Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File:                     NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier:          Xz0iKWSiKW7mqgY3T5OTmP6iZw4w4pmpLmqYi+3QzAA=
Subject key identifier:   A4:BD:B5:A7:D7:0A:DC:68:6C:C0:27:62:22:55:C9:2A:29:AD:1D:0B
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer:       /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial:       019EB958F0BEE094E982A65F1E93394A19C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number:          1456
Signing time:             Fri 12 Jun 2026 01:01:14 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:14 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:14 +0000
Files and hashes:         1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: gdF6odqwOldBAYDv6WtOQUM55tUL07CQROzN1Tnbxuk=)
                          2: V7zILTB2Q-pYlyi3eY8DoHe2isQ.roa (hash: eKQMiPRx/4+RtnWyLpZUOeXgKgQPc83Xq2zBPDEL1Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:f0:be:e0:94:e9:82:a6:5f:1e:93:39:4a:19:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
        Validity
            Not Before: Jun 12 01:01:14 2026 GMT
            Not After : Jun 13 01:01:14 2026 GMT
        Subject: CN=a4bdb5a7d70adc686cc027622255c92a29ad1d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:93:b3:f1:96:ca:ed:ac:21:db:dd:ea:27:
                    8c:a1:dd:2f:f3:bf:df:7d:c3:a2:e7:3f:55:fd:a0:
                    3a:33:24:91:33:2b:9e:19:75:c1:80:b7:42:db:27:
                    c0:0e:02:f1:79:f3:ee:e2:a5:1a:cf:db:73:90:6b:
                    79:6f:e1:71:65:28:24:9d:00:a1:10:76:6a:0e:d8:
                    b7:e7:08:30:17:97:ae:14:50:99:ee:5d:f8:ee:aa:
                    02:db:93:cc:61:0a:9e:93:0b:b5:ca:70:80:ae:01:
                    7b:f6:37:9d:91:95:70:94:9f:2e:7d:02:7c:0c:71:
                    47:8c:f6:4d:18:b8:6c:0d:41:56:d3:be:b5:9d:d9:
                    9d:58:af:41:63:43:80:e0:99:c3:33:8f:54:5e:bb:
                    94:09:da:0d:4d:53:ac:7f:3e:93:d1:9b:da:44:4f:
                    b6:14:c7:f6:45:8f:c5:01:aa:21:9a:4c:2b:98:40:
                    03:b3:fa:dd:08:af:c0:32:fa:11:21:c7:0f:85:53:
                    e3:9b:30:aa:40:e0:32:ac:4c:fe:a5:88:22:cb:8a:
                    8d:84:27:e8:80:71:08:2d:fd:45:58:26:93:7e:8f:
                    1d:bf:0e:cf:d2:88:13:f7:48:ea:ba:8e:68:0e:b0:
                    6c:bb:b6:d7:85:ef:11:3e:22:fe:3e:fc:54:07:87:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:B5:A7:D7:0A:DC:68:6C:C0:27:62:22:55:C9:2A:29:AD:1D:0B
            X509v3 Authority Key Identifier:
                keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:b6:e0:42:09:5b:26:44:90:eb:29:37:08:59:b5:3b:60:
         0a:86:04:8e:48:9d:f2:7b:25:f2:9a:fe:2a:8a:cb:f9:c3:48:
         f7:f8:3a:ca:e8:f3:0a:5d:08:bf:a1:08:f0:19:36:7f:b4:2f:
         92:c2:52:3c:97:da:1c:e1:38:6b:14:5c:74:b7:5e:f3:08:d8:
         b3:e2:cf:27:02:b8:a7:ec:96:61:12:0d:32:27:4e:90:b6:ec:
         13:74:5d:d5:8b:9d:b8:39:45:c6:eb:54:5c:af:04:16:70:99:
         72:64:b4:d0:83:94:26:4b:35:f5:0c:96:17:f8:1a:3f:67:43:
         2f:36:63:32:b5:75:b6:dd:91:df:87:67:ff:30:1e:a2:91:a7:
         4b:ed:89:91:43:44:db:ea:7c:78:c6:78:4e:4e:8c:89:21:f8:
         d3:6f:ec:cc:eb:50:e8:49:8a:b6:0c:95:d4:5c:e5:cf:f5:84:
         15:16:28:9e:58:97:36:ef:76:9a:0d:0a:56:cb:69:36:54:19:
         9f:49:d2:99:9a:e1:5d:b8:91:9c:a4:75:16:c0:35:79:c2:dc:
         df:bd:07:c4:37:41:40:7b:6c:9f:4e:da:8f:80:6b:3c:2a:f5:
         1e:47:b1:7d:0d:38:93:8c:a7:c1:c9:2d:10:b8:dd:4c:32:a7:
         f7:30:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:00 2026 by rpki-client