Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
File:                     njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft (raw, json)
Hash identifier:          LDxsajdX45s3zef6bO5Pm2W5TSEk5o+tRRbtqFg8gXI=
Subject key identifier:   4F:8A:E1:7F:BB:8A:05:C2:75:CD:9B:F2:AA:16:86:FF:31:5E:C0:65
Authority key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Certificate issuer:       /CN=9e315018e560000d94718d85ee4e1320c3a5e457
Certificate serial:       01A0035E2DCD5390D81E3BF9C002A47CBD55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:38 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:38 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:38 +0000
Files and hashes:         1: _W2MGLpzYLCcdM8MrYh-W5k4LpE.roa (hash: 5AVtOSonCp0arcBUR0hK73/WbQu4O8oq5lfKGONGBLk=)
                          2: njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl (hash: qDBcYXJceQ7vMCGOIg/A9SvHIyvOkk1V0o8u+HEfxmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:2d:cd:53:90:d8:1e:3b:f9:c0:02:a4:7c:bd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e315018e560000d94718d85ee4e1320c3a5e457
        Validity
            Not Before: Aug 15 03:01:38 2026 GMT
            Not After : Aug 16 03:01:38 2026 GMT
        Subject: CN=4f8ae17fbb8a05c275cd9bf2aa1686ff315ec065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:66:30:73:89:89:7b:a8:18:55:0a:f8:67:
                    58:2d:97:96:1c:14:3b:95:84:d8:5e:e5:3b:0d:3b:
                    eb:08:31:6e:c0:42:92:e2:68:c4:2f:02:e1:47:bb:
                    20:17:f4:90:b9:37:ec:45:e8:a3:a2:02:f9:c4:a8:
                    b0:c4:78:c4:de:75:80:0f:4b:a0:0d:d0:14:bb:4c:
                    0b:c0:78:e4:11:dc:49:8a:ca:4f:db:95:95:7b:03:
                    c3:8a:40:5c:4b:66:76:f2:d2:5b:dd:48:5a:4e:b9:
                    b3:b1:6c:ae:ac:ea:cb:4a:c8:de:05:22:d0:ae:74:
                    ac:0b:40:66:f1:ef:66:01:f4:4b:a2:ff:19:aa:97:
                    32:d9:33:47:48:67:e3:1b:27:27:24:09:cd:1c:29:
                    01:1b:67:67:08:f1:68:1d:41:c2:cf:81:b5:b9:d6:
                    54:9c:62:bf:d7:eb:08:29:ec:ea:c9:80:20:f4:53:
                    29:0f:36:9b:10:97:63:5a:47:11:8f:9e:1e:8e:df:
                    ea:5e:ff:2b:b6:4d:5c:23:d1:43:81:98:c5:09:bf:
                    49:6c:8c:e1:2f:99:c3:31:97:bc:80:77:fc:92:4f:
                    45:31:14:95:fa:35:66:50:10:12:d3:4e:08:b3:67:
                    da:97:30:80:8b:d6:70:ff:d8:3d:81:7f:79:33:69:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8A:E1:7F:BB:8A:05:C2:75:CD:9B:F2:AA:16:86:FF:31:5E:C0:65
            X509v3 Authority Key Identifier:
                keyid:9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ea:3a:46:0c:4f:42:65:76:2d:bc:e4:dd:a8:0e:84:74:c0:
         4d:c0:4a:29:f6:57:25:56:8f:f7:0b:9e:80:19:e3:38:ff:59:
         1c:dc:66:df:aa:43:d0:91:ea:6c:ab:42:b2:4e:ea:d1:df:54:
         82:4b:8a:76:0e:e5:ee:4f:64:e3:39:58:f5:f1:95:ab:f9:bf:
         dd:e4:e0:52:f7:c9:8d:a2:f3:76:ef:14:ff:75:43:58:00:eb:
         05:49:e8:88:38:49:2b:37:f9:d9:ff:56:e0:dc:01:0b:ec:56:
         bc:71:ea:3b:7b:f2:c6:99:93:2c:73:b5:6f:44:a1:02:89:13:
         05:56:93:10:0b:45:77:67:81:fa:67:31:ff:7b:0f:16:e1:6d:
         df:b3:bf:d7:29:f3:c1:02:20:7c:0a:44:82:f2:9c:87:07:ba:
         24:78:8f:a4:ff:1a:a6:a7:e4:8a:57:49:ad:a3:45:ff:62:1f:
         5f:50:2c:40:f5:41:e1:be:4d:94:72:56:d9:ce:c8:b1:4f:ad:
         59:ee:5f:f4:4a:d0:90:2a:61:0d:21:8d:2f:a8:f5:e1:e5:ec:
         54:e9:3d:af:87:0d:a3:6a:f7:b2:9d:56:c4:30:3a:fe:34:16:
         51:5a:7e:0c:65:54:b7:52:84:1e:3a:48:b2:a4:4d:17:5c:29:
         4b:10:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:09 2026 by rpki-client