Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          uzeuBRRjLjHf0q2DSuJaYVxngFiYgfXr+5Be4h8dxm4=
Subject key identifier:   29:08:D5:BE:01:89:CC:C4:1C:59:A4:02:9B:AD:E7:57:84:53:F5:D9
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       019FA1165B075E9C0E46BF7C250706B98CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          0956
Signing time:             Mon 27 Jul 2026 01:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:24 +0000
Files and hashes:         1: SWhQi_UAdhdfZQ8xohoDcQApCOc.roa (hash: gJ6z0wn4XpC1RNjkvRpV7fnnpuhf2KJJCHokwAqVqC8=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: Z2aozoXslIUpDqMiVcFxaBaT7CJzkQ4+wBgUjd/uyFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:5b:07:5e:9c:0e:46:bf:7c:25:07:06:b9:8c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Jul 27 01:00:24 2026 GMT
            Not After : Jul 28 01:00:24 2026 GMT
        Subject: CN=2908d5be0189ccc41c59a4029bade7578453f5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:d4:46:fe:eb:f5:db:e4:99:58:83:b3:ca:
                    0f:b8:f4:b4:2b:53:cf:c4:39:3d:d0:59:90:64:34:
                    36:6d:d1:24:5c:69:65:0f:09:31:18:c4:00:d0:4e:
                    76:1d:dc:38:5a:e0:1a:bb:33:25:5c:29:ed:91:be:
                    98:c0:93:9b:9c:74:08:dd:ae:e7:5b:0d:3f:8b:a3:
                    c5:fc:2f:f4:cf:f5:e7:f3:1a:d3:4f:ea:a7:b7:20:
                    92:a2:0f:50:63:51:40:54:71:f0:f5:a4:e9:2e:6d:
                    2b:df:0e:b2:b8:d7:03:07:04:1d:26:b5:91:10:0b:
                    69:e2:56:44:fe:f2:ab:f4:ba:de:e3:d5:d5:66:70:
                    29:37:e9:8a:6a:da:16:4e:70:09:bd:a4:29:a6:38:
                    70:19:fe:bc:7b:5d:4a:9f:e5:99:c6:f9:71:4e:d2:
                    47:f9:ac:36:66:6f:e9:cd:0f:5a:00:f2:25:f4:e9:
                    af:04:26:44:99:31:ca:aa:05:04:a0:4f:48:df:70:
                    32:37:20:24:c8:1d:44:32:71:c5:7f:5b:dd:9e:19:
                    f1:bc:ee:2b:2a:0d:d1:fd:de:e3:7b:4c:bd:49:6a:
                    7a:fe:5c:3c:45:f2:69:d7:59:e6:54:4a:d7:8a:88:
                    26:7f:ae:91:31:91:cf:45:50:b9:48:4c:0d:9f:d5:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:D5:BE:01:89:CC:C4:1C:59:A4:02:9B:AD:E7:57:84:53:F5:D9
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:72:51:7a:4d:7e:16:c5:55:78:24:67:17:ee:a0:2e:fb:df:
         23:7f:8a:cb:64:d6:87:ce:6b:9d:e2:de:95:b3:f9:48:66:39:
         bf:fe:56:a2:55:a1:50:2f:28:10:7f:87:67:43:72:85:47:7c:
         da:97:e9:b1:55:9c:af:5e:e3:70:16:5c:a3:94:14:73:df:38:
         38:f7:24:11:76:75:2a:13:f1:df:99:49:9e:a4:d5:2b:80:65:
         c3:0e:7e:69:10:1f:41:c4:17:20:02:ba:f8:bd:f7:be:e9:f6:
         3f:26:28:a4:06:a6:7d:2d:c0:9b:62:be:a2:89:3f:e9:9d:46:
         cb:71:7b:8c:37:de:b1:1d:98:eb:22:e6:08:9c:20:5a:83:6d:
         7d:ce:74:50:04:42:08:17:72:f0:66:54:b9:c4:20:2f:83:a0:
         62:9a:1b:2b:3b:16:79:dc:4c:e4:80:f2:c4:78:1f:1d:97:39:
         c3:66:cc:71:bf:4e:ed:a6:9e:64:fc:d2:d8:1c:12:9a:9a:b2:
         44:c4:a5:7f:af:d9:4b:10:ec:15:74:31:e1:74:0a:82:44:2f:
         5d:f9:ca:a2:24:99:60:d4:e6:d0:87:68:c4:58:53:33:41:23:
         b4:5b:ae:1a:a4:6b:fa:cb:68:4a:fc:ea:44:e0:d4:54:b0:7f:
         b3:10:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:16 2026 by rpki-client