Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File:                     nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier:          0ENMOrJNN57yYVyAB3MidVBlrktEBXtJwj0MIKLaNV4=
Subject key identifier:   5C:C0:57:30:3A:42:9F:29:71:F7:4C:4F:AC:D4:7A:19:9C:39:E1:54
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer:       /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial:       019F9392366F95F77F5B09EE00EB85FDDC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number:          0A69
Signing time:             Fri 24 Jul 2026 10:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:00 +0000
Files and hashes:         1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: tMzMKEUOxkOMUzyyVg0xaY8HoN/WuwmSOsw3g+DQ8co=)
                          2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:36:6f:95:f7:7f:5b:09:ee:00:eb:85:fd:dc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
        Validity
            Not Before: Jul 24 10:01:00 2026 GMT
            Not After : Jul 25 10:01:00 2026 GMT
        Subject: CN=5cc057303a429f2971f74c4facd47a199c39e154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:31:85:48:f9:b6:eb:34:fa:2f:fb:63:d6:
                    71:d9:90:fb:cb:e1:1d:9f:48:22:db:b3:fa:ce:ef:
                    d2:9d:59:13:9c:14:40:00:1c:96:a4:3b:b2:50:9e:
                    99:bc:1f:b2:62:cf:50:12:5d:b2:6c:c7:c2:f3:1d:
                    d4:cd:a1:c9:64:b1:da:5a:f1:97:e8:dd:ac:4f:86:
                    61:4e:0d:73:29:d7:08:39:ae:52:a7:04:4b:87:20:
                    ab:51:c1:98:61:0e:11:42:1e:45:bb:62:7a:fb:04:
                    60:63:a7:f7:2d:cd:1a:c8:9a:6d:84:28:ea:02:20:
                    13:69:76:30:4a:18:d4:02:d6:75:0c:29:ef:f1:5e:
                    d2:cd:df:1b:1e:cf:f7:65:c7:e1:8f:b8:01:f9:f4:
                    10:98:a2:e7:73:12:7b:37:d3:e6:18:ea:1f:f7:ac:
                    15:30:28:19:56:00:3a:4c:5b:cb:9e:96:f8:3b:90:
                    4a:a1:ab:56:09:f6:35:a5:4e:a4:a0:9b:e9:3b:ce:
                    17:7b:c8:9d:c9:42:e3:18:d6:19:37:a4:e0:df:dd:
                    11:2d:96:07:0d:44:c4:d4:e6:af:73:db:bd:3d:24:
                    af:01:c5:ef:f6:c8:aa:2a:db:7d:66:69:e8:e9:23:
                    d4:c0:25:93:c9:9e:af:ca:4c:47:66:fa:76:10:4a:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:57:30:3A:42:9F:29:71:F7:4C:4F:AC:D4:7A:19:9C:39:E1:54
            X509v3 Authority Key Identifier:
                keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:65:95:fe:ce:cf:f4:37:d3:dc:17:b0:8b:0c:27:f3:a9:
         44:5a:bd:2b:54:2f:47:5c:4f:0e:cd:08:cc:57:05:b8:40:6b:
         97:0d:9c:6a:fd:e5:d7:4e:50:f9:8d:1c:a0:16:d7:21:4a:9d:
         c1:ea:69:1e:f3:b3:13:e7:51:2c:a0:33:18:96:4f:34:98:e6:
         0e:4f:2b:93:97:e7:b3:ea:fd:fc:e0:fa:80:cf:9d:b2:7d:75:
         e5:6d:f3:af:17:f1:2c:bc:b4:78:fa:be:cb:3e:87:53:e2:0e:
         af:0f:32:f3:ce:c2:2c:bb:cd:15:09:b4:09:96:e7:e5:3f:75:
         34:ee:01:6b:07:1d:37:2c:33:9e:c2:fa:f1:f8:72:8e:b5:e7:
         df:96:e7:83:78:d1:f2:31:ee:72:a2:bc:a5:c9:fa:94:ca:4b:
         ae:ad:5d:f3:d5:38:c7:8f:0d:73:7f:f5:42:44:29:76:5a:68:
         d7:68:26:8f:c2:61:7d:c6:a0:45:ae:8b:95:e1:73:cc:b8:7d:
         2d:13:b5:8e:02:9f:9e:66:5f:7c:f1:29:d1:4e:e6:3d:3c:31:
         97:4a:29:24:7e:68:5b:83:96:b5:3c:40:be:13:5c:1f:1e:7d:
         93:71:70:c2:b4:d6:68:5b:7b:46:0f:f5:36:d7:e8:3c:a0:7f:
         ed:10:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:15 2026 by rpki-client