Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File:                     NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier:          d3TkxQ509lOarVH62VTFWpFJQCiCJ4p8mDumnxJEXFM=
Subject key identifier:   61:EE:2C:93:AF:9E:15:62:75:10:E3:C3:9F:FA:AE:3A:5E:66:A6:D8
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer:       /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial:       019F9090F6471D3B19A8D8846F23F9056BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 20:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:46 +0000
Files and hashes:         1: 1IT2YxPCfIxNq71vO4148RYnUFE.roa (hash: Wc3xK74C+nn8hA7fgodWur3oZYQffDuB/6q65gbxW3o=)
                          2: MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa (hash: czv9oaDX9uocQn5ZLcnNiN6ZQ7Qagrx62umbfHCmvmg=)
                          3: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: JAXmw+5wmFeyZ5hP73G9ugfYzqF/MZy6NdR47p0lo8A=)
                          4: pP3Gylt_cXScwQG05O-i7ZbberI.roa (hash: D1R0gSpuoCuRFT+1LOp+3fEZGMYLA7llVr4974Zw4U4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f6:47:1d:3b:19:a8:d8:84:6f:23:f9:05:6b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
        Validity
            Not Before: Jul 23 20:00:46 2026 GMT
            Not After : Jul 24 20:00:46 2026 GMT
        Subject: CN=61ee2c93af9e15627510e3c39ffaae3a5e66a6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:3d:ad:e7:f5:c4:e9:80:98:ef:59:cb:78:
                    cb:e2:fb:9c:13:2b:dd:fd:61:c0:da:ad:20:3d:1e:
                    64:ae:58:7e:d6:69:d0:32:c6:03:65:cd:35:74:ff:
                    60:6b:7c:b7:5e:d9:c3:78:8b:a5:8e:74:ec:fb:bb:
                    74:55:89:24:ba:9d:9f:e0:08:c6:a5:8f:80:02:b9:
                    85:fc:7d:39:87:83:c0:22:f1:66:ff:48:e3:ed:2b:
                    2c:23:80:0d:c1:66:91:8c:ab:fb:c8:b8:ef:e2:dc:
                    e0:eb:ad:79:1c:fb:9d:6c:e9:c4:25:6e:24:97:ad:
                    4a:36:b1:41:b8:75:b8:57:1e:a1:5d:c5:81:99:39:
                    47:c3:07:cb:86:38:5c:ba:a9:81:4e:fe:d9:f8:ee:
                    39:1e:7d:65:ab:20:c2:36:c7:ba:a7:76:29:c6:90:
                    87:51:9b:9f:c5:70:98:38:28:de:6e:ce:2c:b6:0a:
                    0b:ed:ac:97:52:95:17:ff:36:da:95:40:d9:75:6f:
                    1a:a4:d2:d2:2c:25:94:79:99:a0:5c:31:18:3a:90:
                    7b:3b:cd:3d:dc:1e:23:ab:a3:44:d3:bd:9a:d9:9b:
                    b4:7f:9f:00:4e:39:6b:72:06:ce:61:53:3c:2d:05:
                    24:98:28:d6:b2:5d:c8:d8:ac:b9:cf:9c:10:22:61:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EE:2C:93:AF:9E:15:62:75:10:E3:C3:9F:FA:AE:3A:5E:66:A6:D8
            X509v3 Authority Key Identifier:
                keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:60:4f:40:6c:8f:2b:88:b6:d9:71:28:c1:bf:c8:84:eb:
         83:fc:51:0b:2c:47:a3:e4:5f:0e:37:4c:92:13:f6:1f:79:f4:
         58:40:ed:d9:a2:c9:87:d4:73:ce:f7:5b:cc:7b:6b:94:6f:28:
         38:d3:ed:26:66:9c:1a:76:9a:3c:41:73:e7:24:dc:fa:fa:4a:
         bb:55:ab:8e:db:98:db:8a:ee:dc:11:ea:47:70:80:66:d7:aa:
         8e:b7:c0:91:6e:16:80:12:ab:5f:67:ef:97:53:4b:f9:cb:28:
         54:eb:95:e6:78:e8:9b:56:95:f4:a9:ff:1b:b1:a6:89:c4:e9:
         76:9b:29:dd:1a:17:3a:18:2f:74:30:e3:96:88:3f:c3:45:9e:
         cf:94:c1:62:ff:15:99:66:70:ab:32:3e:64:fc:b1:cd:b8:cf:
         31:e6:e3:29:77:7f:14:c4:a4:29:d8:9f:6b:e7:45:be:85:84:
         a1:fc:8c:1e:16:d0:99:e2:8c:62:54:d9:f7:7e:62:81:f4:27:
         27:49:d4:9d:42:3f:eb:d0:a8:d7:52:a8:27:22:87:d7:bb:ec:
         c4:67:8a:5d:d5:25:32:b4:44:31:ce:74:34:34:5d:60:2a:48:
         57:ae:b0:80:da:88:6a:ef:03:c8:55:07:d9:78:a5:94:3e:56:
         06:22:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:20 2026 by rpki-client