Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          z2JbhDKvBSAAj7WkkjWgQJuluFcE+Y4LVwsxlgiIxik=
Subject key identifier:   9A:3F:7C:75:63:45:7C:89:0B:D2:33:F8:36:EC:1E:34:B5:CD:59:6C
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       019FA7195EB2F6B1BE27AD0943D52818B926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          06FD
Signing time:             Tue 28 Jul 2026 05:01:25 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:25 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:25 +0000
Files and hashes:         1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
                          2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: K3Z9XG/p+mS3p7+RobJ98Dfi0Abz4xUdwPQx2JQj0W0=)
                          3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:5e:b2:f6:b1:be:27:ad:09:43:d5:28:18:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Jul 28 05:01:25 2026 GMT
            Not After : Jul 29 05:01:25 2026 GMT
        Subject: CN=9a3f7c7563457c890bd233f836ec1e34b5cd596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:00:7b:11:f1:9e:41:55:00:e6:ee:c7:21:
                    4b:de:ff:f9:8e:39:b9:e5:57:69:d5:4e:25:20:e2:
                    82:f8:b0:77:13:83:52:37:2e:fe:8a:22:a0:0f:23:
                    b6:6c:78:cd:17:65:87:d2:56:cd:b5:27:22:5f:36:
                    e5:b8:13:6c:f4:5e:31:0d:33:ba:6a:83:91:91:5f:
                    5d:67:45:49:5c:26:3f:54:af:c6:3d:00:7f:39:29:
                    72:85:2d:e3:ed:ba:5f:76:4f:6f:d4:b1:a5:d0:79:
                    a6:0c:2c:cf:43:8c:4b:2c:b9:a2:2c:cb:9c:e8:66:
                    10:b3:c9:87:d8:0d:36:43:be:41:e2:79:8c:71:f5:
                    7b:0c:09:b1:6c:4e:3d:32:37:95:eb:b9:a7:db:77:
                    41:4f:34:4b:fd:34:d9:c0:8f:d9:17:f9:ed:fa:ec:
                    0a:8a:65:00:1b:fa:bb:f7:ae:7b:36:6e:e6:e4:3e:
                    1d:21:8b:72:95:f2:d4:57:cf:0d:96:c8:98:01:b8:
                    f7:c2:85:5d:15:2d:b0:be:b2:a6:eb:52:f1:76:1c:
                    1f:2e:7c:83:55:6b:6a:c2:0d:08:68:bf:d4:27:22:
                    88:dc:e0:09:dc:8f:96:f9:68:75:96:96:33:dd:ce:
                    83:05:2d:bb:0a:39:40:85:02:aa:ec:95:b5:58:9b:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:7C:75:63:45:7C:89:0B:D2:33:F8:36:EC:1E:34:B5:CD:59:6C
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:29:43:ad:69:3a:4f:27:15:b0:66:17:e9:0b:68:ed:55:99:
         37:70:e1:bc:31:90:1c:b2:3a:18:37:13:47:e7:f2:5b:b2:0a:
         37:af:4d:32:8d:cc:37:62:c4:70:19:ac:00:ef:81:42:78:08:
         22:25:04:f9:e0:46:e3:8e:bb:cd:64:bb:d6:9d:52:ab:41:07:
         d7:31:c2:a0:a2:26:85:74:60:ad:fd:33:23:27:9f:ae:f6:74:
         74:bb:f1:77:cc:69:01:0a:d4:70:ae:75:9b:8d:5b:19:d9:ce:
         e6:69:84:ec:03:15:bf:a3:fc:ab:0c:9a:99:31:1e:4a:da:11:
         f4:81:69:a4:f7:5c:33:af:b0:c4:82:3a:3a:03:c7:5d:45:e7:
         54:12:02:06:db:93:85:3a:01:7e:6b:0b:21:3b:cd:f2:43:e5:
         1f:c7:d7:b0:2a:83:39:b7:e5:da:94:3f:a4:e7:d1:04:34:e4:
         07:15:d8:aa:0b:e7:5c:ab:c0:e8:02:61:84:e9:25:7c:65:0e:
         52:2e:73:7e:d1:41:fd:fb:10:4e:db:d1:2e:e1:50:56:f4:9b:
         6f:3e:c6:e8:ce:fe:d9:52:17:23:59:07:77:a1:78:08:68:55:
         4a:65:4e:fb:7c:52:65:bf:07:0a:f0:76:4a:3a:2a:5d:41:87:
         e4:e8:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:34:52 2026 by rpki-client