Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File:                     NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier:          Z4ic7usMvHOHPoh86npalV13F5S4F8nX1gMe28gZDe8=
Subject key identifier:   AF:55:C3:D7:32:EF:CC:EA:5D:3D:31:C3:45:71:45:51:04:C2:2C:4D
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer:       /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial:       019FA1F26B1B889B28413ED89D9EA7D031FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number:          1180
Signing time:             Mon 27 Jul 2026 05:00:46 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:46 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:46 +0000
Files and hashes:         1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
                          2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: ELpDd4FJ+9iLec3DFOJrjMvgB7arOgDBGJWjaeNdbBk=)
                          3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
                          4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:6b:1b:88:9b:28:41:3e:d8:9d:9e:a7:d0:31:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
        Validity
            Not Before: Jul 27 05:00:46 2026 GMT
            Not After : Jul 28 05:00:46 2026 GMT
        Subject: CN=af55c3d732efccea5d3d31c34571455104c22c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:cf:e1:5d:82:c7:34:e6:46:41:13:72:32:
                    9f:61:a9:64:e9:dc:3c:de:be:6b:73:7a:96:46:93:
                    a3:77:a5:3f:2e:e9:12:ca:35:fe:34:2c:d1:10:75:
                    84:f1:16:4b:4e:fb:31:22:d0:5d:b8:cd:7e:73:a5:
                    8e:46:38:02:96:61:2e:9f:43:ad:33:75:7e:93:36:
                    56:ea:e4:a4:0b:ab:e9:24:d8:79:0a:0b:31:eb:eb:
                    6f:3d:a4:20:2b:78:fa:0c:f2:1f:d2:a5:76:21:40:
                    38:af:75:10:f5:34:aa:bd:f2:e8:7c:e0:86:a7:0d:
                    9d:e9:ef:2d:98:9c:eb:a5:d4:df:b6:ab:68:e5:38:
                    27:92:3e:0c:68:e5:b0:f7:09:19:09:93:34:a8:3f:
                    42:c0:8e:96:1c:8a:41:0f:91:e1:0c:74:70:10:0c:
                    5e:89:4c:ed:24:f9:22:43:e0:1b:ba:d8:d4:e2:cb:
                    79:ba:31:ef:d6:7f:ad:e5:fd:57:bc:85:55:fd:9b:
                    96:30:76:83:3e:6a:c8:35:4c:83:f4:dd:ad:5e:27:
                    fa:0c:63:c1:9f:6e:61:8a:b5:2d:f1:38:c3:d3:38:
                    fb:ca:99:31:a1:15:f8:85:fd:3e:2a:4d:53:52:a3:
                    4d:a1:44:f4:d9:30:df:78:9f:8d:23:4b:cd:0f:38:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:C3:D7:32:EF:CC:EA:5D:3D:31:C3:45:71:45:51:04:C2:2C:4D
            X509v3 Authority Key Identifier:
                keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:83:64:d8:33:2c:79:2a:03:cc:f7:64:34:55:1e:5e:5a:
         c2:40:30:90:7e:a0:8b:b8:3f:ff:a6:cb:0a:dd:12:cf:cd:ab:
         aa:72:b8:2f:1e:f1:fd:67:86:35:85:68:4c:47:9a:b2:b1:71:
         da:2e:b7:d2:87:53:f9:50:a3:03:1b:55:32:39:88:9f:bb:d1:
         e5:3e:21:7f:a0:f2:29:87:b7:1b:af:2c:20:d3:a9:91:63:d7:
         54:57:0f:3d:0b:70:87:ff:85:a4:ca:e2:08:ee:5f:dd:be:e0:
         4f:b9:a8:6b:09:53:d0:74:46:cf:b8:04:c8:c2:02:8c:7f:77:
         cf:b1:96:30:64:41:3f:c3:53:44:2b:56:86:20:39:47:44:41:
         89:9b:7d:8e:d4:65:da:e4:1c:5d:d5:ca:1b:69:7a:9b:c4:80:
         d3:ef:19:10:a0:bc:49:41:dc:f4:c8:a5:26:6e:2e:e6:56:71:
         35:13:91:4e:a9:f2:7e:dd:90:cc:e9:0c:90:87:98:e5:58:14:
         05:cd:5c:d1:f7:bb:2d:08:3b:ca:85:b4:0e:b8:5b:49:de:30:
         00:2c:61:04:f1:a3:59:da:9d:31:95:76:ce:1d:3a:05:0f:b3:
         57:b2:0d:40:95:3b:a4:e9:9a:bd:ac:25:7a:4a:b3:0e:15:6a:
         31:d6:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:19:42 2026 by rpki-client