Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File:                     nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier:          gMcSR1uTjhKL1ZKkYh5yOlB2rnw5ilGDUYcLT/P0GyE=
Subject key identifier:   07:63:CF:81:A3:18:26:69:3D:9E:E8:55:C3:95:51:B2:DC:74:F0:C7
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       019F33DF54A2A32BA6B05B1EAA98B4A7E6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number:          199C
Signing time:             Sun 05 Jul 2026 20:01:41 +0000
Manifest this update:     Sun 05 Jul 2026 20:01:41 +0000
Manifest next update:     Mon 06 Jul 2026 20:01:41 +0000
Files and hashes:         1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=)
                          2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=)
                          3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=)
                          4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=)
                          5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=)
                          6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=)
                          7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=)
                          8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=)
                          9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=)
                          10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=)
                          11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: WY8jbv04uqk4hBhBwTw5OCcdgs6Vge14lf9PMGUhp3U=)
                          12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:33:df:54:a2:a3:2b:a6:b0:5b:1e:aa:98:b4:a7:e6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Jul  5 20:01:41 2026 GMT
            Not After : Jul  6 20:01:41 2026 GMT
        Subject: CN=0763cf81a31826693d9ee855c39551b2dc74f0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:e2:70:c0:61:73:ff:2c:90:43:6f:a6:36:
                    7b:bd:1a:8b:a2:68:8a:bc:1a:ff:00:bc:4d:f4:8c:
                    ed:67:f6:bb:f9:0e:a0:d8:f2:cd:df:09:cf:8c:b8:
                    8d:36:e1:ce:64:73:58:6f:96:88:06:c0:4d:6a:33:
                    d0:8f:b4:ca:03:c1:63:92:b5:3b:77:cf:2a:6f:40:
                    db:cd:7e:d6:27:51:73:73:d8:85:5c:9b:71:e3:00:
                    54:db:f2:46:9b:1f:36:dd:01:bf:18:01:0f:97:87:
                    52:41:0d:a8:77:91:99:70:02:95:d9:36:2a:52:4a:
                    b1:e4:e9:38:09:0c:92:01:e8:b1:18:a7:64:32:4e:
                    8f:74:46:a4:a3:9e:e0:91:50:3d:b3:2a:46:8a:17:
                    03:f2:3c:7c:14:fe:ad:d2:f2:e8:5b:d2:6b:fe:ec:
                    f8:ba:ab:cc:85:c1:cb:3a:7c:c4:33:4e:c7:a9:c6:
                    1a:0d:53:b4:db:3b:54:b9:a2:cb:cf:e3:55:03:bd:
                    e6:b6:12:0c:50:a5:80:c0:cf:a3:5b:28:71:07:1e:
                    8a:38:42:22:32:0e:b0:f4:b0:55:0a:62:9d:f3:c0:
                    76:f4:21:54:f8:05:e9:9f:be:52:13:16:9e:f7:a5:
                    3d:95:d3:95:1b:a9:28:82:8a:d0:34:08:d9:39:86:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:63:CF:81:A3:18:26:69:3D:9E:E8:55:C3:95:51:B2:DC:74:F0:C7
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:dd:93:2c:10:d0:86:23:a8:33:72:7f:cf:b6:0c:9f:21:
         5b:6c:c6:ea:bd:1f:03:e8:cd:46:db:91:6b:82:93:74:08:38:
         6a:a9:36:be:91:a3:df:8d:47:0e:7f:01:05:7d:60:79:c5:09:
         0e:17:35:c2:70:7c:db:5d:80:f0:8a:76:a7:83:74:be:5e:f8:
         ab:ef:18:3e:db:4a:d7:ed:41:75:91:ef:9f:a6:f5:a0:29:ee:
         05:37:02:35:27:eb:67:25:de:3a:37:5d:d8:aa:61:4f:ae:d2:
         ca:f2:cb:ce:f2:8a:c4:ec:bd:7b:26:f6:05:f7:28:4b:b8:01:
         db:22:5f:44:f4:d7:a5:ea:41:dd:b9:f0:af:4c:12:26:64:37:
         cf:f7:1e:68:f0:8f:fe:70:c4:d7:43:13:1d:64:97:13:b5:b6:
         22:2a:3f:21:4c:d2:be:52:80:8b:ad:79:f2:ca:fb:b9:b8:da:
         9e:70:7a:22:1d:37:e3:b5:23:41:56:1d:c3:e9:4b:5b:49:39:
         e5:43:a9:ee:3f:f0:9f:e3:4d:5d:38:ad:1f:6d:6c:71:43:93:
         79:a2:64:61:97:40:22:a3:5b:51:d5:6c:d1:45:17:cd:9e:10:
         71:66:a8:7a:4a:9f:38:2d:52:89:ad:5a:6e:c5:f9:ce:b9:0a:
         77:52:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 23:28:24 2026 by rpki-client