Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          F7sDafD0tVFtYJs5sof7/GspjKf+ZQZkQUo9KFAC2dY=
Subject key identifier:   D6:DC:43:5E:8C:D9:FD:E8:91:3D:C5:D6:00:F0:73:AC:3F:70:E3:D5
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019F93C9085486E23C7FE277D54CB656C077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          04ED
Signing time:             Fri 24 Jul 2026 11:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:53 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: hk0memoxAA3bL4EUEZ642W/FHQ/pL/6Jch05oD/rXVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:08:54:86:e2:3c:7f:e2:77:d5:4c:b6:56:c0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Jul 24 11:00:53 2026 GMT
            Not After : Jul 25 11:00:53 2026 GMT
        Subject: CN=d6dc435e8cd9fde8913dc5d600f073ac3f70e3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:fa:6f:62:61:83:71:3a:a8:be:e4:c1:fd:
                    e9:e7:9e:b8:05:44:b8:21:04:a8:c6:ae:4b:3f:7c:
                    c0:3e:13:78:d2:c3:e0:c8:4e:17:5d:b6:c7:f3:f9:
                    24:57:20:29:8b:9a:19:93:b0:7d:a1:8d:6a:82:aa:
                    81:eb:9e:b1:1a:61:95:3d:5d:87:4f:d9:e4:63:c9:
                    70:6d:ab:ac:15:e8:73:6e:4e:4a:50:b9:80:9e:90:
                    9b:90:f5:06:54:82:07:a8:4d:b3:6f:84:6b:b4:ef:
                    ab:72:f9:92:66:52:1e:f0:0a:c3:07:df:c6:de:50:
                    9e:88:aa:f0:a6:6f:0a:33:2b:dc:25:8a:23:51:33:
                    89:47:79:4a:b5:02:74:91:c1:4f:81:89:46:f6:3f:
                    2b:5c:3a:81:a5:33:3a:b9:36:10:55:d0:9f:7f:f4:
                    da:6e:67:c3:25:02:b6:d2:1c:04:6d:cf:21:26:13:
                    d0:11:b4:c0:40:4f:bc:d8:56:df:b0:43:fb:c8:c7:
                    56:48:8b:08:7e:6a:79:48:ee:9e:15:85:28:cd:e2:
                    a5:15:71:f3:2e:96:43:23:ce:c0:28:f3:90:a7:5a:
                    65:fe:38:c9:25:c1:13:95:de:c8:12:16:63:6f:18:
                    29:87:db:82:d6:49:6e:65:44:45:b9:02:e6:cb:de:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DC:43:5E:8C:D9:FD:E8:91:3D:C5:D6:00:F0:73:AC:3F:70:E3:D5
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:41:a6:72:46:d0:f3:18:99:d6:09:d8:c5:f9:72:83:21:
         5a:b7:e6:70:22:6b:6b:a0:c2:ea:37:c3:92:ef:94:54:e3:08:
         d0:e0:0c:14:83:98:87:6e:a5:cb:a8:c9:e6:e3:0e:36:36:5d:
         87:7c:e2:6d:ce:d4:07:d2:e0:e2:eb:cb:40:07:c3:e7:e0:c4:
         3d:9c:33:a6:09:53:0f:0e:5a:38:22:26:2c:a8:1a:3b:06:35:
         b6:b0:64:a9:05:81:64:e8:e5:fe:39:3f:70:8f:8a:4f:00:ae:
         6d:dd:53:be:19:63:49:83:4b:de:79:9f:61:6b:36:86:8c:f8:
         10:a6:9b:42:c8:19:b3:cd:1c:6a:88:67:23:b2:84:fe:51:ec:
         61:42:83:14:24:b0:1a:43:a8:6b:9c:f6:ae:88:ed:94:f1:94:
         d5:2d:a2:59:5c:7b:b2:36:22:e2:2a:0f:7d:f5:71:a8:b3:e3:
         be:84:33:07:7d:0a:37:a0:1b:70:5a:92:59:8d:06:36:6e:b7:
         b5:b9:86:03:a3:3f:1d:27:3c:53:02:4b:20:2e:84:4d:74:4a:
         d0:be:ca:61:d1:4f:52:4b:bf:ce:18:67:c6:3e:7b:33:ae:8c:
         3e:bc:45:dd:6c:53:ab:31:a1:ed:de:44:09:6f:ad:f6:4d:e0:
         a8:e3:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:18 2026 by rpki-client