Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File:                     nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier:          B7WWIa8epVNTxGJH9+gVxw4fiAn8dKNMeo6kvGpbYK8=
Subject key identifier:   9C:CF:1A:47:0E:E6:A2:46:45:89:35:8A:6B:2F:C9:6E:1D:28:C3:84
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer:       /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial:       019F9FCDA6DB14033FEA1758EF53E79E994D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number:          0CD1
Signing time:             Sun 26 Jul 2026 19:01:22 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:22 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:22 +0000
Files and hashes:         1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
                          2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: Qs8Kwe8VKx9+o2IfO4M5I7KmZkGqfU8AGC7ngI28rxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:a6:db:14:03:3f:ea:17:58:ef:53:e7:9e:99:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
        Validity
            Not Before: Jul 26 19:01:22 2026 GMT
            Not After : Jul 27 19:01:22 2026 GMT
        Subject: CN=9ccf1a470ee6a2464589358a6b2fc96e1d28c384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:78:36:04:a2:30:7e:53:8f:22:38:a3:9d:
                    e9:0f:da:ee:89:82:22:b9:f6:0b:d9:11:5b:61:b8:
                    c0:bc:2a:77:95:4e:b5:d3:9a:8f:d1:8a:fe:a0:22:
                    7f:b7:52:4a:48:53:a3:13:51:c6:de:6f:56:82:82:
                    ae:bc:b8:78:9d:c4:2c:2e:1a:b6:4f:1c:5a:1d:4a:
                    18:5a:b3:84:49:c1:b0:ef:f0:62:57:b3:08:bb:d8:
                    cd:c3:13:9b:d4:24:82:8e:68:62:21:5c:1d:c4:52:
                    8f:b7:34:3f:53:dc:f5:cc:99:6e:00:d6:ec:49:8e:
                    ca:4e:3c:2d:28:1a:88:14:dd:78:42:76:3a:6e:ba:
                    17:dd:2e:23:09:77:b1:7b:ea:3c:66:ec:1b:17:be:
                    77:77:1c:f0:20:40:14:56:3d:23:39:79:03:6a:b5:
                    99:1f:e1:f4:a9:a8:f6:79:8c:64:0c:20:c5:64:99:
                    9d:f4:6d:9a:fd:fd:34:84:e4:eb:48:f0:3f:94:1f:
                    9b:83:9a:10:03:89:3f:8a:48:b8:4a:60:5b:d2:97:
                    db:f1:61:36:9a:ab:2f:5c:f1:35:74:4f:53:09:2c:
                    ac:ef:ed:06:f5:bf:f1:71:b6:b8:24:fc:3f:d5:dc:
                    d8:a8:59:48:76:40:c4:92:16:d1:05:b4:7f:77:44:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:1A:47:0E:E6:A2:46:45:89:35:8A:6B:2F:C9:6E:1D:28:C3:84
            X509v3 Authority Key Identifier:
                keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:f0:2b:86:7e:dc:d7:6a:c2:20:dd:12:11:a2:a8:ef:f8:
         a3:3a:1c:1d:dd:fe:d0:33:9d:ef:44:76:55:96:1f:26:e6:f6:
         f2:ea:50:65:0c:7b:83:34:ca:c1:24:a9:8e:75:3a:61:bc:3e:
         d7:0e:e0:6e:b8:66:ee:41:b1:ca:17:22:e9:00:33:82:d3:f2:
         41:97:75:9d:e1:e3:3b:ca:f4:55:a3:41:3b:ef:4f:6b:c0:be:
         35:8a:06:94:98:97:a1:a9:a4:ff:33:4f:42:90:ab:14:7f:08:
         ec:58:71:5c:b6:73:c8:33:8a:04:d7:3d:36:66:75:1b:a1:4f:
         a5:1b:35:d5:09:08:a8:f8:97:1d:d7:61:fa:cd:22:8e:ff:76:
         14:1b:74:81:44:b0:6d:72:bd:69:68:b3:dc:aa:02:53:de:90:
         92:64:b4:42:ca:06:32:63:50:5b:01:ec:9b:28:eb:97:1e:f3:
         fa:14:1c:12:5f:f3:e7:32:79:c9:e7:0b:78:ac:60:c4:9a:f9:
         59:66:41:d9:fe:7f:4c:39:cb:22:bd:1d:84:8a:4a:a0:28:56:
         0f:75:9d:6b:55:a9:e1:4c:9a:ae:2c:92:b4:52:dd:8c:e4:f2:
         84:42:16:0f:93:a5:b7:36:10:15:bf:9f:df:4c:8d:ea:01:e5:
         c8:c7:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:24:57 2026 by rpki-client