Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          5n5p0R55FEA72slestliaWxWxNs4Tz5DGhg7MqeX1Q8=
Subject key identifier:   46:37:CB:70:44:8A:07:5A:87:16:0B:14:C6:95:80:FD:EF:1F:21:D4
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       019EB80F65C0D1AD6A5C1CBF068127993360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          18E8
Signing time:             Thu 11 Jun 2026 19:01:17 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:17 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:17 +0000
Files and hashes:         1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
                          2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: fL4bEXOeD8Sno7rnmmDBNSL8/5S48b5k8wXCLNHJN8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:65:c0:d1:ad:6a:5c:1c:bf:06:81:27:99:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Jun 11 19:01:17 2026 GMT
            Not After : Jun 12 19:01:17 2026 GMT
        Subject: CN=4637cb70448a075a87160b14c69580fdef1f21d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:2b:36:24:80:f6:5f:0c:1a:9e:41:a3:71:
                    6e:41:84:22:88:f8:aa:db:61:9c:2f:3f:aa:c9:04:
                    b3:d9:95:10:7f:09:0d:87:7b:76:40:95:d0:4b:c0:
                    8b:02:5b:75:59:91:a0:54:6a:2e:e2:61:c5:1a:4c:
                    20:bb:d6:08:34:a0:63:f2:c2:c9:b2:ad:45:ff:9f:
                    90:93:34:8c:49:f8:24:5a:d0:b3:62:e5:fe:24:ee:
                    1a:c2:d7:1e:32:26:c4:72:bf:a2:9b:d4:9f:d1:72:
                    aa:32:76:67:08:98:22:68:02:92:39:b4:9b:a0:c9:
                    90:9f:a9:05:43:5d:92:ca:06:ee:84:a9:6c:2c:17:
                    98:d8:f2:59:ce:fd:64:67:e4:12:f7:62:e0:62:38:
                    6f:a1:c7:d3:3f:b8:c0:57:09:1b:20:35:e0:01:5c:
                    a2:3c:19:34:46:5b:5e:42:3f:3c:42:ad:47:95:48:
                    1f:cd:0a:5e:a9:06:e0:98:2c:0f:5d:63:37:32:4f:
                    45:4c:3f:67:e4:4b:1a:34:ab:da:bb:79:4d:cd:e2:
                    21:0f:44:3f:af:c7:86:45:8c:08:85:02:de:62:07:
                    fc:43:0c:52:c6:c2:26:3f:8f:42:d9:4c:b0:75:5c:
                    97:fe:66:e6:eb:02:f1:9d:98:7f:6b:80:6d:7e:cb:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:CB:70:44:8A:07:5A:87:16:0B:14:C6:95:80:FD:EF:1F:21:D4
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:ee:88:46:c5:2b:89:16:ce:07:71:ac:39:45:88:e4:a0:
         17:5a:ce:bf:52:a6:af:bf:27:0a:e8:e1:9c:98:1e:8a:ce:49:
         80:93:dd:50:9a:aa:df:07:fa:5a:15:f9:22:8b:58:4e:b5:f1:
         a4:32:5a:9d:92:7b:62:70:eb:be:d6:62:79:1f:e8:92:b3:91:
         16:a0:5e:2e:22:0e:78:16:65:1a:db:cd:1a:c1:ef:44:91:91:
         d3:06:49:c8:0c:36:57:0d:4e:ed:2f:c0:6a:2b:af:a6:c1:6f:
         dc:7e:9d:bb:be:68:a2:de:ed:81:26:0e:cd:75:eb:0b:5e:93:
         6c:0a:21:fc:5a:a6:b1:5a:4c:4f:19:78:91:12:52:91:99:75:
         34:11:eb:1b:b3:c1:02:54:8e:2f:43:7c:a9:07:9b:4c:40:36:
         6e:62:a7:d6:f5:c3:c5:70:33:d4:0e:9a:2e:18:7e:6f:14:2b:
         d6:4b:69:9f:cc:f5:53:c6:17:e6:51:c5:5e:d7:d9:fa:9b:50:
         c6:60:64:b3:19:b7:1a:7d:ea:9d:74:c5:0e:f5:ce:9f:57:fc:
         c8:cf:51:b5:ed:2f:b2:46:c6:0e:ac:bb:39:13:3b:34:f6:7d:
         ad:fe:9a:5d:c2:86:62:4d:7e:55:a5:32:3f:2f:44:ea:8a:d8:
         fa:7e:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:41 2026 by rpki-client