Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File:                     nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier:          tZu+90oO+X+kHIz8E1ZIn7Cz/beqvsXHWwvziGfpkek=
Subject key identifier:   2D:64:07:8D:55:A5:26:0F:8B:91:78:CE:24:7D:81:C2:13:D6:D9:02
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer:       /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial:       019F82D50B744954CD438DADE7A194BFEFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number:          1136
Signing time:             Tue 21 Jul 2026 04:00:27 +0000
Manifest this update:     Tue 21 Jul 2026 04:00:27 +0000
Manifest next update:     Wed 22 Jul 2026 04:00:27 +0000
Files and hashes:         1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: oiXW1DBFM7sd7izyVLaFzuD/Uf7Ptx4N6a84YhuCuxc=)
                          2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:0b:74:49:54:cd:43:8d:ad:e7:a1:94:bf:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
        Validity
            Not Before: Jul 21 04:00:27 2026 GMT
            Not After : Jul 22 04:00:27 2026 GMT
        Subject: CN=2d64078d55a5260f8b9178ce247d81c213d6d902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:4e:8a:91:fa:7e:63:f4:d7:8b:13:cf:e2:
                    04:9b:5a:93:bc:e4:38:cd:9a:3f:ff:78:0c:35:27:
                    c6:46:95:7f:7a:b2:1c:9b:e9:12:bb:9c:d3:db:bf:
                    1a:8e:d1:6f:78:62:d3:02:17:de:bd:28:d1:15:99:
                    41:e0:c2:6b:5e:69:63:a9:11:54:8d:25:00:c7:d5:
                    c1:80:ad:28:f7:80:b3:87:2c:7a:17:ff:9d:fc:be:
                    2d:50:f3:72:df:56:e1:80:45:3a:7c:86:48:c6:b9:
                    c6:60:88:5a:2b:81:2f:31:9a:b0:f1:91:2f:f4:cf:
                    0e:a0:61:cf:7d:98:45:61:26:f5:02:e7:04:91:6e:
                    3c:df:07:b8:b7:59:87:13:72:b7:8e:79:a2:c7:d3:
                    8b:3b:cd:b5:19:a3:dc:1c:25:ab:19:f0:6d:5f:7d:
                    ae:0b:9b:6f:e1:0c:5e:f9:ad:eb:cb:10:09:87:27:
                    2d:57:5d:e5:aa:67:a1:7c:8a:e7:5d:91:9a:5c:87:
                    86:20:a2:d3:45:18:b4:0d:94:1a:9e:b1:80:9f:4a:
                    a0:3d:c3:ce:0f:dd:e7:46:f7:57:7e:50:c7:08:9a:
                    55:0e:48:42:af:27:22:eb:92:b2:56:5f:05:4c:9f:
                    ce:e1:eb:d5:dc:e9:bf:96:c9:6a:97:fd:57:33:d1:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:07:8D:55:A5:26:0F:8B:91:78:CE:24:7D:81:C2:13:D6:D9:02
            X509v3 Authority Key Identifier:
                keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fb:37:ca:9a:d9:ad:09:d6:cb:38:57:b5:21:37:89:31:d1:
         1b:91:2d:ab:5d:9d:c5:98:3d:2e:cb:0d:cf:a2:77:0b:53:83:
         03:f7:61:c0:00:98:fe:1c:bb:06:83:a9:4c:5b:74:0d:60:65:
         56:ff:db:7e:8e:05:b2:8f:ed:74:23:70:0e:4e:f5:b7:23:98:
         de:73:9c:a8:6e:5c:31:e1:ad:bc:f4:06:7b:b4:80:86:7a:66:
         6e:47:c9:ee:d5:68:b9:ea:bf:dd:b2:dc:f4:5b:d5:95:83:58:
         96:a9:bc:eb:89:f7:b2:1d:cf:cd:51:9c:a5:8a:8d:09:af:8d:
         a4:80:08:05:59:9c:30:1d:6d:86:85:f4:80:7f:32:18:8c:a3:
         f4:25:b1:25:06:70:71:a0:3b:83:3f:ca:f8:74:7c:12:57:64:
         83:21:3e:f0:08:e0:86:56:22:07:a2:14:69:5b:55:6b:79:b0:
         46:5a:1c:d9:19:4e:53:27:b9:6b:6e:29:4b:ed:cc:0a:bd:17:
         41:13:55:05:c3:a5:08:43:d9:ef:ce:13:b7:3e:4e:ee:2a:ac:
         51:d4:46:ba:41:c7:af:bb:f5:5e:b5:af:58:2c:b1:27:78:52:
         db:83:46:40:7f:a6:db:b3:b6:53:a8:eb:f5:8a:48:37:d6:f4:
         9c:76:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:00 2026 by rpki-client