Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          KxRwa2FhpPnHQwJAP9AwJBDGgih75NvvxCmxisJm/SM=
Subject key identifier:   58:6D:14:CD:03:D1:E6:5C:F9:B7:22:7C:4A:36:6F:30:02:88:3E:04
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       019F9090F26D7BC563D3CAA9989BA944DCF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          1391
Signing time:             Thu 23 Jul 2026 20:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:46 +0000
Files and hashes:         1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
                          2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
                          3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: Wu8ywu5WTYNEL1vyA6i40IDrYf6Qo0m79zs0WfCqfTk=)
                          4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f2:6d:7b:c5:63:d3:ca:a9:98:9b:a9:44:dc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Jul 23 20:00:46 2026 GMT
            Not After : Jul 24 20:00:46 2026 GMT
        Subject: CN=586d14cd03d1e65cf9b7227c4a366f3002883e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:08:c5:7b:c1:19:f8:e9:a2:31:12:f6:33:
                    e6:f0:3d:fb:85:46:41:5c:79:99:93:da:b3:43:1c:
                    d7:8c:41:3e:e7:07:8a:61:c4:9c:bc:1b:24:2d:ca:
                    dd:44:d1:cb:a6:66:1b:59:bd:dd:7f:d1:be:22:ce:
                    95:5d:93:f3:8d:7d:76:03:6d:b2:10:44:6f:09:7c:
                    09:ee:37:a8:ad:29:c9:7a:9e:51:fd:4f:d6:7c:da:
                    1a:28:7e:92:b3:dc:fa:5f:fa:7e:cf:fd:fe:c1:de:
                    47:85:45:c1:82:e0:34:f1:b3:37:22:a3:47:68:72:
                    2a:20:a4:80:a7:22:03:3d:cd:9f:21:c0:33:3e:9e:
                    d3:e3:d5:5c:dc:c7:f6:6c:9d:3a:ae:94:72:fb:75:
                    0e:01:db:eb:2e:37:f4:1b:7c:5f:90:07:3d:c0:fe:
                    8f:aa:10:9b:b2:eb:23:14:15:de:8a:c6:a2:67:7c:
                    5d:10:14:0f:73:eb:d0:7d:74:ad:9e:bb:8c:d5:ed:
                    5a:4c:d1:63:44:20:78:50:d3:cc:39:9b:b1:f2:cd:
                    71:60:2d:33:bc:f1:b9:a8:6e:f5:b4:db:05:c7:9c:
                    3e:8a:a6:82:02:36:f5:74:56:ef:87:f0:52:0e:79:
                    27:9a:70:88:ca:63:85:0e:3a:38:58:39:b6:5c:25:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:14:CD:03:D1:E6:5C:F9:B7:22:7C:4A:36:6F:30:02:88:3E:04
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:16:68:3b:8a:aa:a9:c9:19:4b:4f:78:c6:e9:ed:fc:79:
         4f:65:08:e9:93:be:47:c4:58:a3:8f:23:a6:ea:80:fd:71:85:
         4a:a6:1e:20:60:03:49:67:1b:a1:ab:ae:25:eb:c5:4d:72:75:
         6c:59:8c:21:f3:b7:01:3f:a6:08:65:81:53:24:0a:3d:f6:2f:
         4d:9e:e3:f6:e7:c6:75:5e:f3:46:ab:a2:f0:f9:e4:c7:6b:a7:
         08:70:e1:3f:9c:21:ca:0e:21:3f:e0:69:69:6e:b8:de:52:2b:
         53:9c:9c:6c:ad:87:a5:8d:0f:2a:2b:ff:f9:d9:ee:75:a9:56:
         58:a8:51:65:ec:eb:a6:94:9d:1b:51:9a:1d:ba:c6:6c:ea:e2:
         4f:9c:7a:7e:6a:fc:78:d5:8a:14:a4:98:59:fe:a9:9b:c3:36:
         e9:c6:b1:6e:ea:cd:96:eb:9c:5d:94:d9:6f:90:64:e0:e3:bc:
         fd:8a:c2:fc:23:7e:cd:d0:c8:dd:02:58:bb:fe:b2:65:0a:7f:
         d3:42:c9:4f:7c:f3:80:91:7c:98:80:48:5d:94:f0:88:ae:c0:
         0f:3d:cb:d4:8a:04:a0:4c:cc:46:90:b9:b2:1c:38:f4:f1:33:
         e1:f8:7f:a2:83:18:94:2e:29:c2:21:70:ab:b8:bd:ce:2a:92:
         23:71:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:41 2026 by rpki-client