Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File:                     n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier:          6FwO+d/Ff81gMpMq5dHfNUDDsghWi71pkQobJC/Tt9I=
Subject key identifier:   12:5E:0C:37:0B:80:D3:BC:5A:66:D8:4F:3D:48:4F:A1:6E:14:CF:87
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer:       /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial:       019FA260E86FA93DE62664195F36912131BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 07:01:27 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:27 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:27 +0000
Files and hashes:         1: dCyZ9Pf_BM16QCKCTZBWurk5tes.roa (hash: igMWMbqYVYQOf++wz4/c/zhgP+nD+9kvBZJquJqrWeo=)
                          2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: X4UCUZKIFBge6Q/MO08jnFNpUW1phLM/VEy+zEdpBks=)
                          3: nGxIqADkVb_mNggVwJxi_XzzMLg.roa (hash: AeNpYVfAfsiZNoHvge0sBO6h6Hi0L8OmJkT5GmZUJAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:e8:6f:a9:3d:e6:26:64:19:5f:36:91:21:31:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
        Validity
            Not Before: Jul 27 07:01:27 2026 GMT
            Not After : Jul 28 07:01:27 2026 GMT
        Subject: CN=125e0c370b80d3bc5a66d84f3d484fa16e14cf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:3d:82:ec:e9:e5:c4:7e:63:8e:a7:1a:bd:
                    cc:c2:35:be:d3:1f:54:a4:a1:72:e7:6a:52:83:90:
                    06:b8:d8:f6:95:02:43:8b:40:7f:5e:d2:88:37:c9:
                    ec:c0:1f:84:dd:6b:b6:5f:26:06:77:7e:17:aa:b1:
                    5e:8a:37:c0:71:d9:52:21:89:b8:7a:a7:62:3a:e5:
                    f7:81:61:ea:af:33:17:5d:dd:15:d6:0c:b2:9e:b9:
                    60:83:5a:dd:25:b0:eb:fd:02:50:e5:29:33:92:d8:
                    5b:3f:34:c4:f3:73:88:9b:67:41:06:d8:a3:14:81:
                    e7:d6:92:cd:2d:bc:ad:04:d0:68:43:2d:19:7b:46:
                    c9:27:a4:b6:b6:7e:1a:a6:de:55:47:c8:ba:0c:fa:
                    3c:98:5b:2b:d0:04:ad:34:70:1a:3b:b5:ec:24:1f:
                    8d:e5:41:7b:e7:ed:6f:50:0e:ee:69:16:9c:c3:bb:
                    19:b4:d0:d9:11:e2:35:a2:2e:91:f1:12:a9:45:ac:
                    f5:90:84:e9:a6:ce:8f:43:9b:f7:50:37:03:d8:11:
                    b4:04:f4:4c:12:c5:9c:6d:c7:99:af:09:5d:8c:71:
                    10:20:70:8d:53:bc:b0:ee:67:b2:f2:b6:8a:db:1d:
                    18:be:84:59:76:46:d9:d5:c7:ae:60:33:f4:69:34:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:0C:37:0B:80:D3:BC:5A:66:D8:4F:3D:48:4F:A1:6E:14:CF:87
            X509v3 Authority Key Identifier:
                keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:ac:23:ad:2b:03:33:d2:b7:d0:de:c9:0c:33:dd:57:4e:
         43:85:ba:a0:c4:30:13:b1:db:c5:c8:e2:63:dc:3b:c3:a3:28:
         28:4e:03:b9:9c:8f:48:f2:5d:86:09:d7:99:e5:8a:10:3e:07:
         d0:8f:b5:99:fb:85:b8:29:6e:07:39:5d:6a:c2:ba:30:96:ae:
         af:8e:45:f4:b9:a3:d9:9f:38:88:b3:4a:3c:6c:c6:ab:8c:0a:
         ba:01:0e:19:8f:f9:e4:a7:c8:f3:47:e1:5d:ad:54:5e:86:39:
         60:b4:76:8b:9b:c1:2d:9d:f7:86:03:83:89:ae:5d:93:13:2c:
         db:93:15:5f:53:ed:59:b2:40:33:88:87:a0:42:25:7c:b5:49:
         fb:f9:79:0e:af:e2:de:1e:af:6d:21:89:7d:b6:26:14:f3:f1:
         df:d5:e6:da:39:c6:ac:1f:78:a2:44:3a:5b:a5:52:22:6b:d8:
         b1:15:58:ae:a3:dd:95:68:e8:85:a2:3a:3c:5c:0c:ea:6b:d7:
         8e:ba:75:c8:5d:04:23:b4:a3:4f:14:77:d2:48:ec:89:99:31:
         77:60:1a:69:53:84:30:f3:cb:c8:19:7d:42:12:4f:42:c4:25:
         76:8f:41:d0:74:38:b4:a9:7d:f7:eb:c0:b8:95:1f:0d:ca:d3:
         f7:9e:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:26 2026 by rpki-client