Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File:                     Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier:          U5WsEm2/eZkTVA9pBZqPcF2VIUx8lzYkdLUNRzDlZns=
Subject key identifier:   A0:DC:8D:9B:1F:61:C9:3F:6D:0F:2A:A6:C9:8A:27:57:F4:B7:F1:7A
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer:       /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial:       019F91DAC61BD0DDE507124BDA9E8883FE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number:          0D12
Signing time:             Fri 24 Jul 2026 02:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:01 +0000
Files and hashes:         1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
                          2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
                          3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
                          4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: iVmOEOD1TR2FRF7nUz70UUUei24Ag1PncJZ3HwhEW78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:c6:1b:d0:dd:e5:07:12:4b:da:9e:88:83:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
        Validity
            Not Before: Jul 24 02:01:01 2026 GMT
            Not After : Jul 25 02:01:01 2026 GMT
        Subject: CN=a0dc8d9b1f61c93f6d0f2aa6c98a2757f4b7f17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:60:87:62:30:9e:4e:77:4f:35:99:ce:34:
                    3b:d9:c8:fb:b4:fe:30:fb:ee:02:2d:03:64:f2:a8:
                    e8:ab:f9:36:70:72:79:08:c0:bd:69:68:6b:19:bd:
                    09:73:33:bd:58:d6:ad:79:31:6d:1b:d0:c6:bb:7a:
                    24:08:bb:17:0b:d3:b5:f0:9e:8e:7a:45:4b:61:c3:
                    16:b0:34:7c:e7:60:5b:30:10:d6:1a:c5:0a:91:60:
                    f6:64:6c:d3:4e:35:e3:ef:dd:3d:13:4b:c3:0f:6b:
                    7f:68:a1:71:cc:59:ae:82:12:d9:ed:a3:34:bf:c3:
                    78:51:c9:ff:f8:8d:6c:23:2f:9c:05:08:48:bd:aa:
                    35:48:0e:37:88:a7:40:84:ec:23:59:0b:26:4e:f9:
                    96:b6:bc:4e:da:3b:fa:6a:10:31:81:9f:35:a3:47:
                    d5:70:2d:af:1d:42:18:35:86:3a:dd:f2:08:9e:30:
                    bc:22:3d:d9:73:74:9f:da:1a:6e:d5:f7:6a:0a:d5:
                    c0:87:fb:af:94:11:88:45:1d:0b:29:e6:69:d3:c3:
                    2f:00:6a:fb:56:60:ca:2a:ca:30:87:69:7b:78:25:
                    b6:41:95:23:18:8f:fc:19:16:a4:3f:c0:de:f9:e0:
                    30:62:62:5e:ce:0e:d3:4c:a9:15:14:2a:b6:c2:f3:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:8D:9B:1F:61:C9:3F:6D:0F:2A:A6:C9:8A:27:57:F4:B7:F1:7A
            X509v3 Authority Key Identifier:
                keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:36:4a:3b:4b:a8:e4:06:a8:d8:92:88:09:09:90:c4:ae:a6:
         a5:d2:44:a3:aa:41:42:cc:15:59:dd:fc:87:28:95:5a:f0:ee:
         f2:59:26:d7:ef:dc:e3:84:d8:e6:44:d9:3b:06:b4:ca:39:29:
         a6:87:bb:31:c7:5a:87:c2:ac:e4:22:3e:96:90:e2:41:98:71:
         b4:46:b3:2f:86:a9:86:df:e6:cc:c8:f6:b8:7a:96:05:08:7d:
         de:95:a1:61:24:43:b2:ff:5b:8a:b0:27:d6:01:08:6c:2e:36:
         ea:9c:22:a6:06:ae:08:71:03:9b:ff:da:17:e5:43:2f:ef:4b:
         a9:3c:f8:2c:dc:80:81:1f:28:d2:9d:09:71:f9:24:02:f4:c8:
         d1:14:76:3f:e4:81:30:43:03:b8:76:fe:00:e0:4a:e7:82:af:
         0d:60:74:5d:d3:cb:19:1e:22:9f:2b:f8:c8:ce:9a:81:58:b3:
         e2:5d:05:96:e2:fc:c9:37:40:34:eb:16:f5:86:6d:ca:ab:d9:
         10:fc:2f:cc:b5:b8:bf:52:26:5e:6b:9f:dc:cb:9a:77:56:c8:
         34:ee:c7:6f:3e:e6:b8:22:57:4e:75:87:82:6a:03:4c:bc:fa:
         72:fe:04:68:96:6f:47:02:1c:b7:39:2b:f9:f3:eb:72:4e:92:
         9c:0a:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:37 2026 by rpki-client