Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          HAPrKJSr0ENkAw0FKLXKGWzTQPyVIjM5xbElM9ldcBU=
Subject key identifier:   6B:6C:30:CE:59:79:8F:2C:1A:8A:5C:26:25:DE:F6:2C:81:83:25:41
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       019F1AFAC159B34FA8230439BCB6D3BEB79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          1985
Signing time:             Wed 01 Jul 2026 00:01:08 +0000
Manifest this update:     Wed 01 Jul 2026 00:01:08 +0000
Manifest next update:     Thu 02 Jul 2026 00:01:08 +0000
Files and hashes:         1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
                          2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: mDMCHaXn2wRTuObF3Gl6PlIqxxBctyUc3Iu3BIgafac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:c1:59:b3:4f:a8:23:04:39:bc:b6:d3:be:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Jul  1 00:01:08 2026 GMT
            Not After : Jul  2 00:01:08 2026 GMT
        Subject: CN=6b6c30ce59798f2c1a8a5c2625def62c81832541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:2e:4b:0f:2f:56:5a:3c:5b:28:ed:2c:b4:
                    38:c9:ff:f8:7f:a0:5a:9c:55:da:6d:73:e1:ff:69:
                    3a:d9:4a:5c:c0:9a:ed:d3:97:e6:f6:03:cd:5e:aa:
                    87:bc:f3:3a:01:f2:71:54:77:b4:98:b1:9c:ae:3c:
                    c8:44:04:87:e4:cb:fc:04:1e:18:50:4d:62:3a:c0:
                    0f:2f:a9:54:ac:19:35:c1:b8:5b:4b:cd:ca:37:a8:
                    5b:5d:49:97:f8:41:2c:70:3e:4a:90:3b:f0:61:9b:
                    12:e2:1e:08:dc:c7:45:d2:88:9c:01:b9:f5:79:2c:
                    c4:ae:e0:2c:b6:43:d5:df:f7:71:c2:ba:42:41:ba:
                    3e:1a:cc:5c:f4:b9:37:1e:54:d1:b5:0e:43:f5:0c:
                    9e:5e:57:88:f7:d1:59:a7:bd:31:fe:f9:bd:67:e3:
                    4a:bf:ff:fb:e2:36:f7:ee:1a:77:c5:b0:3b:76:3b:
                    d2:9f:07:72:48:91:4c:5c:11:2f:70:f6:f7:0b:00:
                    68:f0:fb:eb:45:d3:8a:42:06:6a:4b:40:30:b2:58:
                    cd:d4:68:88:6c:5a:c1:4b:e5:f1:c1:ee:4f:e1:c5:
                    09:30:8d:f6:02:5e:32:00:2c:da:3d:84:16:e2:91:
                    4c:7f:90:14:bf:4e:3f:52:fe:a8:e0:ba:4f:bb:b3:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:30:CE:59:79:8F:2C:1A:8A:5C:26:25:DE:F6:2C:81:83:25:41
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:04:41:36:29:58:f8:b0:d1:e7:91:91:78:d7:af:09:1a:c2:
         76:59:95:1e:fe:a0:b6:44:ba:89:cf:d7:e2:25:2e:54:47:35:
         84:bd:8f:a3:92:5c:d5:f7:e8:b9:08:8a:3d:54:2b:5d:95:8a:
         91:24:a1:d7:ca:4f:95:03:db:ca:2d:78:34:f7:76:45:0a:fc:
         07:20:e0:ed:2b:2e:b5:15:f0:73:57:0b:4f:00:8e:44:c8:6c:
         d5:ef:69:67:00:5c:21:3b:dc:8b:77:95:92:03:6c:6e:a2:8c:
         99:73:fe:94:ec:16:f1:00:e5:9d:fd:f8:7b:21:9f:25:df:f8:
         b5:96:80:2c:48:d5:16:e1:4e:d4:aa:1d:94:a6:28:eb:67:7b:
         c2:31:df:3f:1c:6b:ee:a3:17:38:91:4a:c1:f8:e6:25:6f:48:
         53:14:db:59:23:3c:50:d5:da:8d:6a:18:f1:43:de:26:02:fa:
         30:13:e7:6e:b4:af:79:a2:e9:9e:c9:7c:6b:38:7d:70:c8:bd:
         f7:d4:68:50:c3:91:bb:a4:93:9f:b5:2e:c9:84:a5:b2:7d:71:
         fa:78:81:29:63:6e:ee:34:a6:35:87:74:6e:92:af:1d:f6:50:
         20:16:7d:5b:11:45:7d:c2:b0:aa:1a:c7:b3:3b:a6:07:dd:3c:
         fb:a7:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:13:00 2026 by rpki-client