Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          CyJyYznqQf2jqBSJIsmtfBILP+3oZ82jsr2yx/VOHZI=
Subject key identifier:   DB:4A:FA:24:41:98:A4:97:F7:98:17:9F:44:86:48:55:75:58:B1:36
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       019F91DB04CC38FF324AA618F73B6AE05C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          0C96
Signing time:             Fri 24 Jul 2026 02:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:17 +0000
Files and hashes:         1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
                          2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
                          3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
                          4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
                          5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: gav6UoysS0Ux2XArt4X7HxMrIwILQAd3WciBey0wsss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:04:cc:38:ff:32:4a:a6:18:f7:3b:6a:e0:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: Jul 24 02:01:17 2026 GMT
            Not After : Jul 25 02:01:17 2026 GMT
        Subject: CN=db4afa244198a497f798179f448648557558b136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:2b:9b:7b:ff:c5:df:a7:2a:80:8b:bd:4b:
                    69:ca:ee:d8:ef:b2:2f:5e:df:5b:02:a1:d6:f2:01:
                    09:fb:8f:bc:73:2a:28:6e:ee:fd:79:46:50:61:ac:
                    ad:ec:d9:09:b1:13:62:42:06:2b:8e:d9:94:aa:ce:
                    bf:12:41:1e:6d:48:16:3f:f5:63:e9:25:c9:0a:53:
                    34:f1:e7:ed:ad:ae:47:09:9a:5d:95:ee:af:c7:20:
                    b2:e9:52:2b:11:ef:63:e1:23:47:1b:33:90:91:85:
                    af:ac:32:9d:d0:da:6d:7e:b6:e6:a0:4e:42:d6:0a:
                    15:b1:a4:6a:6e:a6:c3:e7:c8:ef:cf:d5:30:ae:cd:
                    94:0e:03:1b:19:41:59:c3:24:32:95:59:b5:54:11:
                    38:54:df:d6:03:a7:66:ef:73:ea:e8:7f:03:1b:53:
                    11:ad:a4:05:3b:7f:e0:04:1d:a2:b7:46:c3:59:29:
                    10:1a:3a:11:00:1b:57:88:57:6f:f9:fd:da:5c:8c:
                    82:1f:df:42:e4:ed:31:69:dc:66:7a:86:26:59:76:
                    47:78:33:c5:3b:fb:78:48:81:27:0e:7a:db:d1:70:
                    b9:bc:1b:49:46:ec:13:22:fd:97:0c:e8:76:8e:b1:
                    a7:51:5a:8a:28:b6:c2:83:82:84:d3:c1:72:8a:10:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4A:FA:24:41:98:A4:97:F7:98:17:9F:44:86:48:55:75:58:B1:36
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:30:41:e1:1f:98:36:3e:f2:dd:18:00:89:22:8a:de:33:
         07:15:52:28:28:be:22:c9:65:a3:63:d5:70:87:7a:9c:77:07:
         8b:fa:85:85:73:ae:09:84:a1:b2:a9:18:2a:63:bd:63:52:bf:
         89:97:39:42:d4:11:01:56:74:18:da:a2:8e:2e:42:bb:fd:26:
         3b:aa:0a:4c:6f:56:f3:22:08:1a:72:62:c2:39:e1:f2:bb:f9:
         ad:7b:82:f8:b4:bf:46:b5:aa:6c:a4:b9:28:56:46:21:46:89:
         79:29:1d:58:45:7e:38:b1:5d:95:b4:7b:99:c0:d7:63:c3:cb:
         15:e0:df:19:fa:40:43:fb:57:0f:aa:53:18:d8:b8:da:6c:a7:
         09:e8:4f:5f:f9:b0:62:71:7f:cf:e5:00:3c:ee:30:95:48:e5:
         3b:15:26:d9:59:5c:e1:22:cf:3d:b0:c9:2d:6a:00:2d:05:8b:
         8c:96:72:4a:47:79:6b:37:23:8d:15:e0:38:18:fb:6c:d1:be:
         d2:42:b6:a0:48:d3:72:52:59:3d:3b:b4:b8:40:04:3e:b0:9f:
         dd:80:38:f9:99:b1:77:bc:05:e8:17:b8:7c:60:35:87:d3:a8:
         b1:5e:f9:0a:f4:b2:86:f0:19:03:08:5f:0c:03:95:39:59:13:
         cc:3f:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:40 2026 by rpki-client