Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File:                     NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier:          XATfGpuOPbAqvkvV8hNEZvxjPTX7nf7V27P0eq7eJfE=
Subject key identifier:   7F:01:B8:3B:50:8C:A9:2E:C9:11:75:FA:0B:0F:09:FA:C4:33:F6:28
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer:       /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial:       019F95123F23AB8A8105DB627B354BD25345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 17:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:28 +0000
Files and hashes:         1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
                          2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: LObX9JQJdgrjsv75rYqRzOMoHG4nxywGc4nnB9LnokU=)
                          3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
                          4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
                          5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:3f:23:ab:8a:81:05:db:62:7b:35:4b:d2:53:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
        Validity
            Not Before: Jul 24 17:00:28 2026 GMT
            Not After : Jul 25 17:00:28 2026 GMT
        Subject: CN=7f01b83b508ca92ec91175fa0b0f09fac433f628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:ea:aa:3a:45:56:47:cf:fc:d0:4b:07:56:
                    4b:9d:15:33:41:ad:f7:4f:d8:eb:aa:66:c6:06:be:
                    0a:a8:16:a0:b0:59:b6:fa:6b:af:53:95:b3:4c:9e:
                    35:16:92:b4:5f:68:5a:0b:0d:a5:4c:75:43:a8:2d:
                    7f:31:8b:26:f9:55:d0:5b:25:ec:0e:1e:db:67:61:
                    d9:21:2e:46:c8:4c:a0:50:14:eb:30:a2:f4:1e:f9:
                    c3:fe:08:0c:5b:b7:7d:7e:6c:7b:50:67:5c:f8:33:
                    13:a4:d4:ee:38:3b:74:e3:ce:c4:f9:92:52:e3:4c:
                    5a:52:e0:de:6a:c9:8b:b0:fd:e4:38:ae:c9:99:42:
                    67:41:f0:90:57:50:8e:66:63:2f:6e:88:14:44:c0:
                    31:ff:e9:b1:51:a4:5d:64:09:4e:cc:b0:aa:6a:b3:
                    5d:df:4c:3b:21:59:e8:bb:64:a5:91:c9:a6:78:ca:
                    f8:76:1c:30:e3:4d:b4:b4:c5:0a:b4:af:bc:62:4d:
                    5a:cf:34:7b:c8:38:ba:b7:92:23:e2:bb:03:d9:38:
                    2e:cc:07:6d:39:d8:97:5d:73:85:ae:e9:34:ba:25:
                    17:d2:e1:13:3d:5c:2e:bf:13:a1:3f:1d:00:88:95:
                    eb:d3:4d:d0:c2:13:cb:3e:d5:b6:9f:78:75:07:e8:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:B8:3B:50:8C:A9:2E:C9:11:75:FA:0B:0F:09:FA:C4:33:F6:28
            X509v3 Authority Key Identifier:
                keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:0b:86:0a:39:5c:42:2c:ad:92:ce:5a:1b:d3:21:14:f5:
         06:68:c0:bb:3a:5a:bb:5e:8e:b0:68:e0:de:c3:f1:3e:93:7c:
         aa:66:1d:e6:03:e5:a7:a6:32:98:64:ac:55:b7:f0:b6:0d:5f:
         0c:d5:f7:ca:85:2f:98:38:c6:38:ae:e2:4d:7a:32:04:f1:98:
         4c:74:74:b6:e8:3d:da:c8:d3:e2:bb:c8:0f:f0:de:40:4a:e2:
         50:83:ff:84:6a:f4:b2:e4:75:76:87:86:76:44:c8:cd:3a:41:
         ab:3e:72:75:8a:da:00:81:f8:7e:52:2c:78:ac:d9:b0:54:cd:
         68:39:f5:90:57:81:f8:68:fc:45:52:e7:81:7a:3b:c2:d0:68:
         ba:89:89:7b:6c:92:92:d7:95:f1:71:37:d9:ce:21:01:c7:96:
         d7:3e:10:8c:d6:fb:17:fc:3b:58:6e:40:07:6c:8d:9d:e6:95:
         63:0b:e7:e7:8a:3d:46:84:d1:d7:91:25:f7:a0:2e:04:43:fb:
         5e:96:04:bc:a3:7c:62:ad:3a:51:dc:4b:b0:cf:13:01:f8:ed:
         cd:59:ba:ba:79:e4:27:3b:85:62:86:3f:0b:ad:ae:54:b6:0d:
         68:0a:07:66:df:ce:65:cc:67:95:df:d6:b2:09:80:6f:88:a1:
         ab:85:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:48:26 2026 by rpki-client