Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File:                     nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier:          8fErDPvwLkRYpQgJrCc8dxa59oaDTwGV9Nq+I4pZJhM=
Subject key identifier:   E1:B2:2B:AE:9E:A4:6E:A2:54:33:CD:15:EA:16:18:CD:82:80:60:B5
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer:       /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial:       019FA1842C7543BF19A6635953654DC10EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number:          1146
Signing time:             Mon 27 Jul 2026 03:00:21 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:21 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:21 +0000
Files and hashes:         1: 0iXNb0qgTsbED9wLh6tNLm4QiSc.roa (hash: jPsn3OTLHwRfrJ0BbFjL8MkH0Kkclj3eem8yJT/9xno=)
                          2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: 4bGuZ1lQM5f6Q9btJ7S8FS18iPUxOQ2XN0IZ8mt5FXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:2c:75:43:bf:19:a6:63:59:53:65:4d:c1:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
        Validity
            Not Before: Jul 27 03:00:21 2026 GMT
            Not After : Jul 28 03:00:21 2026 GMT
        Subject: CN=e1b22bae9ea46ea25433cd15ea1618cd828060b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:a5:6d:a9:39:74:a6:b1:05:28:eb:08:88:
                    6d:d1:79:d9:64:c6:e6:de:78:a1:35:a8:34:fc:e9:
                    9b:d6:79:d8:cf:d1:1c:17:5b:52:ec:3d:df:d2:08:
                    9c:34:1b:9a:f5:88:75:2e:e2:3d:14:58:10:e0:41:
                    1e:48:51:e9:9c:0c:17:36:d7:cb:12:b4:06:d9:ff:
                    d5:85:29:6d:93:c9:1b:41:1d:db:51:2a:c8:23:94:
                    fe:cd:62:50:1a:69:eb:07:05:07:92:1a:41:67:9e:
                    90:ce:be:c0:0b:c3:05:95:ce:6e:23:39:72:6a:23:
                    ff:be:a4:de:86:f5:13:b0:a2:15:0f:80:a5:1b:69:
                    47:4c:17:29:f0:1d:4f:bd:e5:2d:c0:b3:cd:1f:85:
                    05:42:bc:97:6e:8c:e7:06:78:ea:bc:f4:70:71:ec:
                    55:5d:48:71:52:a3:fb:ad:5d:0e:7b:62:21:0b:52:
                    b6:fb:73:03:f4:1c:8a:b1:eb:ba:08:f0:55:55:49:
                    f2:0b:0f:99:e6:e6:85:00:23:4c:d2:26:6a:14:fc:
                    fd:4c:ea:aa:e0:ee:7e:1d:c1:28:db:75:77:68:5f:
                    62:77:ae:78:fc:26:bc:d1:1a:0d:d5:a3:58:53:8b:
                    04:dd:e9:ff:e5:ef:f4:29:a1:04:9a:86:71:fe:3d:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:2B:AE:9E:A4:6E:A2:54:33:CD:15:EA:16:18:CD:82:80:60:B5
            X509v3 Authority Key Identifier:
                keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:56:51:53:86:7f:f2:6d:58:e7:c3:5b:7b:36:85:e2:58:
         0d:46:44:8f:15:06:bc:8c:7f:37:b6:7e:55:58:24:dd:bf:28:
         69:4d:3c:21:e9:11:ee:21:74:1f:62:45:36:1c:fa:c0:95:38:
         8b:34:64:27:21:e8:fc:dc:01:d4:c1:a9:52:6b:95:11:8a:7c:
         3d:bf:c1:27:8f:78:36:5b:55:11:4b:f8:18:0e:41:d9:1a:f8:
         60:85:32:54:b4:b4:d7:97:b8:c6:bf:b0:cd:b0:25:a4:ef:2c:
         8d:bc:22:cb:dd:26:60:65:bd:bd:38:88:5c:df:5a:cb:82:71:
         00:ed:db:cc:4d:3e:71:e1:8b:38:e1:d9:8c:dc:91:b3:9b:c5:
         a9:e2:bf:6c:8f:26:26:26:d6:a3:1c:c8:2c:b1:60:d2:9c:2b:
         a0:27:75:93:25:7e:8a:88:2b:08:a9:fa:fe:87:5a:dc:07:ac:
         97:17:d4:43:a3:52:03:8e:06:ca:43:d8:4f:28:d5:42:29:50:
         c5:7e:47:ea:51:ff:dc:4d:7b:49:ff:9b:c0:98:8c:d7:05:a3:
         3b:5f:a0:b4:10:b9:b6:9e:76:d3:a6:b4:a4:fc:5a:c2:5b:52:
         b9:d2:85:0d:7d:fb:2b:be:bd:99:a6:e5:b5:7e:68:90:64:a4:
         98:c0:b1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhCx1Q78ZpmNZU2VNwQ7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3
ODJjY2UwHhcNMjYwNzI3MDMwMDIxWhcNMjYwNzI4MDMwMDIxWjAzMTEwLwYDVQQD
EyhlMWIyMmJhZTllYTQ2ZWEyNTQzM2NkMTVlYTE2MThjZDgyODA2MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Clbak5dKaxBSjrCIht0XnZZMbm
3nihNag0/Omb1nnYz9EcF1tS7D3f0gicNBua9Yh1LuI9FFgQ4EEeSFHpnAwXNtfL
ErQG2f/VhSltk8kbQR3bUSrII5T+zWJQGmnrBwUHkhpBZ56Qzr7AC8MFlc5uIzly
aiP/vqTehvUTsKIVD4ClG2lHTBcp8B1PveUtwLPNH4UFQryXboznBnjqvPRwcexV
XUhxUqP7rV0Oe2IhC1K2+3MD9ByKseu6CPBVVUnyCw+Z5uaFACNM0iZqFPz9TOqq
4O5+HcEo23V3aF9id654/Ca80RoN1aNYU4sE3en/5e/0KaEEmoZx/j0GTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGyK66epG6iVDPNFeoWGM2CgGC1MB8GA1UdIwQY
MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt
MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw
LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4NWUVOG
f/JtWOfDW3s2heJYDUZEjxUGvIx/N7Z+VVgk3b8oaU08IekR7iF0H2JFNhz6wJU4
izRkJyHo/NwB1MGpUmuVEYp8Pb/BJ494NltVEUv4GA5B2Rr4YIUyVLS015e4xr+w
zbAlpO8sjbwiy90mYGW9vTiIXN9ay4JxAO3bzE0+ceGLOOHZjNyRs5vFqeK/bI8m
JibWoxzILLFg0pwroCd1kyV+iogrCKn6/oda3AeslxfUQ6NSA44GykPYTyjVQilQ
xX5H6lH/3E17Sf+bwJiM1wWjO1+gtBC5tp5206a0pPxawltSudKFDX37K769mabl
tX5okGSkmMCxmg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:28:58 2026 by rpki-client