Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          dfvoA/E85EHWKBch+k+chNBEQeHlHjEQZcsB1zQoEk4=
Subject key identifier:   18:4C:E2:2B:11:C3:76:18:5F:77:12:2E:21:C9:64:15:93:E8:09:A5
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019F8FB4ECE956EAA7551E13811C098FC0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          19D4
Signing time:             Thu 23 Jul 2026 16:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:26 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: cbrnF35bg/fOxuV2VtrG1TjTEXPELpZPiIN1vtEkH3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:ec:e9:56:ea:a7:55:1e:13:81:1c:09:8f:c0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Jul 23 16:00:26 2026 GMT
            Not After : Jul 24 16:00:26 2026 GMT
        Subject: CN=184ce22b11c376185f77122e21c9641593e809a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:4f:87:82:33:c1:0b:14:23:68:70:11:e5:
                    8d:35:57:69:ac:86:f1:1d:fb:d9:08:ee:bd:02:07:
                    45:01:84:8c:6d:32:d3:0f:55:60:4c:8f:bc:3c:2d:
                    a9:33:45:dc:4a:09:09:ab:6b:0e:f3:43:fb:d1:ae:
                    55:66:2e:3c:a8:fc:0e:4a:47:05:38:55:0d:a3:05:
                    e0:f6:20:ef:7a:1d:ba:65:00:bb:5e:3d:de:a8:56:
                    9a:cf:23:35:b4:28:be:a7:19:ce:d9:53:78:6a:9b:
                    cb:84:fb:c5:9a:51:41:ea:50:25:6d:fb:09:2f:cd:
                    bd:e6:cc:b8:d3:cd:4e:a0:19:a1:05:ce:16:8e:df:
                    bd:a2:95:34:c6:ed:fa:f2:2c:40:cf:ca:7d:f8:ba:
                    09:9d:d3:a3:79:fc:88:d9:5d:27:70:71:35:0e:c9:
                    a3:54:de:96:59:cd:8b:76:d2:74:d5:81:76:bc:b8:
                    c8:da:19:bf:4e:b1:3a:81:f0:d3:a1:7b:c7:67:57:
                    94:81:40:68:a7:38:85:75:c5:8b:5a:03:85:04:f2:
                    de:1e:54:9f:de:e0:75:f9:9e:c8:87:ba:37:20:b4:
                    ef:98:99:42:bb:b5:9a:9e:55:46:1a:19:e6:98:59:
                    98:cd:a9:a4:f5:1a:6d:53:0a:b3:59:de:74:56:f1:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4C:E2:2B:11:C3:76:18:5F:77:12:2E:21:C9:64:15:93:E8:09:A5
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:b7:02:1a:15:a7:28:60:ca:5e:6b:46:26:6b:67:7a:cc:
         ac:d0:fe:df:a0:71:77:e2:bf:c8:10:68:a9:41:f4:14:1c:da:
         34:a7:95:7f:e3:f9:aa:f0:c7:5f:2b:98:6e:9f:05:ea:9e:18:
         f2:c4:12:d9:65:00:a2:2c:fc:86:b4:58:c3:c7:eb:f2:4c:f1:
         8f:46:d5:69:bc:90:d2:6a:0a:ba:05:43:9e:9d:76:c9:02:16:
         9f:db:4a:d1:3f:b8:0f:88:60:8e:52:4f:1f:5d:98:8c:46:56:
         05:92:25:3b:82:66:e6:67:5c:85:44:8a:ab:92:72:be:f4:68:
         c5:39:aa:40:bc:01:43:8f:4f:d4:8c:6a:30:a0:9c:98:6d:28:
         0d:15:5b:f6:31:b6:1c:20:72:ca:41:3e:a8:51:57:47:67:e8:
         69:ac:1b:14:4e:94:f0:b3:c2:91:9e:06:25:bb:ac:21:d9:05:
         69:66:ec:6c:1f:31:3c:6a:a4:28:bd:0b:b7:d6:7d:0f:84:9d:
         d9:15:0e:2a:65:ae:e3:9d:4d:57:a4:d2:18:f2:65:af:0e:c8:
         60:6f:d3:b5:d0:40:a2:3d:bd:3f:81:d3:ce:36:0d:2f:14:1c:
         f2:ee:9d:ad:df:eb:4b:96:63:53:c0:f9:e4:55:2d:80:4d:fa:
         81:5d:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:16 2026 by rpki-client