Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          1cihRZq58sQBEjj67GerZ3YLUjcX6AJahOHRjcUHYpg=
Subject key identifier:   2A:DF:30:7B:4D:3A:E0:EC:65:2B:E5:49:D2:85:04:B8:B9:30:BB:C6
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       019F90C820570ACC7D3E99F0E6DF02DCAF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          19CF
Signing time:             Thu 23 Jul 2026 21:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:02 +0000
Files and hashes:         1: _oRX04Ccp7g8yn6Qn7PqMMD7qgg.roa (hash: y56xKKuiofP4Wvb2d2PYOPDkpzXNerKcJtIazDABM0Y=)
                          2: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (hash: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=)
                          3: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: K8AZV4ciPhha5MXJ+t4Bd2EQyzp2iP9GZ+giz6V2/rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:20:57:0a:cc:7d:3e:99:f0:e6:df:02:dc:af:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Jul 23 21:01:02 2026 GMT
            Not After : Jul 24 21:01:02 2026 GMT
        Subject: CN=2adf307b4d3ae0ec652be549d28504b8b930bbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:84:e7:13:21:46:74:30:19:5c:03:54:a3:
                    ca:06:e3:ab:a0:d1:c2:39:a9:95:3f:e3:8c:c8:66:
                    7e:07:53:0d:e0:a1:72:e5:6d:1d:4e:2b:c0:82:61:
                    02:0a:01:bf:47:88:c7:03:ee:53:81:a9:0b:14:ae:
                    6e:c0:ae:a4:f3:b7:93:82:31:de:44:a0:81:c3:fc:
                    e7:bd:64:48:e2:4c:09:f5:fe:dc:54:18:1b:c0:6e:
                    a4:e6:86:c3:6b:89:e1:f2:ef:a5:8c:38:c0:a0:2d:
                    5e:b0:fc:8e:42:48:3d:36:c7:ca:64:fe:fc:25:bd:
                    89:01:2c:6e:7a:f5:89:fc:be:1f:59:43:f4:db:f5:
                    f0:1e:cc:31:ee:77:54:f4:0d:de:77:78:4a:4c:d9:
                    08:f5:8c:d5:99:6b:a2:85:28:23:a6:d2:6e:a7:ca:
                    b8:d6:e8:de:5c:81:4b:1a:d5:7e:a5:a7:28:a1:2f:
                    f9:9c:da:e2:94:81:9d:03:95:80:3b:f6:80:e0:2a:
                    2c:23:a0:bf:31:e3:07:c2:b2:d7:30:72:aa:ff:85:
                    75:1b:68:fc:40:e0:21:18:bd:80:fc:f5:5a:b3:ae:
                    e4:8f:8d:63:fd:8a:33:89:e5:81:be:1f:6c:71:cf:
                    9e:70:30:96:3c:4f:b6:1e:be:91:04:3e:34:40:14:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:30:7B:4D:3A:E0:EC:65:2B:E5:49:D2:85:04:B8:B9:30:BB:C6
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:87:56:0f:b3:70:ea:da:10:bc:42:d3:11:e4:6b:db:37:7b:
         8a:2e:35:85:c1:d9:6a:c6:1d:af:be:ce:9c:3d:b3:d9:dc:87:
         e7:91:09:4f:f6:d6:55:b8:dc:87:63:f1:a1:06:00:4e:84:e4:
         a8:af:d4:c7:9a:2b:28:e7:ae:f3:58:62:f6:d0:75:63:7f:5b:
         da:83:f6:42:d0:4d:3a:08:f1:d0:b6:36:45:e4:41:dc:16:59:
         c9:e9:85:d1:9a:ac:91:cb:94:c7:e0:40:53:b0:e3:4b:77:4d:
         ff:74:00:dc:e2:d5:c7:26:3c:36:0b:7a:1d:6c:65:11:10:65:
         a5:66:84:87:ed:35:11:75:8f:c8:17:aa:6f:42:92:57:b8:b2:
         02:02:f2:25:b5:83:d8:5b:16:97:12:9a:a9:82:3a:ce:53:46:
         d8:93:4b:61:b4:a7:a6:98:64:d1:3a:f5:8e:ee:b2:9c:93:0e:
         b9:e2:8f:2f:61:e3:4e:c5:d5:07:e3:36:ea:1c:dc:da:55:2a:
         cb:a4:c0:12:7c:3e:45:3f:24:32:ee:f5:04:ed:49:66:62:c6:
         32:f6:aa:19:35:20:d5:c8:01:a4:b4:e9:4c:9a:11:29:68:77:
         bd:05:f1:6c:0d:57:b6:c0:24:21:ca:c2:b2:d9:6b:b3:c9:1b:
         dc:6f:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:22 2026 by rpki-client