Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          z2q+FP6s7+j/YjDLsIMAxMUbE2RhvzQWxRBcjxGUx38=
Subject key identifier:   F7:06:35:DE:89:71:9D:92:C0:1D:96:93:BC:13:C4:09:09:D9:1E:D6
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       019FA03ACA72BB18DE874634F04B48C58E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          19CD
Signing time:             Sun 26 Jul 2026 21:00:35 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:35 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:35 +0000
Files and hashes:         1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: jhIkVCUA6Nr/oNYF/vJyhNHNLSk2zk816m5IYowhUQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:ca:72:bb:18:de:87:46:34:f0:4b:48:c5:8e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Jul 26 21:00:35 2026 GMT
            Not After : Jul 27 21:00:35 2026 GMT
        Subject: CN=f70635de89719d92c01d9693bc13c40909d91ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:26:dc:8e:dc:d6:cf:ed:cb:15:81:1a:95:
                    39:1c:bc:4c:28:31:f5:53:05:63:ab:18:7a:01:b5:
                    83:9d:aa:6f:72:c4:da:23:75:2d:7f:92:18:90:7a:
                    7e:34:7c:ae:44:68:e4:68:93:c4:51:22:dc:d9:a8:
                    bb:7c:c0:37:dc:32:0a:d4:69:90:c7:ce:cf:d9:0a:
                    14:25:35:00:40:40:9d:3b:2c:7f:45:8f:86:15:01:
                    dd:d6:93:32:82:68:05:f2:0d:0e:dd:39:4c:a6:79:
                    02:a3:82:25:a8:97:f5:72:a0:5c:07:61:f2:26:94:
                    5d:8c:94:04:35:e3:93:22:72:84:51:1a:c7:51:94:
                    b2:dc:c6:23:f4:65:2e:70:96:b2:14:5b:34:4b:c6:
                    2d:40:75:10:59:c5:47:81:16:81:92:f9:25:0c:1e:
                    81:3d:4d:a9:f9:29:b4:b4:7d:85:4f:91:6b:3b:a9:
                    38:0c:46:70:bd:23:48:71:89:eb:85:40:d5:58:7f:
                    b3:a8:9d:de:78:d0:6b:08:f5:8c:d5:c7:ad:2f:5e:
                    b2:3b:8b:42:67:c2:4a:27:db:f1:7b:be:8d:35:c6:
                    d1:75:d7:2b:de:f9:90:35:f0:d3:c3:8d:d3:f2:35:
                    88:f9:19:1f:28:f3:e5:ab:a5:45:87:15:60:14:8e:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:35:DE:89:71:9D:92:C0:1D:96:93:BC:13:C4:09:09:D9:1E:D6
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:88:df:15:45:02:b6:c4:90:81:39:a0:ec:cd:54:34:f7:82:
         49:62:72:5f:c5:96:00:29:6b:a5:6f:d3:68:75:f9:ed:53:64:
         32:b2:7f:33:18:cf:90:d6:a5:0a:c4:27:49:5e:2c:82:59:a2:
         00:72:76:fa:f8:c7:87:ce:2c:c6:6d:33:4a:73:52:36:2b:c8:
         f7:7e:44:b6:90:73:de:19:0a:4d:c6:14:bc:05:b1:04:c9:fc:
         43:2c:6e:f3:6a:e5:07:bb:bc:00:85:24:58:12:c4:ac:f6:86:
         ed:34:d3:38:67:1e:0c:93:06:b6:b9:c5:6d:9c:b3:83:6c:60:
         6e:b7:b5:f7:59:77:43:9a:f9:a2:f5:55:ff:8f:3b:91:1a:93:
         70:9b:40:b3:7a:f8:b5:c3:5a:5b:ef:6e:d6:c6:de:a1:ad:18:
         5b:5b:68:db:16:35:f7:ed:bc:f6:14:c6:a6:42:a4:9a:fa:1c:
         8a:00:7b:5d:37:66:ff:e8:97:92:b9:69:1f:4f:a7:89:63:11:
         37:39:b8:e2:de:7d:85:20:ec:77:c0:9e:a5:5b:ca:30:52:e7:
         88:c1:b0:b9:23:30:b8:42:4d:9d:97:aa:b1:a9:44:39:96:eb:
         34:c9:34:78:e4:a0:67:94:15:83:9f:f6:a4:66:60:6f:65:1f:
         e3:c6:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:40:03 2026 by rpki-client