Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File:                     Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier:          L/p4OWC/x49vFnYhPB2v+Yi8IDVN+ROg+3vNSSZ12ZM=
Subject key identifier:   07:DD:2B:B5:E8:B4:67:61:4B:FE:4B:33:08:3F:B8:09:F6:E3:BF:00
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer:       /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial:       019F8267F3DD3DDCE07CB544758B5C92BEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number:          0D0A
Signing time:             Tue 21 Jul 2026 02:01:18 +0000
Manifest this update:     Tue 21 Jul 2026 02:01:18 +0000
Manifest next update:     Wed 22 Jul 2026 02:01:18 +0000
Files and hashes:         1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
                          2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
                          3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
                          4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: 5RcRkaSsIqMR9GODJpGe6FtgGko81o59j6VkFfU5Q1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:f3:dd:3d:dc:e0:7c:b5:44:75:8b:5c:92:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
        Validity
            Not Before: Jul 21 02:01:18 2026 GMT
            Not After : Jul 22 02:01:18 2026 GMT
        Subject: CN=07dd2bb5e8b467614bfe4b33083fb809f6e3bf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:1e:09:42:1e:76:92:80:8c:88:bc:d8:fc:
                    a5:ee:3c:55:5e:06:f4:a7:4c:7e:77:5a:2c:bc:23:
                    fd:c1:50:d1:4b:f0:19:cf:ba:09:7f:41:f4:62:fa:
                    a1:58:7d:c7:20:4c:77:f1:21:79:c0:e8:36:55:6b:
                    75:6b:94:00:17:de:ac:1a:24:3c:1b:f7:3b:23:60:
                    6a:b1:b6:55:48:ab:3c:5e:ac:e0:58:24:9a:26:8d:
                    1d:19:ec:6a:3b:77:90:2f:da:87:5e:90:1f:2c:d8:
                    ec:5c:9b:3d:f7:c2:7c:7c:6a:50:f4:3d:13:79:c7:
                    80:8c:ec:c0:59:77:a5:f4:3d:4a:65:3c:29:c7:e2:
                    d2:b9:c7:4d:1b:e2:05:84:cd:7b:b8:eb:bb:07:d2:
                    6f:ab:2f:58:2f:d0:dd:59:41:45:79:ad:a8:dc:00:
                    42:c4:9b:91:3a:9c:ec:d6:c8:98:e8:a1:cf:45:5e:
                    43:17:82:d9:bf:b2:4d:2d:af:eb:b1:b0:25:55:ea:
                    f9:5e:50:b7:6f:31:83:2e:af:f5:c7:8b:ae:6f:37:
                    55:e6:fa:5e:b8:c1:9b:f0:51:c4:7c:c1:49:c1:1c:
                    e1:93:06:df:01:0f:b6:69:94:3b:f3:b6:d9:e9:0e:
                    29:f0:c5:d9:bb:78:4e:e3:ec:a0:b2:a2:f8:f4:2f:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:2B:B5:E8:B4:67:61:4B:FE:4B:33:08:3F:B8:09:F6:E3:BF:00
            X509v3 Authority Key Identifier:
                keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:34:53:a0:ea:c7:07:57:2c:d9:20:57:5b:eb:6e:c9:ee:
         a3:08:3f:d5:de:08:0d:ae:7c:70:eb:a9:bf:59:3c:31:19:1d:
         5f:92:d3:87:92:0e:97:30:0e:3a:22:f1:64:de:4f:5e:ab:36:
         1e:42:0c:0a:6a:ef:ae:b4:89:b8:f1:7b:14:9c:58:9b:14:61:
         18:7a:b8:09:51:39:91:64:e0:81:eb:b1:e5:61:12:8b:c8:a5:
         38:f6:ac:1b:99:0e:66:0d:5f:66:db:a7:8a:ff:56:16:76:06:
         31:8c:e3:40:6c:0b:76:eb:3d:ee:dd:b4:3c:0b:47:ec:30:25:
         41:de:cf:1a:aa:47:b9:21:85:be:dc:3a:8e:40:ec:b0:6c:03:
         73:c3:ad:08:c8:1f:73:81:92:09:78:92:ea:73:1b:95:30:73:
         45:aa:ca:01:42:c0:51:ce:53:20:42:ca:dd:ef:63:40:a2:87:
         da:e9:8e:04:6e:ce:60:f5:65:9c:aa:f1:b0:96:f8:65:f3:e3:
         07:fd:8c:78:ca:d4:eb:d8:fb:65:aa:46:ca:5f:a3:f7:9b:04:
         5e:7c:a7:b5:40:bf:c0:46:17:09:04:f2:c8:d3:54:6e:d0:a9:
         d8:e7:32:93:85:1d:53:f9:e1:a8:a6:91:e9:86:42:0d:a5:04:
         d0:e3:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:40:56 2026 by rpki-client