Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          N0KglxpngewDp56w3FhjDP7amk7yfvyryVfhQMhRnWY=
Subject key identifier:   6F:82:B6:9A:94:3F:DE:7F:86:4A:A4:32:E0:10:63:E8:D7:41:AA:77
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019F916DD6B27F3C810A75F738F6C9C48058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          19A7
Signing time:             Fri 24 Jul 2026 00:02:02 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:02 +0000
Manifest next update:     Sat 25 Jul 2026 00:02:02 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: Yhc6Hx93tfNoyO8FyE3A+DoGDwH/ptVx014Cow0Fy9M=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:d6:b2:7f:3c:81:0a:75:f7:38:f6:c9:c4:80:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Jul 24 00:02:02 2026 GMT
            Not After : Jul 25 00:02:02 2026 GMT
        Subject: CN=6f82b69a943fde7f864aa432e01063e8d741aa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:b5:0b:0a:d5:ba:7a:8c:54:1e:5c:95:3a:
                    21:62:83:fa:d0:c0:97:43:aa:87:0d:bb:75:f9:62:
                    b1:49:e5:77:e4:89:5d:70:14:b0:02:87:79:e2:36:
                    94:98:8f:c6:4e:ce:f3:5d:93:ca:e8:38:cd:d5:ad:
                    d7:3e:f9:a1:98:60:0d:ce:7b:e1:4f:e0:78:79:b9:
                    e8:d3:06:cf:e1:1e:bd:8e:4e:c2:3a:8a:4a:82:65:
                    b7:5b:91:4d:26:85:80:7f:ec:6e:21:3a:70:66:83:
                    82:d3:ee:01:e9:4a:c8:24:4f:88:05:a1:51:22:a0:
                    53:08:dc:bc:59:24:81:95:cf:a8:e6:3a:2f:3d:35:
                    60:4a:9d:4a:3c:02:54:2c:17:03:09:5a:16:51:ea:
                    d9:78:a2:19:47:c9:f0:a6:92:b1:ef:e7:95:fa:e7:
                    8f:47:7e:54:e5:a5:29:fe:31:9e:a1:14:01:b1:09:
                    b7:23:08:a8:85:25:35:86:08:f6:9b:71:2b:3a:41:
                    c8:9d:02:72:43:f0:57:bd:51:fb:dd:c9:1b:33:26:
                    36:4a:d8:b9:6b:b4:18:f2:79:91:db:ea:74:ce:00:
                    db:fc:61:32:2f:74:ca:3b:db:c4:66:8d:97:c5:21:
                    68:fa:ab:c1:07:0c:9b:2c:88:e9:be:e3:4c:75:a8:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:B6:9A:94:3F:DE:7F:86:4A:A4:32:E0:10:63:E8:D7:41:AA:77
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:73:fd:24:45:82:bb:28:3f:3f:7f:1f:46:6e:13:30:d3:
         41:58:10:d3:08:b2:60:8f:2e:41:43:7c:df:41:d8:f5:19:01:
         5e:e5:c4:0a:ab:2c:4c:c0:5d:c5:ee:ee:6c:6b:c1:d0:15:00:
         c3:52:b1:62:7c:60:82:20:e4:a3:88:57:da:ab:cf:64:5b:66:
         44:19:40:57:34:26:66:1c:21:65:6c:76:4c:3d:01:81:9c:50:
         b9:2f:b1:60:32:3a:b6:2c:47:53:73:d5:51:11:f4:85:9c:9d:
         31:1a:01:9b:48:a3:f1:18:1c:b4:98:3a:fd:5c:c5:ef:03:42:
         5a:24:25:0d:4a:46:28:73:b2:f9:3b:65:4d:3f:6d:0b:48:38:
         66:01:3a:7a:f4:4d:c9:91:ae:23:55:fc:5a:18:a9:2d:83:e3:
         63:82:2f:15:a8:9e:ba:da:00:23:51:fe:5a:e7:1f:0f:bc:d1:
         61:91:59:cc:8d:b9:c4:74:d5:d3:5d:01:2e:6d:79:33:05:5c:
         a8:5f:be:5c:e3:52:68:76:37:28:01:cd:b3:a1:f5:5d:52:1d:
         9c:9d:00:93:19:eb:f4:fb:6f:e1:b2:2b:25:c4:2a:a5:51:86:
         06:d4:a2:79:50:9c:87:07:b2:63:e7:a5:23:83:bd:d4:0e:98:
         9c:ac:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:02 2026 by rpki-client