Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File:                     N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier:          mzd1Z1zKaveUMCVmuX4TduDMxbP8QCw5ZOeVEV/GIIk=
Subject key identifier:   D7:BA:26:74:38:48:87:9D:D1:51:E2:4A:AA:00:BC:C9:B6:FF:95:9B
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer:       /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial:       019FA2299449865A79282B832A89EC76E8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number:          192A
Signing time:             Mon 27 Jul 2026 06:01:01 +0000
Manifest this update:     Mon 27 Jul 2026 06:01:01 +0000
Manifest next update:     Tue 28 Jul 2026 06:01:01 +0000
Files and hashes:         1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: YH4gW5tUa/BCGMz7BgLSKp94Gb5WkATaiTsMszvKz4M=)
                          2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
                          3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:94:49:86:5a:79:28:2b:83:2a:89:ec:76:e8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
        Validity
            Not Before: Jul 27 06:01:01 2026 GMT
            Not After : Jul 28 06:01:01 2026 GMT
        Subject: CN=d7ba26743848879dd151e24aaa00bcc9b6ff959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:b1:e5:21:eb:07:05:16:9b:49:05:15:35:
                    56:f9:f3:9a:c7:d9:34:83:2d:c2:ee:82:17:b0:36:
                    a5:ba:13:73:e9:98:a3:20:81:05:14:88:f6:bb:93:
                    fa:e4:3c:3d:58:a3:31:11:79:e0:f6:74:35:29:0b:
                    64:25:53:11:96:c7:be:7d:78:4a:1f:66:e1:17:40:
                    5d:b6:a4:10:ce:15:fb:33:87:39:c2:d1:73:b5:22:
                    65:30:c3:4c:71:55:e4:c5:89:88:85:75:74:29:f0:
                    3b:54:76:6e:16:14:0e:e9:6b:30:4e:69:5c:61:ef:
                    d5:2f:9c:fd:51:b5:c9:53:a4:cc:c7:f3:fd:9a:4e:
                    6e:e5:6d:83:37:7d:2d:fa:61:4e:56:95:ee:cd:bb:
                    66:71:5f:78:ef:2e:ae:e6:aa:df:6a:4f:b5:53:a7:
                    d8:85:a7:93:6c:2e:5f:d8:ea:da:05:45:56:c0:ab:
                    59:c6:98:3d:56:26:e4:53:65:bf:b6:3c:5f:db:db:
                    93:12:73:1a:1e:f3:e3:d7:5b:fa:bf:a6:d5:97:a0:
                    94:a0:48:8b:4f:a9:7f:eb:de:6f:87:5b:a0:bc:f1:
                    29:5f:dd:71:e5:87:de:1a:98:3d:c8:c7:4a:99:17:
                    b6:ac:f1:54:e6:d5:f8:0d:6b:b7:8a:0d:82:e5:ab:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:26:74:38:48:87:9D:D1:51:E2:4A:AA:00:BC:C9:B6:FF:95:9B
            X509v3 Authority Key Identifier:
                keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:93:c7:07:a3:33:a8:6b:8d:cd:48:bb:a1:d6:d1:c0:8c:a7:
         36:8f:de:3c:31:c7:b2:d2:c6:f3:1b:39:7c:8a:a4:9f:d6:56:
         df:d0:2c:8b:16:f9:fb:91:81:77:5a:13:24:4e:fd:3b:b2:2e:
         d4:2c:1e:1f:53:98:89:e2:d3:51:42:ab:61:56:a8:47:8f:93:
         c2:39:0f:42:21:07:92:cc:42:9e:4b:ac:69:8e:a1:75:2e:33:
         44:74:24:e7:f4:b8:2e:e8:04:77:fa:d8:53:7f:ae:5d:8e:2d:
         3f:8f:4f:39:f7:49:f8:34:86:a0:c2:de:d8:8d:32:35:c9:74:
         53:28:0d:73:3a:10:5f:18:b6:fd:73:2e:2f:fe:4a:11:05:09:
         d6:57:81:3d:33:ad:20:ca:ef:8e:ad:2e:5d:17:5c:58:b7:09:
         fa:c5:02:11:3d:d7:cb:36:0c:ef:a7:95:05:62:00:af:e9:10:
         37:b1:4d:87:ec:49:64:63:f2:53:a9:5c:2c:13:8f:02:1a:b4:
         8b:dd:6c:de:59:b2:ce:86:35:f0:1e:47:f2:b1:7e:81:50:95:
         5a:a1:de:0f:73:66:15:08:22:23:0a:7c:b6:3f:2a:32:b2:e8:
         93:e5:50:7c:81:b0:c9:69:bd:71:8f:0d:6c:db:0c:a3:60:93:
         d4:be:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:02 2026 by rpki-client