Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File:                     nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier:          nQzo2sQhkOaMvPiU3BUYyF8JiNBzz60wVbLDyA7qVX4=
Subject key identifier:   03:FF:B7:BA:1B:31:3B:BE:97:E4:6D:C1:93:8E:42:2C:4D:C3:BC:2F
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer:       /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial:       019F9436AC274B7CD34DF92E5E9B1C4BE77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number:          0CCB
Signing time:             Fri 24 Jul 2026 13:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:38 +0000
Files and hashes:         1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
                          2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: BAb9Qz6G0PKQfNeQ3AdxeAZ74TlTY3T60btp3OIw+Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:ac:27:4b:7c:d3:4d:f9:2e:5e:9b:1c:4b:e7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
        Validity
            Not Before: Jul 24 13:00:38 2026 GMT
            Not After : Jul 25 13:00:38 2026 GMT
        Subject: CN=03ffb7ba1b313bbe97e46dc1938e422c4dc3bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:42:4d:ec:5a:13:55:32:f2:c6:ad:d0:fc:
                    14:fe:c8:b3:4d:39:6a:da:66:6c:1a:6e:80:f8:39:
                    ba:1a:2e:ef:6f:5d:29:ec:3c:20:8e:8e:c3:b2:70:
                    73:ee:ed:88:22:ba:3a:2d:8b:d8:c5:1b:47:f4:b6:
                    44:4d:66:d8:5b:5a:6a:6b:cb:c9:81:ef:16:ff:3f:
                    42:12:15:87:23:f9:5f:74:5e:34:09:54:85:42:8c:
                    31:a4:cb:05:d1:a1:66:bf:f8:38:fc:11:31:f1:ac:
                    73:0f:e2:d5:c0:5b:97:ae:54:e8:5e:52:6c:6c:8d:
                    be:34:b7:bc:af:dc:b8:d1:c3:1e:48:f6:40:b3:db:
                    cc:dd:ff:8b:27:8e:f1:e1:cf:35:52:e7:46:90:16:
                    91:5e:a4:af:84:da:12:89:d4:d2:48:23:2e:a1:93:
                    e5:70:5e:19:ad:50:ca:25:b1:ff:87:84:1e:20:b4:
                    e1:19:01:6c:5a:a7:3c:f5:eb:ed:93:a4:f3:58:1b:
                    7f:84:0c:ff:d6:36:05:d0:1d:01:d2:a1:12:70:7b:
                    58:e7:17:7e:c9:94:e1:fe:9c:bf:39:92:72:9f:2f:
                    c0:ec:ca:0a:8e:af:24:0e:d3:f0:42:d7:fa:cd:06:
                    43:50:7a:b4:d0:9d:68:bf:63:5f:4c:49:44:7d:30:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:B7:BA:1B:31:3B:BE:97:E4:6D:C1:93:8E:42:2C:4D:C3:BC:2F
            X509v3 Authority Key Identifier:
                keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:1e:1a:08:fb:f8:42:cd:03:aa:6a:29:49:41:fa:2a:09:
         f6:78:7c:b2:73:2a:51:20:2a:8c:17:89:1b:b6:27:e1:f5:45:
         11:33:c2:00:5f:db:b0:43:cc:2a:1e:f2:a9:7c:ca:bb:29:9b:
         9e:85:87:15:dc:72:cd:66:fa:44:cf:46:b7:8c:93:84:0b:5c:
         2a:35:22:ef:c3:f6:cd:be:8b:6c:88:07:25:cd:d0:f6:54:5e:
         96:34:06:b8:3b:ca:b7:2d:05:42:c1:ae:06:8a:d0:f9:df:17:
         8f:56:7e:e9:91:fc:45:a2:85:b7:b2:18:d5:f0:0c:06:ba:d4:
         76:8d:81:cd:a7:a2:92:ea:c8:07:13:6f:96:4d:8b:01:c7:f2:
         69:87:22:b5:bf:e3:39:65:05:f0:49:fb:af:f2:92:ed:ed:e8:
         9a:80:93:42:b0:c3:f3:b9:c0:9e:01:02:02:8d:ed:e2:0f:d0:
         11:3c:aa:de:f2:4d:a8:4a:69:da:65:d5:e9:a2:82:85:4d:62:
         3e:67:44:c0:d1:24:13:77:f5:fa:60:2c:f3:be:bb:60:20:d6:
         9a:50:c8:93:71:ec:02:a0:0b:54:c5:4c:cb:3e:67:9d:bc:e8:
         8c:48:a0:6c:10:6f:e8:f5:df:a3:ac:ba:96:44:d1:86:99:d5:
         cb:65:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:12 2026 by rpki-client