Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
File:                     NfJIyy_lWJzEbJo1M7d5lmGclpM.mft (raw, json)
Hash identifier:          Y8UfyPvkOxRhAQKQiNLusHyWYjkUTRNQKWJzCoZ3wes=
Subject key identifier:   2E:D7:6E:4C:EF:09:6B:5F:75:33:FB:06:72:5F:E3:D2:5D:6D:B1:F6
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Certificate issuer:       /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial:       01A0035E887937BC8523B2C02719085ECA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:02:01 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:01 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:01 +0000
Files and hashes:         1: NfJIyy_lWJzEbJo1M7d5lmGclpM.crl (hash: 04TewEwsob14cnGp0cyojkVd2fSM65zuzwoqNSTyEkQ=)
                          2: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (hash: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=)
                          3: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (hash: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:88:79:37:bc:85:23:b2:c0:27:19:08:5e:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
        Validity
            Not Before: Aug 15 03:02:01 2026 GMT
            Not After : Aug 16 03:02:01 2026 GMT
        Subject: CN=2ed76e4cef096b5f7533fb06725fe3d25d6db1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:6c:65:2d:e3:90:1f:3f:63:1e:ad:14:ff:
                    34:47:6e:c4:17:44:d1:88:26:98:36:8d:73:6c:dc:
                    c0:ee:9b:b4:85:6e:2f:ef:47:e0:4e:10:22:c4:2b:
                    75:e0:33:3b:81:90:6b:98:3d:cb:17:d9:a6:ef:2f:
                    81:18:91:03:b3:40:46:09:16:fe:04:c7:2c:b6:f4:
                    62:1b:b1:1e:c3:ad:b5:7f:49:09:8a:5a:11:b2:1c:
                    f0:2f:66:91:01:1f:07:a1:77:42:fb:c0:5b:ba:7a:
                    da:13:76:15:9c:01:92:64:14:23:c5:17:5d:50:22:
                    b6:d8:3f:d3:af:c8:f1:25:96:92:51:40:f9:a3:74:
                    8d:62:da:f4:e1:a5:02:75:18:7c:e3:eb:f1:65:6c:
                    3b:97:85:b5:6d:08:ef:a2:6a:0e:5e:96:28:a0:d0:
                    ab:1f:5e:5a:63:ca:83:f2:f0:a8:c7:f9:bb:d9:83:
                    e9:61:5f:f6:3a:9e:4a:82:30:03:85:cd:13:85:d7:
                    13:8a:88:98:0f:31:be:f6:7d:b1:ca:94:f9:13:fa:
                    4f:13:f3:59:00:e2:b8:24:5c:8b:b8:24:12:7b:63:
                    15:bf:48:48:4a:71:9c:90:2c:bd:43:72:bf:97:f7:
                    54:e4:e6:c5:86:ba:5a:71:2e:47:b4:b8:b9:0b:d0:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:6E:4C:EF:09:6B:5F:75:33:FB:06:72:5F:E3:D2:5D:6D:B1:F6
            X509v3 Authority Key Identifier:
                keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:82:e3:91:c9:99:ae:64:0c:b7:02:4b:7f:07:45:a1:b9:69:
         bb:a4:7b:fe:4c:a0:91:b7:ba:d0:7b:25:27:d5:0f:02:84:d4:
         72:9f:70:fa:bf:9a:2c:bb:ec:c6:50:1a:4f:32:33:25:c6:3a:
         72:15:7e:5d:83:93:17:f6:93:e4:46:89:25:67:15:8c:79:4c:
         3d:b6:17:ac:70:fe:91:f2:3b:f3:46:70:08:45:2a:d7:c9:5b:
         89:f5:ad:da:a6:54:13:74:58:7f:87:57:88:db:6d:2d:09:1a:
         58:3b:6a:8f:17:6c:63:24:a4:db:b6:d0:8c:dc:32:df:86:3a:
         3e:ec:0d:9a:a0:14:50:87:8a:ca:e2:0c:75:b2:86:1c:8b:29:
         5c:7e:d1:ee:eb:fd:16:1a:f4:2b:e7:b8:49:40:6e:79:16:31:
         60:ab:1a:02:4f:cc:b6:c5:98:d6:1f:a9:6e:98:43:4e:e1:ae:
         82:3a:08:7b:48:a4:41:1c:07:5e:8b:2d:25:15:7b:37:19:49:
         af:74:29:30:6a:b1:26:a3:d0:59:74:43:e4:2e:29:5f:8c:d5:
         71:d2:9f:29:84:c0:47:5e:6a:22:3c:08:aa:50:25:5e:db:7a:
         53:4a:15:28:08:52:58:c6:82:e9:a0:3a:c1:8a:32:64:b6:8d:
         2a:02:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:05 2026 by rpki-client