Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File:                     NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier:          aIhXy8CJiOucOJ14LAUcDkCu4CMlZwJfAJ15Mkb2IFM=
Subject key identifier:   05:71:E2:2D:38:92:31:75:B2:79:72:F6:BA:E1:40:4D:17:51:B2:37
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer:       /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial:       019F95804615EF7A1C996DC7230AC5F67594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number:          1140
Signing time:             Fri 24 Jul 2026 19:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:39 +0000
Files and hashes:         1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: /KhpMgkm83JHqHZB/kGI2QRDoK2TgNRJ22fs1HgmKGs=)
                          2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:46:15:ef:7a:1c:99:6d:c7:23:0a:c5:f6:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
        Validity
            Not Before: Jul 24 19:00:39 2026 GMT
            Not After : Jul 25 19:00:39 2026 GMT
        Subject: CN=0571e22d38923175b27972f6bae1404d1751b237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:84:7a:6b:9a:e7:62:69:25:90:fe:f7:60:
                    dd:81:7e:50:86:fa:a4:46:30:52:6b:66:7a:be:f7:
                    3d:87:c5:c8:19:0e:1f:d6:54:1c:e6:9e:08:0c:8c:
                    50:4e:1e:07:af:06:04:6a:72:d9:9c:25:2f:e7:ef:
                    48:e0:be:97:9b:d4:6f:50:f3:8d:54:94:3e:26:da:
                    ca:48:b1:80:34:6c:74:bb:cc:cf:a5:8c:7b:d4:eb:
                    c9:47:1a:fc:37:70:91:46:67:e2:b6:6d:ba:e5:bc:
                    13:ea:d6:f1:3e:15:b1:51:38:b0:ec:db:0c:7a:7b:
                    2f:b6:f3:ce:15:9f:2e:31:ee:10:d5:6b:90:5b:1c:
                    02:7b:c5:74:17:bd:5d:33:0d:14:28:78:9a:fe:7d:
                    66:21:a8:9c:4a:a2:fb:09:c6:b4:4b:ff:85:a9:88:
                    16:5a:41:75:d3:14:e6:c0:aa:78:fa:52:eb:fa:6f:
                    25:34:b9:3b:f0:49:7e:26:ee:f4:a7:2d:bf:00:62:
                    3f:e9:8e:75:86:45:8c:7c:7e:b8:6e:fe:da:18:82:
                    52:00:db:36:4a:a3:cf:68:ff:fe:ef:4b:d9:f3:73:
                    57:2f:97:fc:a5:12:13:68:cd:41:86:79:e7:28:71:
                    cb:9a:51:51:4b:d7:45:12:74:72:5e:33:15:73:ce:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:71:E2:2D:38:92:31:75:B2:79:72:F6:BA:E1:40:4D:17:51:B2:37
            X509v3 Authority Key Identifier:
                keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:47:7a:d4:8f:4d:c4:19:2f:8b:42:28:f9:f8:77:a3:7a:7c:
         20:79:11:a5:d5:c9:0f:ee:2a:62:97:6f:ec:08:02:30:13:dd:
         cb:0d:14:cb:cf:d3:0e:72:f7:38:ef:df:0d:fa:a0:1d:c4:71:
         33:61:59:14:9b:e9:52:2a:47:66:d8:8d:38:49:0f:e1:c5:c4:
         29:b6:90:bf:78:1e:79:37:90:99:58:13:b2:a0:2d:e3:ab:6e:
         4b:06:a5:a9:87:37:fb:cb:fd:64:c7:12:71:36:cc:4b:9a:76:
         cd:dd:6d:a6:cc:99:e7:f6:fe:7e:74:3b:2b:c9:fd:68:85:83:
         4e:a4:38:af:38:42:0c:2e:cc:31:a1:60:37:7b:ec:00:77:fa:
         c8:02:bd:40:87:1e:e7:28:b4:26:f4:6b:07:b3:6b:dd:d9:f5:
         d9:da:8e:9a:a9:db:80:e8:6b:cb:86:49:e3:d3:11:81:7c:43:
         70:87:3e:95:7d:bf:d8:00:6b:c6:c4:e1:06:5e:2a:0e:79:e1:
         17:c1:64:40:32:13:44:ed:31:9c:e2:db:8e:d5:89:b9:4a:1b:
         76:97:1b:c1:d2:f0:e2:bc:1b:cc:26:53:81:87:e0:5e:30:6d:
         3f:b7:f0:20:38:58:8e:60:45:ca:ac:1d:bb:79:c4:70:1d:e9:
         f9:97:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:32 2026 by rpki-client