Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          /cPBWDmcK+5Oh5/ilOiNu7b0BA+vMj51ZCOKK4j3S74=
Subject key identifier:   0A:FE:4A:C0:16:E3:33:B7:F5:31:D7:8C:CB:0E:8C:0D:AC:26:BF:26
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       019F10E5204CE3880A1F480652C991E6578E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0BC7
Signing time:             Mon 29 Jun 2026 01:01:19 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:19 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:19 +0000
Files and hashes:         1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: UshH00aq/zCJUQrbOBNZFY+VyebHi8QWEHODo0bpWBs=)
                          3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:20:4c:e3:88:0a:1f:48:06:52:c9:91:e6:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Jun 29 01:01:19 2026 GMT
            Not After : Jun 30 01:01:19 2026 GMT
        Subject: CN=0afe4ac016e333b7f531d78ccb0e8c0dac26bf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:c1:63:dc:8d:8f:78:f0:52:88:2e:d4:43:
                    ae:80:3e:de:41:bb:13:e4:44:b8:e7:bd:40:71:f9:
                    9c:ee:55:bf:10:46:bd:fa:6d:d1:e2:1d:8f:2f:23:
                    f7:5f:f7:fb:af:75:ff:86:c7:cb:8c:00:c4:d1:e2:
                    4a:69:f4:fc:43:d6:e8:23:6c:f4:c8:12:2f:76:a7:
                    ab:aa:55:38:4a:15:ba:83:20:32:0f:25:36:14:f1:
                    91:c9:67:93:de:b9:2c:14:41:be:b8:90:59:dc:12:
                    c7:29:bf:dc:3d:0a:60:0f:b3:9a:97:27:d7:bf:1d:
                    53:fe:0e:0d:37:69:fc:57:8a:24:98:ab:e3:6c:97:
                    6c:a0:e2:5c:81:05:30:35:eb:5e:98:31:e1:79:4e:
                    f8:d7:34:5d:fc:4a:07:73:25:56:a6:8d:d8:44:58:
                    ca:c1:8e:e7:27:d5:7e:63:6d:1b:2a:a6:6a:10:12:
                    3b:18:44:41:44:55:52:8e:d2:7c:cd:90:ff:42:62:
                    48:9d:46:7b:e0:4e:fe:d5:59:b4:63:3f:10:f7:9f:
                    71:6e:82:29:69:6a:60:b5:0c:c6:e8:3b:f6:3d:fe:
                    b2:bf:8a:5a:8a:90:62:5c:de:5f:0a:7a:a3:5f:b3:
                    41:d5:c4:1a:8a:bf:97:ff:ba:f6:0c:bd:bd:d3:3b:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:4A:C0:16:E3:33:B7:F5:31:D7:8C:CB:0E:8C:0D:AC:26:BF:26
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3f:d1:6a:09:01:f5:33:32:04:86:cf:da:2e:70:76:1c:c7:
         fe:f0:31:a6:5e:f9:15:af:c3:a1:be:ac:13:56:03:f9:60:7f:
         0a:e8:68:e2:1b:49:76:12:61:3c:40:12:43:1a:09:73:34:12:
         c8:e1:93:a4:f4:5d:6c:79:ad:97:27:d2:28:28:7e:b1:50:67:
         85:92:c0:ff:51:5c:85:7e:f1:77:1b:34:58:21:fb:f5:65:be:
         bd:d5:cd:d8:be:e9:e1:db:91:61:80:2e:81:a3:81:bb:96:52:
         a6:fb:31:b4:22:82:eb:a1:b2:4c:cd:80:09:6f:5a:be:76:f4:
         87:ec:85:4a:c5:ff:11:a0:2a:a0:32:76:38:72:b1:af:5a:88:
         29:94:cb:2d:52:4f:aa:a6:ac:12:1f:0d:71:56:36:69:78:6a:
         9f:eb:8a:11:d8:d1:c5:6b:43:63:1e:8e:76:cb:87:60:c6:43:
         33:0f:af:64:e2:87:2f:67:30:ba:c2:c2:82:e4:5e:23:b0:f4:
         95:2c:4d:a0:c6:01:b8:aa:47:fe:94:aa:b1:65:a4:71:7e:ad:
         5e:7d:41:74:85:58:b9:12:d8:1a:41:6c:78:f5:fa:92:6c:eb:
         a0:65:45:24:c0:56:25:41:c9:59:34:c0:88:07:75:7e:19:93:
         35:53:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:13 2026 by rpki-client