Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File:                     NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier:          AbUqTTCeF82OvBS5875OAl3dvIuyRd6j2AYXTLtGUxw=
Subject key identifier:   99:F5:D9:BF:AC:FC:45:EC:7B:63:90:7E:70:F8:B6:0E:07:D8:8D:BD
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer:       /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial:       019FD15F52557C7BFBA3A07EBB06AA1E7628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number:          115F
Signing time:             Wed 05 Aug 2026 10:01:52 +0000
Manifest this update:     Wed 05 Aug 2026 10:01:52 +0000
Manifest next update:     Thu 06 Aug 2026 10:01:52 +0000
Files and hashes:         1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: 2dR9Xzos4FcIe7CeHXMX/gPuxmn/PsK34yRMKnPPz28=)
                          2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:5f:52:55:7c:7b:fb:a3:a0:7e:bb:06:aa:1e:76:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
        Validity
            Not Before: Aug  5 10:01:52 2026 GMT
            Not After : Aug  6 10:01:52 2026 GMT
        Subject: CN=99f5d9bfacfc45ec7b63907e70f8b60e07d88dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:d5:ed:45:43:b7:a9:54:4d:15:3d:10:cf:
                    ac:7f:c1:9c:25:44:95:92:80:8d:7d:14:8d:1a:61:
                    fd:20:c4:e9:d1:6d:aa:99:9b:f1:d0:35:ba:9a:51:
                    0e:00:79:80:33:ef:fa:c8:65:72:b3:de:4d:36:4b:
                    f2:1e:c0:a5:5c:b4:90:f9:96:50:fb:53:50:e6:c0:
                    fc:e6:58:89:d2:76:20:d6:3e:0b:d6:e4:3f:fd:c3:
                    92:53:40:02:b8:da:ff:02:40:a7:f7:f1:83:18:b1:
                    61:a6:b9:5f:6b:0f:b7:df:bd:24:4e:7c:99:a8:58:
                    47:c3:ad:23:9b:27:3a:2d:ea:bd:9f:7a:90:99:a3:
                    9b:04:6c:53:a9:ab:36:1b:76:3d:d4:dd:7d:0b:9b:
                    0f:e9:18:e0:7d:bc:10:8e:db:8f:ff:fb:aa:c7:f7:
                    40:d1:60:e0:66:9a:35:b3:1b:d0:94:cb:a8:69:93:
                    61:9e:27:bb:62:24:ef:7f:87:82:45:0d:0a:ba:e3:
                    c1:18:12:b2:a6:e0:c9:a6:a8:8b:0a:bf:b5:83:62:
                    f6:17:3a:da:b3:ed:51:e9:2e:60:8c:de:36:5f:99:
                    6b:1c:35:cf:c8:aa:85:89:13:b8:66:68:b5:7a:ec:
                    25:a8:47:86:17:8e:f9:4d:0c:c5:09:db:8e:89:06:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:D9:BF:AC:FC:45:EC:7B:63:90:7E:70:F8:B6:0E:07:D8:8D:BD
            X509v3 Authority Key Identifier:
                keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:a2:4f:f5:bd:ad:6a:d2:83:1b:9d:1c:37:c3:a1:18:5e:
         32:df:93:4a:b8:ee:b8:03:c3:7a:e5:bd:1c:30:ff:0e:ed:6e:
         ee:71:f4:c9:fd:52:34:9f:35:04:92:24:79:55:b0:ad:c3:90:
         83:d3:85:dd:c0:80:8a:d7:a1:44:8d:51:51:2c:a6:80:9b:25:
         a8:8d:82:56:37:4f:2b:2c:1b:02:31:3a:af:d5:17:60:cc:e1:
         d1:35:1b:08:cd:dd:c6:58:43:78:0a:96:e7:d0:0b:41:0d:27:
         a0:c6:df:75:97:88:83:41:a4:b1:a4:8b:d2:9e:c4:e0:b2:80:
         cd:32:d5:8b:aa:6d:50:7c:d5:90:45:59:4d:b0:fd:3e:5f:a4:
         b4:43:74:1b:88:5f:bd:49:e2:ff:1a:7a:00:c9:ab:88:e7:eb:
         8c:60:ba:1d:ae:5d:39:7e:86:0d:6b:e7:f1:b3:27:59:29:d3:
         08:ea:9b:bc:8a:8e:9d:b8:3a:49:20:9e:05:1b:cd:1a:32:ce:
         d1:89:ad:ae:b8:63:3e:ba:60:91:fe:55:19:60:d1:78:5e:d6:
         71:b3:14:b2:c0:d6:5d:d2:d5:e1:b3:3b:60:b5:e0:76:6f:7d:
         55:55:39:be:3e:02:a5:e8:4d:62:d2:d5:83:13:f4:da:10:38:
         fc:4e:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:59:37 2026 by rpki-client