Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          yrRrp0xRjTPDhA2a6F86KjzngcCuCL+OObNuAFL4PKM=
Subject key identifier:   BE:99:BB:86:3D:8A:C3:12:5B:CB:AC:28:56:87:67:FD:FC:46:D8:45
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       019FA0E0AA5A15DCDB66B06008B14A878AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          1196
Signing time:             Mon 27 Jul 2026 00:01:45 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:45 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:45 +0000
Files and hashes:         1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: V7+tw8aSp8ARTmk/H+fRCgV6tVaInP6Ar4cMYhGD3U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:aa:5a:15:dc:db:66:b0:60:08:b1:4a:87:8a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Jul 27 00:01:45 2026 GMT
            Not After : Jul 28 00:01:45 2026 GMT
        Subject: CN=be99bb863d8ac3125bcbac28568767fdfc46d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:15:40:cb:af:3a:48:c0:4e:a5:49:75:2c:
                    01:6e:8e:44:af:ed:2e:cd:5b:f7:da:c9:6e:f6:74:
                    45:e5:52:f7:b6:f5:7b:3d:32:c4:f6:f4:eb:66:19:
                    f1:0a:d2:1e:54:ee:15:15:34:f1:29:0d:95:32:4b:
                    cd:50:4f:d2:2c:ab:bb:49:2f:60:8a:ff:ba:b0:ed:
                    cf:04:3d:90:1e:a5:12:e2:d7:c3:e5:34:79:6d:1c:
                    b2:ed:05:c2:28:e0:34:b4:50:dc:5c:a5:f3:2e:1f:
                    e8:46:07:87:6a:0a:ea:cc:f3:dd:58:74:0a:bd:86:
                    bd:08:eb:cf:3c:78:fc:d1:d5:cd:14:24:eb:c5:b1:
                    af:4a:67:52:11:2f:19:1b:fa:fa:10:6e:a8:9a:16:
                    5d:d3:0c:0d:09:5c:61:f4:b6:70:f2:af:65:ea:af:
                    a9:32:a1:3a:31:ec:9e:57:02:a1:7d:a0:02:30:a1:
                    0b:09:4e:b7:bc:c1:f0:20:22:23:1d:dc:0d:c9:ad:
                    a6:c7:da:a1:2a:b1:92:a5:f1:62:55:f1:c9:27:1a:
                    11:2a:01:59:a8:51:fc:cd:b6:65:da:09:17:2a:33:
                    b1:fc:31:07:e1:84:44:10:8e:b8:43:02:40:75:01:
                    30:28:9d:61:33:39:bf:3d:3c:19:07:d2:08:46:f0:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:BB:86:3D:8A:C3:12:5B:CB:AC:28:56:87:67:FD:FC:46:D8:45
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:bd:16:35:ee:70:17:13:d3:c8:d1:cc:ed:8f:79:71:cc:
         80:ab:fd:ef:66:9a:c5:98:53:59:b0:d1:46:fd:4e:88:7e:3d:
         71:3b:2a:a4:08:f8:e0:9f:04:3b:1a:48:33:fe:29:d0:c8:f2:
         90:83:2c:74:2d:e1:8b:40:1f:1f:b1:0a:5a:10:60:65:36:ac:
         4e:35:34:9d:69:89:43:0d:e2:2d:24:0e:1e:c3:0d:44:33:67:
         21:7f:6f:49:34:92:e2:04:2b:06:04:67:e6:4a:89:0a:d8:0f:
         54:41:f3:8b:53:af:11:0a:7e:36:eb:7c:f1:d7:93:22:86:cb:
         7e:67:c2:35:59:5b:25:c2:24:f4:d6:96:cd:aa:25:47:9f:88:
         cb:fc:83:14:0b:b2:8a:87:8a:65:7e:6a:c2:3c:60:11:99:34:
         dd:40:c2:a7:07:49:9e:c1:09:4e:11:5d:f8:db:66:5c:4a:23:
         5a:f3:2f:13:c5:f4:c8:a0:b9:0a:e3:b2:3e:61:5f:bc:8c:7b:
         64:0f:07:fc:c4:dc:d0:55:a2:b7:18:ae:f9:cd:c9:c3:4b:ec:
         d2:dc:f2:26:ab:3c:f5:a3:49:11:07:52:b1:38:13:06:06:3d:
         51:7f:36:e5:66:1f:ad:19:15:52:c7:e1:73:99:7a:fb:ec:23:
         a3:de:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:37 2026 by rpki-client