Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File:                     N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier:          qsI31BYEEMyoavpou9iSayBtA+o+EFy8GR4bS+uSwDU=
Subject key identifier:   0D:FD:EB:31:62:D1:AD:D0:E7:06:51:25:11:11:C5:72:7D:FE:34:3E
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer:       /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial:       019FA184C916917BF32962CF0B3FD74E92D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number:          1086
Signing time:             Mon 27 Jul 2026 03:01:01 +0000
Manifest this update:     Mon 27 Jul 2026 03:01:01 +0000
Manifest next update:     Tue 28 Jul 2026 03:01:01 +0000
Files and hashes:         1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
                          2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: X58paFUnlx/W8VSoZ3oupma6d43T+LGIst3H13jfG4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:c9:16:91:7b:f3:29:62:cf:0b:3f:d7:4e:92:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
        Validity
            Not Before: Jul 27 03:01:01 2026 GMT
            Not After : Jul 28 03:01:01 2026 GMT
        Subject: CN=0dfdeb3162d1add0e70651251111c5727dfe343e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:c9:66:9a:f7:80:81:f1:7e:33:06:c8:14:
                    83:9d:6c:42:49:1e:8a:01:a0:08:9e:a1:fc:f9:3d:
                    bc:4c:24:a4:e9:2e:dc:1c:69:ca:83:e5:a0:17:e4:
                    6c:69:3c:a6:20:72:b3:cf:52:5a:5c:94:05:b6:29:
                    34:52:ed:ae:76:2b:7c:48:72:68:21:6d:93:06:75:
                    37:b0:2d:dd:c0:f7:fe:83:08:fa:f1:24:92:c6:b4:
                    12:07:5f:84:42:6f:35:22:aa:9a:ba:9d:b2:96:e1:
                    5f:28:7b:b6:2b:0e:99:dd:e1:78:d8:ee:a9:b0:92:
                    41:8e:5e:cd:d5:23:a1:53:77:f3:29:21:76:e5:b3:
                    29:39:f1:34:b3:bc:f4:a5:47:1b:cc:c6:b5:0c:23:
                    43:c8:ad:d2:b7:f3:d0:90:a3:92:a4:0f:ce:ec:c2:
                    5c:c9:df:91:46:d6:f9:6e:f6:7e:f9:0d:f0:a2:04:
                    1e:57:c5:6a:60:7b:23:c9:b7:ba:0d:a6:ce:53:e7:
                    e9:ba:d0:37:62:0b:08:55:bc:16:70:fa:78:cc:5a:
                    b0:41:79:16:5e:a4:a3:08:33:1d:8e:2a:81:32:c0:
                    0f:86:a7:b9:b8:66:71:50:74:78:ce:ed:63:ee:70:
                    26:ea:f3:b5:b5:5c:78:ad:19:13:7f:99:e4:2c:59:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:EB:31:62:D1:AD:D0:E7:06:51:25:11:11:C5:72:7D:FE:34:3E
            X509v3 Authority Key Identifier:
                keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:61:b2:4b:02:ee:bc:4f:3c:86:37:ab:48:ba:ec:cb:56:
         ec:2d:5f:f0:59:db:cb:30:98:cf:ad:25:b5:d6:8c:6c:ac:23:
         b7:6b:1a:5f:dc:33:ca:22:64:bf:13:43:08:27:e2:89:8f:be:
         7a:6d:d5:62:ea:0d:50:99:6b:7c:97:81:87:04:8d:31:cf:fa:
         9c:d3:e7:20:c5:89:67:de:7c:1c:6c:e4:ab:20:c4:a2:10:11:
         4f:54:cb:1a:b1:31:3f:49:b4:0d:c4:8d:22:82:a3:f8:f8:a4:
         d2:6c:16:58:73:ed:1e:3d:63:28:77:f7:94:69:71:a1:86:cb:
         57:09:63:d8:1e:cc:aa:80:46:ed:96:ac:5e:49:25:bd:a6:d5:
         e6:66:4e:3c:a6:00:38:78:b3:ee:07:75:c2:d0:08:0f:cb:d3:
         8d:20:b8:6b:28:bf:f7:d5:2f:32:03:2e:89:ab:4f:93:9d:ad:
         d9:d9:2a:82:ab:d8:2f:35:90:0f:2c:a9:a7:04:b3:19:9a:f2:
         d3:12:b9:df:0c:e8:12:ae:b6:05:76:dc:52:91:c9:e7:5e:f5:
         dc:50:7d:c2:8b:7b:3b:13:03:6b:f6:e5:d7:db:7b:ef:78:42:
         9a:19:7d:71:d1:be:b5:37:55:e1:75:b6:3b:37:65:7e:88:17:
         c8:3c:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:41:57 2026 by rpki-client