Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File:                     nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier:          vRij57r5vLMMc29QcMwLztmXr6OOtFE8YSzLiMJFZ2M=
Subject key identifier:   6B:38:59:BC:3A:4F:34:2A:30:33:D3:61:A3:BC:C9:60:FD:47:50:AF
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       019F111C25AE46877F288A964EE66AC4CD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number:          1981
Signing time:             Mon 29 Jun 2026 02:01:25 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:25 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:25 +0000
Files and hashes:         1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
                          2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: CiH2qWQ2C13dYQSy1rWC6OreL6Nx/O5iGHJrP9KqwLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:25:ae:46:87:7f:28:8a:96:4e:e6:6a:c4:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: Jun 29 02:01:25 2026 GMT
            Not After : Jun 30 02:01:25 2026 GMT
        Subject: CN=6b3859bc3a4f342a3033d361a3bcc960fd4750af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:cc:84:17:2b:2f:4f:e6:39:15:e2:21:4d:
                    26:5f:ca:6d:f6:c6:69:36:07:14:8d:2a:fe:5a:86:
                    34:4d:33:a5:c1:32:73:a3:20:fa:1d:02:1e:31:55:
                    66:b9:c7:ef:59:9c:f9:85:4c:91:32:7d:01:d8:1a:
                    bb:33:1f:78:51:35:9a:ab:b2:cc:63:02:6f:d3:66:
                    0d:8e:62:2d:16:3f:b6:d5:e8:5d:70:45:fb:c0:5b:
                    0f:59:7f:65:f9:48:c7:7d:89:b3:51:1f:23:5e:4f:
                    d4:9a:d0:76:b0:14:a3:0e:83:e7:ae:d9:30:63:c5:
                    96:85:bd:25:52:49:bd:7c:f3:e8:51:37:5b:d2:d5:
                    b5:be:67:9d:27:0e:8c:e4:90:4f:be:e1:f2:88:99:
                    c2:66:cb:f3:62:fa:88:c0:ba:54:6b:53:c6:ac:0d:
                    76:a2:11:6e:ee:87:e0:61:d7:df:fe:3c:2d:ff:45:
                    6d:46:57:d3:10:2e:05:6f:81:a7:6e:d2:bf:96:b9:
                    52:b1:08:02:f2:fc:ca:7c:b5:a0:e8:4c:05:23:59:
                    fe:c6:31:95:a0:69:11:68:db:06:ca:54:29:e4:f9:
                    4d:5b:cd:b9:1a:d5:f7:9e:fd:bc:de:0c:9c:c2:50:
                    60:4e:97:d8:79:24:cb:d6:12:1c:9b:bd:78:93:e7:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:38:59:BC:3A:4F:34:2A:30:33:D3:61:A3:BC:C9:60:FD:47:50:AF
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ee:b2:1e:58:35:46:1b:a7:13:1f:b3:eb:5c:14:23:b8:2b:
         2d:38:89:0e:00:76:b5:82:18:ab:6e:1b:98:a5:10:2d:77:9d:
         9f:96:f3:ba:2e:ba:05:31:5c:96:05:20:1a:69:35:b1:bc:46:
         09:65:21:b7:cf:21:09:1b:3a:e2:23:23:dd:72:ad:5b:89:44:
         c5:fc:72:5b:50:cc:a3:5f:37:1b:61:f8:14:8e:8e:c6:b3:49:
         c3:29:f4:c9:61:0f:42:2d:8f:f2:f4:72:92:28:47:5a:6c:50:
         4e:14:d5:4f:e0:15:2c:bc:f2:3e:a0:c3:62:b8:73:08:4c:26:
         8a:e8:e4:f6:66:1b:54:0e:c2:98:a3:79:7c:49:bb:26:5d:dd:
         6a:3b:32:51:1d:f5:3f:66:bb:c0:8f:35:a0:2d:50:87:c6:91:
         3a:91:84:ae:e2:a8:59:24:13:5f:5a:f4:c2:e1:ea:67:95:3e:
         1e:8d:ee:0b:b3:24:0e:c0:08:e4:14:5d:c8:4a:86:36:8f:b3:
         02:73:cd:29:dd:2e:93:7b:f4:19:82:a7:45:a2:c3:ef:f6:1a:
         60:1c:cf:33:17:ce:d2:d6:b5:18:53:ed:e4:e5:0a:11:a7:0d:
         80:95:db:e2:5c:f9:f7:97:d4:b1:8a:41:4d:16:84:cc:8f:f7:
         d7:0f:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:52 2026 by rpki-client