Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File:                     N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier:          2R5RIUKHU8/uXOynZPHD83MTQa9D9l9Wj4KeZFCqLaE=
Subject key identifier:   7C:18:D2:82:1C:FF:E0:83:4B:26:4B:F5:6C:6A:8C:AA:40:D1:35:99
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer:       /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial:       019F38605468026E45E4AEF8B5A0C9A987DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number:          14ED
Signing time:             Mon 06 Jul 2026 17:01:04 +0000
Manifest this update:     Mon 06 Jul 2026 17:01:04 +0000
Manifest next update:     Tue 07 Jul 2026 17:01:04 +0000
Files and hashes:         1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
                          2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 2CYr9zBinrKYXlpUIE2qjd/Xtciwk/Qq8dhR32F9PIs=)
                          3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:60:54:68:02:6e:45:e4:ae:f8:b5:a0:c9:a9:87:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
        Validity
            Not Before: Jul  6 17:01:04 2026 GMT
            Not After : Jul  7 17:01:04 2026 GMT
        Subject: CN=7c18d2821cffe0834b264bf56c6a8caa40d13599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:1d:08:d5:e1:ff:27:07:c7:79:d8:41:7c:
                    45:68:8c:f5:74:30:f5:e8:66:d5:75:93:6a:03:3c:
                    bb:92:06:34:aa:59:cf:0f:34:04:56:4c:c4:42:d9:
                    72:89:cd:b1:c3:1d:13:28:2d:57:06:44:a2:fa:a3:
                    05:74:ee:69:3d:b9:cf:fc:e3:c9:51:7a:fe:54:f5:
                    b9:1a:bf:55:de:95:4c:2e:82:a3:3c:ab:7f:d0:a1:
                    ea:d1:82:91:ce:eb:98:98:fa:92:e4:e6:77:e7:50:
                    97:e4:78:e2:d6:19:65:9c:fb:56:9d:6f:ea:57:2c:
                    aa:15:3f:06:ff:7d:af:95:98:e8:de:d9:6a:07:92:
                    48:fc:22:7d:d9:06:d5:5d:7e:0d:14:9a:7e:7c:84:
                    39:8f:50:1d:f5:fe:ec:7a:2c:d2:eb:1b:b4:61:06:
                    db:dd:62:44:b2:d4:e6:8c:d1:0d:eb:90:18:e3:89:
                    b3:7a:f1:bf:ba:de:11:78:c1:77:ee:e1:ae:a8:4b:
                    68:8b:da:74:1f:d0:15:69:3b:f0:9f:29:df:60:7d:
                    f2:f2:26:03:df:b6:45:db:2f:57:71:e3:44:4a:27:
                    54:e6:93:48:27:f3:b9:6b:9d:bd:01:cf:dc:59:3c:
                    b8:23:dc:49:d1:46:5c:e4:56:a7:6f:a4:3f:33:ad:
                    cf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:18:D2:82:1C:FF:E0:83:4B:26:4B:F5:6C:6A:8C:AA:40:D1:35:99
            X509v3 Authority Key Identifier:
                keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:96:97:20:1f:d4:ba:29:0a:f5:71:7c:aa:f5:de:ab:12:
         cf:7d:57:7d:87:63:1c:e1:ff:93:7b:79:1d:5f:df:ef:d5:98:
         af:ae:7d:67:84:b0:ed:58:f0:7b:66:38:a6:00:33:4e:4d:75:
         21:f1:0e:35:70:59:fa:90:ca:cf:63:77:f0:57:51:78:2f:ea:
         71:51:53:fa:75:5e:43:c0:7d:15:56:32:45:76:62:e3:b4:9c:
         2f:8a:00:ac:7d:94:26:48:54:6a:b6:4a:f0:1b:46:5b:39:cc:
         6a:61:ad:f5:a3:17:2a:66:63:da:6d:9f:74:10:8f:b2:11:e1:
         58:38:9f:1d:8b:59:37:3d:ea:2e:76:69:2d:1d:99:c7:dd:60:
         f2:7a:23:5f:25:5e:80:58:50:c4:fe:93:cd:c2:e7:39:8a:51:
         31:ec:8f:b1:50:65:c2:4c:8d:33:ce:8a:22:2a:ae:47:d0:54:
         3e:ed:8d:d4:7d:10:0a:44:e7:a7:d2:29:db:08:eb:b1:e6:ca:
         37:d3:74:d0:e7:be:34:25:51:d5:5e:5f:a1:45:28:0d:96:ab:
         53:1e:bc:95:14:e9:8f:20:fc:7d:2d:45:8c:60:a2:ac:9e:1f:
         fb:ef:d7:d4:f2:8e:02:f3:a5:47:d4:21:74:16:92:b9:da:0a:
         ba:c7:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:25:05 2026 by rpki-client