Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          //NJCvAPAa9tntSsqin083GrIsot7xcivb4MSYMcv0k=
Subject key identifier:   03:03:CF:CC:67:8E:86:67:F6:ED:03:81:94:92:B4:D9:6C:B1:DF:46
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       019E2926CC3EDA2818583CABA006E1631FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0B4F
Signing time:             Fri 15 May 2026 01:01:08 +0000
Manifest this update:     Fri 15 May 2026 01:01:08 +0000
Manifest next update:     Sat 16 May 2026 01:01:08 +0000
Files and hashes:         1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: TdNlBBLi2QMp7czV7uFHry+sRJB7DtzSLFMQHJ1rGig=)
                          3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:cc:3e:da:28:18:58:3c:ab:a0:06:e1:63:1f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: May 15 01:01:08 2026 GMT
            Not After : May 16 01:01:08 2026 GMT
        Subject: CN=0303cfcc678e8667f6ed03819492b4d96cb1df46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:1c:6f:3d:d9:f5:ae:fb:f2:de:76:ca:cb:
                    4c:3e:1b:c7:c9:f1:d2:fd:10:59:a6:51:11:50:72:
                    72:c9:6c:3d:1a:ff:52:b2:a3:90:1f:9c:43:c4:88:
                    cc:12:1f:0c:3e:d9:7a:60:70:8c:37:9d:de:e6:97:
                    f5:f4:bf:4f:a6:b4:cd:25:7b:60:aa:f4:b7:ac:f8:
                    af:6c:ed:ad:f8:78:ba:e2:20:df:69:ad:af:78:d7:
                    1e:e6:05:a9:e8:23:ab:61:9a:f2:d9:4f:40:40:5c:
                    4f:61:2d:7f:e8:71:81:b4:e1:a4:ac:b7:e0:7f:0c:
                    4e:fb:0a:95:e4:ec:bf:f3:40:4d:a6:55:39:8e:99:
                    40:8c:87:46:a2:99:d2:11:8a:61:c5:42:0c:e5:8e:
                    74:5a:b4:e6:17:db:d8:1f:ef:11:86:22:4d:9b:6d:
                    e8:37:51:cb:93:d0:3f:1e:a3:ed:b8:3f:2f:6a:a4:
                    f8:df:54:bc:43:73:42:f1:fb:40:e5:5c:f6:89:92:
                    dc:b4:68:d9:56:21:6e:a2:ce:c0:48:47:8d:0e:66:
                    57:03:e6:08:95:0e:8c:97:1b:7f:4e:97:13:ee:dc:
                    9b:d9:b9:49:22:f7:1d:bd:bd:56:6e:34:02:94:a2:
                    3e:af:d5:3a:e7:d3:c7:c3:0e:b9:a2:50:65:c8:3f:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:03:CF:CC:67:8E:86:67:F6:ED:03:81:94:92:B4:D9:6C:B1:DF:46
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:e1:aa:eb:ea:92:f3:8d:6c:8b:c0:74:0b:aa:75:a6:f6:
         0e:06:27:73:2b:1b:29:89:ca:e0:5b:5f:f3:8b:47:00:49:25:
         f3:32:58:a8:e5:2d:d1:39:97:05:83:79:7d:3b:1b:30:5f:28:
         a4:e1:ae:db:4c:89:ef:b8:8b:0f:1e:91:bf:21:09:4c:a2:71:
         ff:83:7e:09:89:a8:35:a1:8f:51:39:ec:68:f1:96:2f:ad:0d:
         85:70:c6:fa:ab:e3:2d:28:3c:0e:85:ec:cb:b5:f3:dd:3b:1f:
         a8:85:43:62:3e:ae:e3:f1:7c:43:fc:ea:a3:77:69:48:d1:16:
         9b:18:5a:af:ae:eb:f9:6a:ec:07:39:8f:b2:f0:2a:c5:f9:af:
         62:fd:62:16:7b:41:1a:d6:73:9f:ec:6c:31:04:ce:52:f1:77:
         7a:29:c3:3e:6c:40:43:91:3f:ee:78:66:48:de:00:5a:5c:cc:
         60:37:b5:86:67:71:3c:3c:44:49:8a:2d:ca:44:b4:a2:24:91:
         e9:3a:4b:76:d5:12:73:70:cd:28:03:10:7c:74:f3:d4:65:5d:
         e2:2f:8d:f5:1f:05:19:de:75:63:14:bc:71:77:73:c5:f3:d1:
         2f:e0:3e:f0:cb:1d:2c:2e:b8:87:7e:5e:59:fb:32:72:a7:b5:
         11:10:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:48 2026 by rpki-client