Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File:                     nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier:          LLsW8jfitiUtjmdKi+n0+2gpLHM31m3le/7AXZCjX28=
Subject key identifier:   6E:AB:E3:57:01:FC:0F:F2:3E:90:1D:31:93:A0:88:DD:FF:29:34:10
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer:       /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial:       019E295DC3DDC874FEDF56CBB9E085EA932B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number:          1909
Signing time:             Fri 15 May 2026 02:01:11 +0000
Manifest this update:     Fri 15 May 2026 02:01:11 +0000
Manifest next update:     Sat 16 May 2026 02:01:11 +0000
Files and hashes:         1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
                          2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: rzfSVK2d4qoCK6CVOKyeKkjvoATmTbPn+02/3aifvwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:c3:dd:c8:74:fe:df:56:cb:b9:e0:85:ea:93:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
        Validity
            Not Before: May 15 02:01:11 2026 GMT
            Not After : May 16 02:01:11 2026 GMT
        Subject: CN=6eabe35701fc0ff23e901d3193a088ddff293410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:3b:83:81:40:d3:d8:1f:42:f5:94:b7:88:
                    0b:f4:87:26:3f:9c:43:32:12:a3:51:4c:09:7d:d8:
                    8e:24:19:6e:44:4e:27:a1:25:08:a9:50:7a:13:9b:
                    32:10:29:16:29:67:c4:68:7b:e8:58:39:4e:15:01:
                    2d:d2:34:1a:6e:cd:c9:11:cc:f3:8b:cc:f2:80:dc:
                    cc:8f:5d:22:44:cd:5c:81:e0:62:51:1f:32:bc:4d:
                    72:2c:2e:ce:db:a8:71:97:48:45:65:5f:59:e3:8e:
                    0d:ef:99:aa:12:2b:bf:99:d0:18:65:b4:49:d5:d0:
                    26:6b:85:f0:33:2c:af:dc:c2:aa:ea:14:07:08:eb:
                    75:d7:e4:ef:54:ec:0b:fa:53:93:78:27:63:54:bf:
                    a7:eb:40:a4:eb:fb:11:82:a7:a8:f0:53:bc:a7:88:
                    87:17:24:8d:48:83:6c:ce:b9:ff:0b:0f:44:ec:27:
                    33:00:a3:95:89:8b:29:d7:0b:8d:48:92:40:0e:92:
                    d5:c8:50:66:a0:59:b8:ce:5a:13:e8:7b:c7:02:ce:
                    b8:e0:85:6a:00:ff:32:5a:a5:38:33:59:b5:7c:29:
                    5e:bb:e9:d2:71:ae:6d:c7:96:db:17:68:4c:53:5c:
                    15:60:65:f6:e9:cf:b3:3d:a9:eb:97:fc:26:f0:81:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:E3:57:01:FC:0F:F2:3E:90:1D:31:93:A0:88:DD:FF:29:34:10
            X509v3 Authority Key Identifier:
                keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:98:9c:a7:4b:68:4d:8e:f3:df:b4:61:da:42:c6:f1:bb:
         7d:b8:20:cf:e2:35:98:d8:60:f6:25:ea:37:2d:70:78:79:fc:
         92:0f:62:3d:6d:ff:0c:09:8a:1e:99:3a:7b:91:77:b0:5c:a8:
         d2:6d:a3:d6:ab:94:24:62:1c:84:44:e3:83:b6:07:b0:a2:17:
         ab:3e:a2:2a:6b:fd:fc:bf:cc:88:eb:38:36:a2:96:37:3a:04:
         3c:f7:2d:82:a3:48:fd:f8:61:20:43:1d:5b:67:e0:27:62:9e:
         5e:91:33:ed:52:53:3b:57:11:2d:36:43:d9:a8:37:55:49:34:
         32:20:e3:f3:65:2d:76:5a:18:7f:ad:0c:a1:90:32:77:ee:47:
         82:16:f0:e4:21:06:fc:15:39:93:8c:7a:be:34:0b:5e:f3:22:
         3e:8c:a7:ea:a2:16:c8:f0:a9:c1:2f:db:06:ee:6a:8c:a0:f7:
         46:d9:06:f3:b4:8f:cc:c3:4f:1d:7f:7d:d7:56:25:c3:17:96:
         ad:22:33:f5:49:41:77:c4:39:57:07:98:38:13:e1:37:12:95:
         99:cf:5f:ea:d2:8a:db:42:95:b9:61:a7:82:05:b0:10:ad:30:
         ea:16:cf:b2:b6:76:57:d7:2f:74:c2:a3:a0:37:16:0d:9a:c3:
         94:ab:08:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:48 2026 by rpki-client