Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File:                     nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier:          AFxG8pH5Dzbv9kDgRHPuOduTyhvmCWF0FINeNfkBang=
Subject key identifier:   2E:6D:DE:C6:A5:08:D7:39:E0:1A:B0:B3:E6:9A:69:FA:DD:F1:95:70
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer:       /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial:       019FA2602F499027A7AC3E526088A22BAA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number:          0781
Signing time:             Mon 27 Jul 2026 07:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:40 +0000
Files and hashes:         1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
                          2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: ycTCYGtbNYNTVQWoImhD51cI0nwUtjoGn88AgK7t9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:2f:49:90:27:a7:ac:3e:52:60:88:a2:2b:aa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
        Validity
            Not Before: Jul 27 07:00:40 2026 GMT
            Not After : Jul 28 07:00:40 2026 GMT
        Subject: CN=2e6ddec6a508d739e01ab0b3e69a69faddf19570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:80:cf:5b:8c:6d:31:b7:1e:b8:cd:89:09:
                    1a:0a:9c:71:51:ab:cc:be:2c:cd:1d:83:3e:63:84:
                    1a:20:47:47:e5:3c:bc:a9:35:db:2a:71:0d:e9:b3:
                    2d:9c:89:20:1c:67:cd:95:e6:81:50:43:d1:0c:66:
                    86:a4:c7:da:5f:e3:29:1e:18:5f:95:40:d0:49:c9:
                    76:1d:fd:b1:93:90:5e:5b:6d:78:97:89:be:ab:ef:
                    a4:cd:de:73:70:ab:25:e6:25:ba:d3:4c:b3:56:ea:
                    38:7b:46:e4:2a:09:cf:78:cd:cf:a1:55:e9:25:39:
                    4e:eb:4c:24:50:7a:a6:63:b2:6b:78:ff:bc:01:6a:
                    06:dc:50:7f:14:88:90:85:b2:c3:19:37:c7:83:7e:
                    dc:00:3d:b9:a5:09:86:60:94:4e:b8:57:8e:11:77:
                    eb:41:f7:e9:57:95:40:fc:d5:ab:a0:90:16:e2:9b:
                    35:29:d1:21:ba:2f:80:98:86:3d:c8:35:3d:30:a4:
                    64:9f:36:9e:ea:79:88:ae:e3:4e:2c:35:41:ad:85:
                    ff:85:39:0c:8e:34:b5:31:7f:06:8f:ff:0e:81:60:
                    9f:15:b1:49:9f:13:27:39:97:4d:47:8e:a0:b0:23:
                    c6:e8:1e:e3:c6:28:fd:c8:1e:77:aa:67:e2:43:32:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:DE:C6:A5:08:D7:39:E0:1A:B0:B3:E6:9A:69:FA:DD:F1:95:70
            X509v3 Authority Key Identifier:
                keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:38:c5:d5:e2:a7:0d:06:2b:44:5a:92:ed:84:66:a6:18:fb:
         08:99:4e:16:70:da:81:6e:36:4b:5c:41:a4:b6:8c:73:9b:ad:
         74:d6:99:71:84:50:a8:f7:80:6c:76:5f:48:f7:ae:c7:96:e4:
         c9:7a:e6:f2:3a:0e:34:ee:e0:4e:40:c9:7f:0a:68:06:be:66:
         fc:30:78:77:94:bc:1a:41:6f:5d:06:0d:4c:3a:9c:84:f6:d7:
         28:24:b2:ff:91:1d:f7:87:3d:09:4c:95:90:83:0c:ac:12:67:
         83:b2:4d:9d:c1:80:8e:a1:14:fa:ee:40:e8:7b:c8:15:1f:ad:
         8a:b3:42:58:17:d9:19:c4:a0:1f:b4:36:1a:9f:8c:c1:63:90:
         fd:f1:d5:42:53:83:8d:6d:8d:30:6b:08:07:f1:24:d5:08:04:
         68:c3:f0:72:b0:ba:85:84:23:f7:d2:2b:3c:bd:5b:14:a9:2c:
         ea:f6:19:55:83:0a:cc:bb:4e:bd:ab:e1:5b:5d:ea:69:97:35:
         ea:e7:58:b9:d1:af:3c:5e:4c:09:3f:78:40:8b:ca:a2:ac:b3:
         16:c8:5a:02:e1:8e:95:e4:64:d0:ba:85:4c:64:d3:13:89:87:
         11:09:ce:9a:04:df:3f:81:88:06:2d:d9:20:74:4d:27:0c:4e:
         b2:2a:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:27 2026 by rpki-client