Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File:                     NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier:          xqNXnlz6Lj4aF0AAvMGIwzi4zqhUA5gKx+L/5ARegWg=
Subject key identifier:   75:11:5A:91:FC:70:55:9F:CB:DA:B0:33:FA:3F:2E:8F:1A:3C:14:FA
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer:       /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial:       019F129C21E6BE695C0A8FDB4C798B55EF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number:          019D
Signing time:             Mon 29 Jun 2026 09:00:49 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:49 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:49 +0000
Files and hashes:         1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: smKWJgzxcEgMDMFuRqlpXH2fGHhh9BTujUgS/isLAM0=)
                          2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
                          3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:21:e6:be:69:5c:0a:8f:db:4c:79:8b:55:ef:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
        Validity
            Not Before: Jun 29 09:00:49 2026 GMT
            Not After : Jun 30 09:00:49 2026 GMT
        Subject: CN=75115a91fc70559fcbdab033fa3f2e8f1a3c14fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:a4:ac:3d:ef:94:49:3d:9a:95:fc:bf:a8:
                    18:32:c9:2d:1d:56:e8:37:99:82:56:b7:9b:c5:32:
                    43:7d:f8:8f:68:f4:8d:06:be:72:1c:e8:28:34:32:
                    a6:0d:3c:a5:5f:bb:9c:02:82:18:31:3b:2f:d3:1c:
                    d9:56:ef:07:80:6a:bb:23:98:35:59:a6:18:5c:f9:
                    5c:d2:75:45:9b:aa:76:81:a2:34:12:41:2e:e4:bc:
                    28:d8:f8:53:04:2c:99:cf:f0:82:a0:bf:6c:ba:25:
                    60:a4:53:15:6d:42:73:d1:e1:37:01:9f:b4:86:d9:
                    03:42:2c:8a:d0:34:62:4b:ad:a2:c8:52:c1:73:d5:
                    38:49:49:f3:7a:a0:ba:1e:03:98:03:5a:82:a6:d6:
                    c2:cd:ff:b5:e1:f2:51:27:ad:7c:2d:20:6c:a4:0d:
                    8c:e8:fc:ce:49:ea:40:74:a6:28:f4:76:7f:fe:f4:
                    3a:58:75:2b:b1:58:a0:8a:83:0f:b5:2f:c3:e6:e9:
                    4b:e8:1e:31:c9:3c:74:34:30:40:c2:08:49:95:f6:
                    2b:89:19:22:92:24:25:93:0f:9e:35:c4:1f:fa:67:
                    af:d7:8e:c3:42:b5:38:ce:86:30:32:ce:5a:f1:54:
                    12:8f:84:95:6e:a0:24:12:e6:0e:1c:f6:ac:a3:ae:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:11:5A:91:FC:70:55:9F:CB:DA:B0:33:FA:3F:2E:8F:1A:3C:14:FA
            X509v3 Authority Key Identifier:
                keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:01:54:ad:ac:47:15:c6:52:3f:6e:84:44:f8:ed:69:f1:
         7b:ad:87:54:80:ca:50:e6:72:44:52:c6:3b:7f:23:bb:2d:78:
         4c:1c:c0:54:fd:ef:39:91:a7:ad:fc:7b:38:87:72:ae:a1:2a:
         2a:50:1a:0c:b9:aa:50:99:30:44:b7:ba:5a:b1:6b:37:cb:bf:
         c8:d4:22:79:56:21:f1:8f:cc:e0:21:e9:f1:f6:5a:42:b6:5b:
         82:86:c9:1f:25:20:44:60:bf:fd:ce:7b:74:5b:c8:49:65:c5:
         47:db:14:ca:03:29:d1:0c:9d:0d:a0:c5:1f:2e:3e:2e:1a:13:
         27:77:ff:77:8f:39:e8:9b:49:3d:41:f0:4f:0a:d4:26:4d:e0:
         bd:ff:f8:b6:72:b1:c0:90:d8:d7:d1:ad:5f:6f:2e:42:85:7f:
         25:8c:14:fe:e5:e1:f0:f0:7d:b0:ed:93:f4:73:f6:49:0a:ba:
         9e:aa:4d:72:53:ae:35:cf:3b:d1:58:b4:3d:e3:dd:28:28:fd:
         44:71:1c:de:81:13:f0:53:ef:f4:b2:7f:8d:05:c9:9d:e0:aa:
         58:36:e6:43:07:74:92:5b:de:d3:e9:69:11:23:fd:bf:5d:2b:
         e9:ec:03:24:a6:3c:33:ce:3c:61:89:7c:f5:0c:dc:d9:40:f1:
         91:e6:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:07 2026 by rpki-client