 Jun 2026 16:01:28 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:28 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:28 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: l5Pvpbyyr4pz/cLYpuBZCVTurOukJpfHLUK2IsIMCxQ=)
                          2: G2J1mbO5SfOgCeh5sYzB_zBsUlY.roa (hash: yJMiIGusOoKDUJh8IDxxzE/Bfvy2Ug2/08WIutRLszo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:9b:03:41:ff:53:df:2c:c8:c7:db:fd:a4:a6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Jun 30 16:01:28 2026 GMT
            Not After : Jul  1 16:01:28 2026 GMT
        Subject: CN=0fd184a0d048d8c0cf43c72439c04849f1a0a4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:6b:a6:1a:d9:de:08:00:a2:2a:a5:15:74:
                    ee:64:ce:01:1c:a0:4e:9a:1b:af:42:cd:ed:59:5a:
                    63:b0:f6:16:94:e2:33:80:ab:09:eb:d2:e8:6d:54:
                    00:44:5e:aa:3c:1f:50:0f:d2:ec:4d:82:8e:5f:dc:
                    23:83:63:49:d9:66:4b:d0:54:8f:77:14:59:73:e9:
                    9d:2c:2c:65:3c:c6:48:94:74:3c:2d:14:a5:33:8c:
                    0d:cc:ae:76:45:a6:01:b2:96:6a:1b:8f:71:4f:06:
                    f3:79:c1:e8:a8:2b:a9:e8:d6:1a:10:5e:a5:18:7f:
                    13:58:25:6d:98:2b:20:eb:11:78:ac:f4:d2:0b:a8:
                    a1:75:18:d1:09:12:97:1e:d3:bc:f6:26:ce:73:f5:
                    8c:0f:d3:d9:75:fd:b6:37:bb:3c:ee:53:a5:b8:96:
                    59:d8:e2:8f:f5:16:54:c7:ea:1a:7a:78:83:12:91:
                    52:88:b5:2b:f6:e3:cc:24:97:1d:06:6a:99:bc:69:
                    97:a2:00:9c:5e:b7:77:fa:8f:60:61:28:87:71:0e:
                    5b:fb:22:4c:b2:db:bf:2a:d4:0e:f8:33:3a:8d:fb:
                    c7:58:6a:69:0b:90:d2:70:d7:a8:06:15:91:44:ed:
                    94:82:a4:c6:f3:0d:3d:9c:b6:9a:bb:95:5e:6d:96:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D1:84:A0:D0:48:D8:C0:CF:43:C7:24:39:C0:48:49:F1:A0:A4:E9
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:2b:16:68:45:34:ac:9c:2c:bf:9e:29:c0:e1:23:85:c6:
         16:63:64:c9:43:3f:5e:62:db:27:92:ff:f6:04:3b:18:6f:e2:
         92:c0:59:eb:c1:49:25:b0:85:96:8a:95:38:58:66:a7:64:04:
         33:42:0f:3a:81:dd:6c:04:3f:17:0b:7e:af:d6:55:58:4f:6a:
         a5:94:42:94:e5:6b:6d:29:4d:10:c4:eb:a5:fc:49:d1:ee:cf:
         75:ad:fe:20:aa:2f:25:f6:cf:81:4b:da:1d:16:b7:74:e3:33:
         08:21:74:a6:8b:28:2d:b3:0b:f9:f1:49:f8:d8:21:f2:71:8e:
         31:a9:3d:cf:c8:a2:96:5e:9f:d0:ac:2c:6b:a2:66:05:92:d8:
         03:d2:73:29:01:e2:68:55:ad:1e:f4:4f:5f:d7:74:53:0a:33:
         f2:b5:ae:4d:5e:27:22:e5:35:38:77:40:15:78:17:9a:a7:4e:
         47:3c:42:cc:62:9a:18:19:43:74:b2:8f:2b:f6:34:10:ab:5a:
         6f:b3:b1:10:6b:7e:01:d3:9f:66:af:c0:7e:3c:5b:bd:2f:2e:
         9c:c6:49:c8:54:ca:b4:90:ec:1c:83:2a:76:69:3f:85:3f:df:
         c4:16:f6:78:0d:b5:8b:74:67:b5:d2:f8:44:b3:85:36:26:6c:
         e9:95:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:49 2026 by rpki-client