Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          ozrOBgcqFBmhKyBW6hFNJTQQKnvxd0ivSfEpyEZ+jbQ=
Subject key identifier:   DC:53:55:4D:67:C4:09:8E:4E:86:98:80:8C:31:61:C3:CC:FF:2A:AD
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       019F12D3C299B19900E3A826B7999483E8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0BC8
Signing time:             Mon 29 Jun 2026 10:01:35 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:35 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:35 +0000
Files and hashes:         1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: hVYbFGTARqiPn8joHMDDisinlNXWj1yAWR3jJHmKqSY=)
                          3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:c2:99:b1:99:00:e3:a8:26:b7:99:94:83:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Jun 29 10:01:35 2026 GMT
            Not After : Jun 30 10:01:35 2026 GMT
        Subject: CN=dc53554d67c4098e4e8698808c3161c3ccff2aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:aa:95:06:b9:40:81:93:7f:84:b1:9d:ff:
                    2f:a8:a7:c6:11:ab:28:b3:07:00:70:4a:48:ae:4c:
                    52:17:31:5f:6a:51:e6:a5:3c:3f:a2:69:b7:a7:9c:
                    9a:14:64:22:4a:3f:70:cb:c9:69:f2:2a:21:85:3d:
                    ac:f1:74:e5:64:73:b2:31:f7:22:da:75:ac:02:09:
                    db:b3:20:7f:18:25:66:91:1e:d9:3e:25:57:7e:94:
                    5a:6f:51:18:b9:51:3d:2a:e1:87:29:bc:61:74:26:
                    44:89:5e:ee:75:fc:52:f2:0a:69:c6:fc:37:40:4c:
                    a8:97:4f:85:cf:81:f2:bb:b3:ea:cf:4c:7d:45:29:
                    8f:93:56:54:ae:ca:b8:6b:58:97:90:2a:3f:f6:0a:
                    a1:e1:00:ed:53:32:ed:df:a0:13:5b:b7:0e:a2:cf:
                    f3:4e:74:6e:56:dc:9a:b3:61:ae:77:c4:8a:f2:45:
                    bb:14:95:45:b6:fd:3b:bb:69:1b:eb:e6:40:ff:2e:
                    c7:75:48:85:59:84:ca:ea:5a:18:e0:73:f4:65:2a:
                    a5:f7:78:6d:7b:bb:d0:7d:df:1f:84:e0:1b:1c:b4:
                    ad:f6:5f:f2:a0:06:04:18:29:b8:91:57:82:4c:ef:
                    63:97:cf:ac:14:94:d4:aa:21:66:4b:51:cc:85:56:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:53:55:4D:67:C4:09:8E:4E:86:98:80:8C:31:61:C3:CC:FF:2A:AD
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:7e:7b:b2:49:0b:a0:7a:f9:24:6c:0d:87:0b:db:f7:d7:
         e0:fd:99:6c:1e:6b:d4:6b:3e:c1:af:df:a4:98:ae:3e:3d:a9:
         09:41:88:e5:a4:4c:df:53:70:05:1c:e4:f3:60:3f:24:45:af:
         95:69:9f:63:73:eb:d8:75:62:09:c3:f1:c6:76:8a:aa:b6:7d:
         99:94:b2:0a:29:6c:08:c1:67:2b:67:a3:c8:5e:65:de:ef:e1:
         06:57:70:89:52:0a:03:91:91:19:b9:48:ea:ac:1c:3c:be:85:
         92:aa:63:c5:29:62:f7:3b:04:74:72:2e:34:34:d4:29:c9:b1:
         94:19:02:28:b4:4c:f3:64:c4:25:cc:84:83:4a:d1:d0:8c:24:
         7b:ac:29:30:88:4f:19:0e:73:6e:9b:39:19:94:a7:a5:9c:c7:
         19:8d:5c:fd:0b:db:0f:ae:06:31:96:33:5e:20:8c:ee:7c:7c:
         3e:08:db:b8:69:44:b0:f5:48:49:03:55:4c:a5:47:3a:32:1c:
         b6:f6:d5:bc:07:8c:98:43:11:85:58:03:8e:95:3d:ff:2f:f1:
         9e:1a:56:a1:a3:0b:a9:26:7e:98:c3:5c:8c:4b:b7:c9:f4:cc:
         85:4c:d3:47:6c:52:75:e2:2b:f3:44:16:02:27:cd:fb:37:a5:
         60:4b:cb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S08KZsZkA46gmt5mUg+iqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw
ZWFkMjkwHhcNMjYwNjI5MTAwMTM1WhcNMjYwNjMwMTAwMTM1WjAzMTEwLwYDVQQD
EyhkYzUzNTU0ZDY3YzQwOThlNGU4Njk4ODA4YzMxNjFjM2NjZmYyYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2uqlQa5QIGTf4Sxnf8vqKfGEaso
swcAcEpIrkxSFzFfalHmpTw/omm3p5yaFGQiSj9wy8lp8iohhT2s8XTlZHOyMfci
2nWsAgnbsyB/GCVmkR7ZPiVXfpRab1EYuVE9KuGHKbxhdCZEiV7udfxS8gppxvw3
QEyol0+Fz4Hyu7Pqz0x9RSmPk1ZUrsq4a1iXkCo/9gqh4QDtUzLt36ATW7cOos/z
TnRuVtyas2Gud8SK8kW7FJVFtv07u2kb6+ZA/y7HdUiFWYTK6loY4HP0ZSql93ht
e7vQfd8fhOAbHLSt9l/yoAYEGCm4kVeCTO9jl8+sFJTUqiFmS1HMhVYWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxTVU1nxAmOToaYgIwxYcPM/yqtMB8GA1UdIwQY
MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt
ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4
LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMR+e7JJ
C6B6+SRsDYcL2/fX4P2ZbB5r1Gs+wa/fpJiuPj2pCUGI5aRM31NwBRzk82A/JEWv
lWmfY3Pr2HViCcPxxnaKqrZ9mZSyCilsCMFnK2ejyF5l3u/hBldwiVIKA5GRGblI
6qwcPL6FkqpjxSli9zsEdHIuNDTUKcmxlBkCKLRM82TEJcyEg0rR0Iwke6wpMIhP
GQ5zbps5GZSnpZzHGY1c/QvbD64GMZYzXiCM7nx8PgjbuGlEsPVISQNVTKVHOjIc
tvbVvAeMmEMRhVgDjpU9/y/xnhpWoaMLqSZ+mMNcjEu3yfTMhUzTR2xSdeIr80QW
AifN+zelYEvLLg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:30:31 2026 by rpki-client