Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
File:                     NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft (raw, json)
Hash identifier:          417lU/zHmB8ayo8ysR+wbRnmb8W5nso6qowf5WojHIc=
Subject key identifier:   68:DE:7B:98:DA:87:7B:CC:54:B7:9A:B5:6F:D6:8C:D0:97:2D:46:83
Authority key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Certificate issuer:       /CN=36f6ee6d32790e498950d63877b0321232a7f833
Certificate serial:       019DA0E4A76E4FA5BD2E145D39D32C1102BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
Manifest number:          08
Signing time:             Sat 18 Apr 2026 14:00:32 +0000
Manifest this update:     Sat 18 Apr 2026 14:00:32 +0000
Manifest next update:     Sun 19 Apr 2026 14:00:32 +0000
Files and hashes:         1: NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl (hash: C6xZCNul3zCvbMhW9Ae/PvwF1yj1RPxfhZTZvlVIuO4=)
                          2: yBl-iSaUfI7bcxIhJeIgiImqRKo.roa (hash: 9dLNN0+YEJaEEsS+kzacLskIpN4LaeoKWqYx0OkBv1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a0:e4:a7:6e:4f:a5:bd:2e:14:5d:39:d3:2c:11:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f6ee6d32790e498950d63877b0321232a7f833
        Validity
            Not Before: Apr 18 14:00:32 2026 GMT
            Not After : Apr 19 14:00:32 2026 GMT
        Subject: CN=68de7b98da877bcc54b79ab56fd68cd0972d4683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:c2:15:ec:fe:9e:53:1a:d9:e5:b9:7b:17:
                    cb:0c:53:b8:56:94:15:e9:d5:6d:b4:f6:df:20:9b:
                    45:d7:ec:d2:a8:11:81:98:cc:7d:b0:72:f5:92:6c:
                    8f:58:44:51:2f:25:41:0d:49:77:fe:8c:5d:f0:7e:
                    b2:ec:f8:65:69:97:3e:ef:4f:95:4f:f4:a1:33:31:
                    59:d3:c1:93:b3:31:2a:90:10:3a:c5:01:ac:d0:a3:
                    2d:c8:d2:9d:1e:7c:e1:6e:7d:84:ef:f1:86:a3:e8:
                    82:6b:9c:f7:f1:9d:11:bb:d6:7e:23:c6:e4:78:50:
                    02:5f:6f:ca:4d:b3:48:a6:07:2b:4e:9f:0b:58:4f:
                    9e:5b:c4:47:88:de:e1:69:da:b2:e8:d9:0a:ba:62:
                    bd:f3:e0:9a:5a:18:60:ad:c4:ad:73:d3:5a:c6:1e:
                    97:67:37:23:2a:09:20:f1:40:43:fe:1b:7e:2f:09:
                    93:91:05:2b:bd:17:09:ae:a6:7c:b3:83:5c:eb:58:
                    4a:7f:9c:90:9d:19:75:6d:06:91:d8:62:4e:34:45:
                    3c:73:ea:3f:80:78:6f:c9:aa:6a:91:50:d2:bb:e6:
                    68:c9:fd:87:d1:dd:e5:94:31:1d:2f:87:4b:76:c1:
                    2e:f9:e7:ee:58:40:4b:ce:f0:19:6d:a2:07:ae:53:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:7B:98:DA:87:7B:CC:54:B7:9A:B5:6F:D6:8C:D0:97:2D:46:83
            X509v3 Authority Key Identifier:
                keyid:36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:58:c9:2e:85:90:31:0c:d0:63:d6:94:1e:61:d9:c6:51:
         17:a3:7d:18:93:5e:5a:ba:3c:0d:bc:6c:1a:ec:7e:09:39:61:
         dc:d9:82:40:b7:79:7a:60:3c:2d:4f:55:cd:fc:6b:b5:cf:24:
         05:97:06:5c:a3:3e:f0:39:38:66:00:31:7a:d1:9a:b4:88:a5:
         90:e1:16:e5:79:5b:da:60:13:f0:c2:f6:76:f4:16:74:45:74:
         ef:4c:30:bd:3c:ce:42:f2:a4:c1:9a:89:5e:0d:d5:5a:8e:01:
         e1:42:e3:5c:35:c8:84:b6:49:8b:55:d7:34:98:39:08:63:09:
         b4:10:29:bd:94:5e:35:3c:18:e0:cb:e0:58:08:53:2b:da:2c:
         c2:72:70:59:8b:e4:79:40:52:02:be:c6:a1:21:c1:4a:b7:6e:
         e9:e1:44:03:9f:83:31:d6:62:02:9e:2f:25:1a:4c:54:1d:09:
         74:33:e3:5e:a0:f4:cc:b5:c0:53:18:b9:0e:59:a9:39:d2:ff:
         7f:ae:55:cb:69:6e:60:f8:a6:3e:30:19:fc:c1:cf:a8:62:f2:
         8d:cc:23:0f:31:6d:bf:a9:9f:f8:0b:12:16:4c:7e:77:40:7d:
         5e:d9:46:43:c2:d0:c1:8c:8a:30:91:60:04:d6:10:71:31:54:
         d8:be:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:35:00 2026 by rpki-client