Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File:                     nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier:          ZlLuY6wLsWruvBifDYAf3nc2Ui2q+Sfei2BQD4RJb+4=
Subject key identifier:   7F:05:31:EB:32:BA:B6:A1:D9:B1:E6:1C:D2:FE:CA:B9:FE:8D:34:E6
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer:       /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial:       019F8643F4E6033719613781F469889270C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number:          97
Signing time:             Tue 21 Jul 2026 20:00:28 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:28 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:28 +0000
Files and hashes:         1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
                          2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
                          3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: TcsuTXAU4LQrgNJNpN/YVFE3bJEMkI1PvyhSyMnkkkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:43:f4:e6:03:37:19:61:37:81:f4:69:88:92:70:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
        Validity
            Not Before: Jul 21 20:00:28 2026 GMT
            Not After : Jul 22 20:00:28 2026 GMT
        Subject: CN=7f0531eb32bab6a1d9b1e61cd2fecab9fe8d34e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:9e:b6:90:e4:1c:49:a3:7b:c4:00:07:27:
                    07:e9:11:82:ba:07:d2:54:43:c8:1c:99:5c:2f:9a:
                    31:e2:7a:d1:ed:8d:9d:5a:0e:87:e4:dc:5a:6e:10:
                    1e:d6:8b:11:14:b1:30:46:7d:74:6e:09:22:18:4e:
                    06:31:58:5a:98:96:22:f5:19:a0:e4:e9:e9:7b:13:
                    38:9b:7e:d4:31:4d:1f:d1:61:6b:a7:c2:43:8f:18:
                    d2:c8:56:4d:cb:2c:6e:07:e6:23:e4:09:3c:47:e7:
                    8f:07:de:62:d6:0b:12:ad:b2:6f:98:9e:07:15:58:
                    97:f1:7b:40:d0:ca:5c:be:f6:c6:b7:3f:1b:65:e2:
                    f6:db:bd:ab:da:75:8f:65:f9:55:81:e0:61:0e:67:
                    21:94:ef:f9:e1:f9:cd:f0:fe:a5:35:83:01:85:06:
                    ff:00:d4:1b:0e:76:0c:e0:f5:ee:34:c3:54:8a:a0:
                    17:bf:52:1d:97:40:16:c5:4d:b1:a5:52:30:85:7e:
                    8d:dc:48:02:69:19:95:de:2c:2c:c4:42:c3:bb:0a:
                    27:b4:d2:6a:a8:fd:86:79:08:92:86:3d:d6:62:ac:
                    a3:d6:ad:2c:5e:ef:32:01:60:4b:07:56:c1:d6:c0:
                    df:6c:0d:0f:fb:b1:77:83:46:fb:26:77:ac:89:24:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:31:EB:32:BA:B6:A1:D9:B1:E6:1C:D2:FE:CA:B9:FE:8D:34:E6
            X509v3 Authority Key Identifier:
                keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:e7:9e:60:c1:8b:07:66:d4:59:fb:fe:44:47:bd:cc:1c:
         ff:9d:b3:7f:ba:30:77:1f:86:02:83:07:8b:eb:7e:33:2e:b9:
         32:a1:76:b7:c8:f9:14:38:72:dd:27:0b:74:0a:d0:4c:80:0a:
         dd:51:c2:0a:2e:66:42:f5:84:c0:13:5c:28:a8:63:d4:b9:b6:
         04:d0:d9:f5:28:93:2f:ce:49:d3:04:e3:41:5c:49:0c:a4:5e:
         3e:9b:9e:95:b2:8c:ab:d8:f8:c2:fc:a5:fa:d8:94:be:55:3d:
         e8:2f:18:d1:eb:39:4b:92:bf:ce:f2:a6:ea:fa:f8:a5:2f:e7:
         9e:da:2e:9b:7e:1f:8f:75:63:0c:d7:d4:74:9d:ec:e4:b0:d4:
         ee:17:ce:4a:2d:22:ed:87:9f:54:30:d0:ec:2a:8c:66:c8:81:
         dd:f1:0d:ce:22:f0:72:e1:91:7c:05:8c:df:ed:a7:a4:7a:3a:
         d9:db:20:55:33:27:76:47:68:d2:4f:78:f5:8b:3c:24:8f:d4:
         60:a5:b6:ed:bc:85:ea:ed:ae:7e:c0:a4:3f:1b:71:cb:5a:d5:
         7d:73:aa:5d:21:f5:ed:e3:f4:a0:07:a0:35:ea:44:c2:fc:1a:
         5c:a4:a4:67:c3:16:df:7d:b5:c8:3a:ed:35:c6:ac:46:11:0e:
         e3:d3:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:03 2026 by rpki-client