Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          TDvizOiW6XlgF2ZIqpUx5Ztu7Uf+BkaKEAVHQbXZwM4=
Subject key identifier:   FF:A7:F5:45:1D:A7:BF:35:33:50:86:95:35:98:FF:6E:DB:B7:A0:8B
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       019F40511404A1E3A89102410E8411C1ADA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          1004
Signing time:             Wed 08 Jul 2026 06:01:23 +0000
Manifest this update:     Wed 08 Jul 2026 06:01:23 +0000
Manifest next update:     Thu 09 Jul 2026 06:01:23 +0000
Files and hashes:         1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: 61cukur/NFe1W87j6DI0WuCZp2mot9bg4rLlwxwIVRs=)
                          2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
                          3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
                          4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
                          5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:40:51:14:04:a1:e3:a8:91:02:41:0e:84:11:c1:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Jul  8 06:01:23 2026 GMT
            Not After : Jul  9 06:01:23 2026 GMT
        Subject: CN=ffa7f5451da7bf35335086953598ff6edbb7a08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:5a:9b:92:58:c4:06:35:f1:4a:2b:2e:fa:
                    bf:8b:3e:c1:15:a2:50:4a:e0:ef:19:8b:03:67:50:
                    75:ff:b1:04:ec:80:30:86:f8:0f:58:10:9b:45:8f:
                    1e:6a:43:51:45:91:5c:c6:2d:86:1a:13:56:3f:e8:
                    d1:b5:43:fa:83:13:a3:ae:23:f4:2d:6f:2d:e9:d8:
                    4a:5f:99:67:eb:20:69:a2:ac:f6:3d:27:91:36:36:
                    43:15:e0:23:57:da:fc:75:d4:4b:8d:ba:0e:b7:76:
                    ee:20:ab:2f:57:d0:e4:9f:7b:eb:e8:78:7b:a7:1f:
                    96:94:e7:f5:25:29:b4:74:c4:3b:b6:85:de:cf:4f:
                    f0:d1:bf:fe:a7:f3:99:fc:8e:6f:94:93:70:16:19:
                    7f:bf:69:0a:0c:ca:7f:60:9c:db:44:8d:3f:53:7e:
                    e1:08:56:84:fc:7d:4f:5c:3e:12:c8:53:12:30:50:
                    43:3d:3f:2f:fb:7a:03:04:21:f0:ef:1f:bb:f1:18:
                    74:ba:7b:78:3e:32:1a:a0:a9:49:ae:78:77:f4:53:
                    3b:9c:d4:1f:82:f1:f2:99:99:ea:8e:45:15:ac:f6:
                    88:1e:77:e8:4a:ee:16:48:fe:3f:59:b9:64:f3:18:
                    8b:b6:de:b7:50:bf:d6:6d:6b:c2:5b:7e:a2:46:c8:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:F5:45:1D:A7:BF:35:33:50:86:95:35:98:FF:6E:DB:B7:A0:8B
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:81:b4:d3:6c:93:77:f8:36:d6:06:39:6e:c5:e5:28:14:ba:
         41:ac:4a:41:2c:75:bf:ed:a8:6e:c6:78:d5:58:f4:3b:de:91:
         24:f1:36:93:e2:08:27:6d:45:44:a4:a4:d8:f7:e4:93:60:99:
         b0:18:fa:6a:e5:94:ac:85:84:b6:b5:cd:cd:f2:61:68:27:8e:
         95:f1:50:ec:d2:5d:b1:e6:f4:f4:7c:13:16:a3:83:a2:ab:9f:
         dd:e0:d2:cb:5a:66:c7:bf:ec:da:5e:61:06:48:f4:b3:18:77:
         cd:65:19:2d:17:ea:e4:87:c4:21:a6:ef:3c:6a:ae:78:a4:88:
         88:3c:42:6e:98:83:34:f2:07:57:80:14:52:3e:09:68:92:c4:
         fd:29:3f:87:5e:45:12:e8:14:67:a8:6c:d8:e6:e5:c6:3e:eb:
         a6:51:b4:5b:43:5e:d0:dc:aa:66:e5:8d:da:da:2a:b3:e2:56:
         d7:09:23:bb:67:87:80:95:69:c9:c6:52:fd:68:69:bd:e0:b7:
         05:2e:4a:82:6f:8f:9d:75:35:81:fc:b1:96:3d:e0:d8:b9:79:
         03:6e:5a:67:f4:df:7d:a6:be:de:7c:10:87:c2:3f:0e:3a:97:
         6d:21:1d:ac:37:7c:5c:9b:eb:04:5d:c5:51:ee:1a:82:4d:b4:
         c1:bb:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:01:54 2026 by rpki-client