Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File:                     Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier:          EtONDc7PilJXhrN+e5M6y51WPj5xleP9J+OU4O/zFyw=
Subject key identifier:   35:D7:9D:A9:AC:45:82:51:60:05:F5:DF:4E:63:86:D1:B5:7C:74:33
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer:       /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial:       019FA0A8BC68735B359150FDC3FDA168CE8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number:          1180
Signing time:             Sun 26 Jul 2026 23:00:40 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:40 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:40 +0000
Files and hashes:         1: DVNQFoQorVY9yU9kbTj9LC9XoJw.roa (hash: 07ZRQCYv53Y3Q3qxf4P5rZ1SgsujlGLWZ0tRpP+wSS0=)
                          2: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: kABaD9XS76OvuycZO6iPBVMvBgCL+SqwQR+qFGkyjNE=)
                          3: YbX_Uq-fQ-5ekdVmZwT4UX9M_AE.roa (hash: 3ccMS28ZUPKFrYPJozhkPpBaeqel+ZZodIDTxyiq9A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:bc:68:73:5b:35:91:50:fd:c3:fd:a1:68:ce:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
        Validity
            Not Before: Jul 26 23:00:40 2026 GMT
            Not After : Jul 27 23:00:40 2026 GMT
        Subject: CN=35d79da9ac4582516005f5df4e6386d1b57c7433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:9d:4d:67:45:04:ff:57:76:b8:6c:3c:22:
                    a4:cf:28:b5:58:d9:da:3b:09:ca:59:df:f3:d0:a9:
                    b3:f8:dc:8b:28:d7:8a:58:dc:63:a9:fc:d8:f3:39:
                    b9:00:68:35:70:95:18:c8:ad:e2:17:8d:2f:27:54:
                    45:28:f0:ee:a3:a3:da:d1:98:e2:5d:25:26:d0:9a:
                    15:3c:9d:d7:1a:f9:82:29:01:91:f9:54:e1:5e:ec:
                    55:9c:d6:d1:17:af:8b:be:ef:d0:a7:b3:cc:ba:cb:
                    9b:dd:90:ac:6c:ef:9b:fb:76:3d:0e:24:40:d2:26:
                    9b:dc:09:0c:8f:5d:fe:30:29:16:f1:8c:2c:5c:e0:
                    0f:e2:74:c0:a5:e3:75:6e:8a:fb:fb:3a:df:1e:db:
                    d2:87:9a:c7:c8:b6:d9:39:ea:7c:a4:e6:c8:38:6d:
                    d5:a7:cf:28:17:81:a8:ea:90:dd:7f:37:09:8b:eb:
                    b6:6a:80:e6:75:99:b2:2c:f1:6f:46:c5:30:9e:a1:
                    0e:19:c2:65:8c:0a:47:c5:30:b1:92:14:a4:bd:19:
                    58:63:cb:8c:1c:79:4c:06:dc:4e:f4:17:21:f7:68:
                    c4:55:3c:ea:8d:7a:39:cc:d2:c7:4e:b3:19:6b:eb:
                    f5:4a:86:0c:5e:8e:cd:07:39:68:54:09:4f:98:ec:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:9D:A9:AC:45:82:51:60:05:F5:DF:4E:63:86:D1:B5:7C:74:33
            X509v3 Authority Key Identifier:
                keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:40:82:a0:6d:43:bb:15:1b:08:3f:4c:8c:41:47:56:a7:61:
         1d:18:00:98:f5:7c:9e:ae:e8:cf:16:25:20:69:81:c5:de:33:
         d5:c7:66:8c:6d:22:a5:3f:ff:48:42:d3:a5:d8:32:2e:7e:44:
         e1:e5:cd:c8:65:a6:1d:d2:fc:cd:60:1b:56:86:58:e0:6d:cc:
         f9:d3:19:95:05:5a:49:c0:1b:ba:e1:02:fd:a6:82:1c:22:4c:
         da:fc:ce:a4:e4:65:8e:3b:66:8b:97:25:ab:9a:34:19:b0:de:
         b7:a3:b6:cf:23:73:d8:11:7d:ec:32:92:3a:1c:0a:cd:3b:ee:
         21:0d:44:ef:aa:e8:b6:77:ba:00:4d:03:79:44:7b:50:3c:70:
         04:8d:c0:25:81:e8:35:0d:06:09:c8:f0:8a:f0:40:37:d9:16:
         e5:c3:28:66:28:b2:39:59:0b:46:32:39:dd:ce:83:c0:33:a8:
         28:8c:7c:53:12:cb:6d:1c:24:35:11:c8:b8:3b:08:74:bd:ec:
         80:81:bf:e1:7a:1c:cc:6a:d1:31:7f:92:28:18:fa:3c:d2:f1:
         48:71:56:89:bc:86:47:08:0a:37:af:28:1e:43:11:18:c9:06:
         90:b3:39:d9:0b:c0:f8:44:b2:28:49:35:c4:e3:7e:a8:71:b2:
         93:67:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:29:04 2026 by rpki-client