Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File:                     ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier:          WsBGasQU++kDPydi/qvfMomrTb/5T8pILREg/J5k/EE=
Subject key identifier:   7F:B9:04:71:38:67:4A:DD:06:79:C3:A8:66:41:F7:3E:85:6D:C4:7D
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer:       /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial:       019FA14E11B006359E9DA289ED5FA3E6DAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number:          198C
Signing time:             Mon 27 Jul 2026 02:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:15 +0000
Files and hashes:         1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
                          2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: P3RY+zUKFcPjhBXHOGpsaM30B3mfpPZsbavViwaeQCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:11:b0:06:35:9e:9d:a2:89:ed:5f:a3:e6:da:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
        Validity
            Not Before: Jul 27 02:01:15 2026 GMT
            Not After : Jul 28 02:01:15 2026 GMT
        Subject: CN=7fb9047138674add0679c3a86641f73e856dc47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:0d:5a:1d:4e:60:74:f7:55:dc:2e:4c:ad:
                    9f:a3:c5:14:72:08:33:17:38:4b:72:44:22:a4:0c:
                    58:71:f8:08:5c:bb:d1:bf:16:e1:f1:b2:f0:19:4d:
                    81:b7:63:47:8f:e3:d9:7e:11:1a:2d:a1:89:72:50:
                    f4:fa:0f:0e:d7:48:77:84:1d:b6:c6:66:6d:df:9e:
                    66:d3:45:a9:a3:cd:7c:88:64:7f:b8:bf:d7:eb:6d:
                    9c:d0:57:0b:58:a9:d2:5d:50:34:36:fe:82:ac:54:
                    57:84:17:54:a5:fa:fd:89:c3:fb:6f:4f:ef:49:05:
                    20:04:88:9b:73:8a:e8:22:88:c3:35:2a:e9:35:51:
                    f6:a1:f5:1e:6d:c9:86:79:86:15:16:c9:48:c9:1e:
                    c8:f6:86:c0:a5:5e:19:50:3c:dd:0e:d4:61:4a:56:
                    24:0a:48:02:c2:c3:16:da:27:dd:4a:7d:88:54:39:
                    cc:b4:84:60:ee:65:64:34:ab:8f:e8:c2:90:d4:0f:
                    a6:91:36:38:e7:76:38:99:e1:1a:2a:c2:37:58:c7:
                    cd:85:cd:21:9a:cb:1e:3a:e6:e5:69:d9:9b:ca:90:
                    77:41:af:22:6d:db:09:cd:af:2c:9e:38:f3:46:f9:
                    24:6e:07:48:6c:bd:e6:53:a2:91:81:e7:b9:0d:8d:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B9:04:71:38:67:4A:DD:06:79:C3:A8:66:41:F7:3E:85:6D:C4:7D
            X509v3 Authority Key Identifier:
                keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:48:6f:72:74:70:30:a4:fd:eb:3b:43:5b:02:2b:64:d8:43:
         db:2c:fb:f0:ce:10:db:cf:bb:24:d9:d9:20:da:57:41:b3:d0:
         f0:a7:d3:77:fe:ce:81:8a:de:53:87:67:92:86:58:d5:26:4f:
         af:14:c4:92:78:03:68:2b:02:8f:26:7c:1b:45:1d:11:8a:f4:
         38:df:1c:cc:a3:49:ee:33:f5:dc:f3:ea:99:2b:3e:d7:75:66:
         cf:ad:64:4d:aa:38:57:25:1d:70:4e:69:d1:cf:d9:25:ce:83:
         f1:2d:db:17:d8:03:5a:77:89:81:04:ca:7f:b7:06:ba:eb:6a:
         0c:cc:cd:f5:5f:61:7a:29:bf:ae:5a:bf:85:a9:dd:ca:d5:9e:
         e8:fa:70:5f:71:14:2c:13:f7:00:94:e7:c7:44:07:0e:eb:7a:
         20:16:65:1f:f7:ed:c2:97:49:81:a1:20:ce:29:8e:f6:8a:60:
         79:32:c5:67:21:1d:c3:16:86:81:b3:d5:f8:3f:bb:b6:34:dd:
         c8:15:ca:df:34:0a:f5:01:75:fb:6b:cf:b0:0c:c3:7a:ad:b5:
         77:b2:84:3a:a0:7b:b9:21:04:43:d4:bc:a1:f5:8d:12:c0:69:
         3a:a9:00:17:ce:74:a1:69:ef:b6:02:9d:4e:f3:79:0d:16:b0:
         01:5f:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:27:00 2026 by rpki-client