Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File:                     NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier:          rF1lh6A0f1wF7PcBuTMvDTDgUCrBXM3NUoZEgw8dBts=
Subject key identifier:   10:9B:AD:AD:9C:A3:EB:44:22:48:93:9F:DD:61:AA:3F:FD:D2:54:F8
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer:       /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial:       019F8F108527C2F3D9EF1A818BD991E7E319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number:          043B
Signing time:             Thu 23 Jul 2026 13:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:52 +0000
Files and hashes:         1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: sWeGdycI4eWNfjf8mGFFUvlompjxu/phkXfDIgZNM4A=)
                          2: U7LuUPl-UaS1Nz7kE-Ov6c0Y3U4.asa (hash: 4pjiq26J/GEImFtYQjL5TuBS9mjmJQu5GgR6+/ZZjEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:85:27:c2:f3:d9:ef:1a:81:8b:d9:91:e7:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
        Validity
            Not Before: Jul 23 13:00:52 2026 GMT
            Not After : Jul 24 13:00:52 2026 GMT
        Subject: CN=109badad9ca3eb442248939fdd61aa3ffdd254f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:58:52:53:50:b8:f1:7d:a8:d0:71:c8:01:
                    41:11:c4:fa:05:da:8c:65:57:1a:a5:6c:6d:32:24:
                    aa:a9:82:dd:d2:98:38:f0:c5:eb:9a:c0:a3:69:93:
                    22:3b:07:e8:0d:3c:e6:42:0d:4b:be:8d:5a:7d:43:
                    0f:73:f7:88:4a:ef:f2:a3:fb:79:3b:19:78:f9:40:
                    86:9a:b1:4d:aa:15:68:58:72:4a:96:f0:16:bf:b3:
                    fb:13:98:6f:8b:55:fd:f4:58:77:e6:ef:aa:df:2b:
                    6d:93:3f:29:4c:2a:59:63:8b:5c:e0:53:cc:0c:8c:
                    51:ad:3f:2e:dc:2e:85:5c:69:0c:ff:1a:fa:2d:6d:
                    c9:1b:a4:d8:05:d3:e4:d0:c0:b5:88:e3:7e:d2:91:
                    23:10:ac:c0:54:97:c6:af:59:2f:46:eb:64:fc:27:
                    80:3f:24:92:1a:91:df:26:7d:bc:07:b9:af:85:6d:
                    28:55:2f:cc:08:8d:06:e8:7c:1c:f6:eb:33:0a:7d:
                    f9:4c:8e:0d:a4:b6:92:35:db:36:ba:1f:98:85:fd:
                    b3:2d:50:c4:fd:d6:db:86:90:e2:e5:7d:0c:61:c7:
                    52:54:95:a9:3b:2f:b6:3e:b0:fe:38:52:e0:e7:2c:
                    8b:f8:39:a5:64:94:3a:70:77:fb:f8:36:72:51:46:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:AD:AD:9C:A3:EB:44:22:48:93:9F:DD:61:AA:3F:FD:D2:54:F8
            X509v3 Authority Key Identifier:
                keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:33:7c:98:d2:db:a2:2d:a7:79:18:b9:82:8b:36:24:47:
         4e:ec:05:91:34:8a:b1:45:17:23:9f:e4:59:d2:ea:f6:4a:eb:
         3a:76:d4:fe:06:89:a3:3f:e4:08:b7:fd:59:1f:f7:08:c2:17:
         4d:db:01:51:b7:8c:60:a7:60:06:b3:e2:75:90:ce:e7:fe:d0:
         d5:7f:2a:cd:a1:b4:a5:fb:3a:bf:c8:99:79:73:95:3c:cf:b7:
         2b:7b:72:b4:96:02:77:d9:78:c1:46:ae:51:c0:34:2b:bd:74:
         50:7b:37:71:73:6a:e3:0e:b2:d0:90:ce:10:fd:cc:c2:4e:15:
         ba:1c:d3:e1:46:e0:6b:42:ef:ad:03:1a:06:11:35:cd:a5:2b:
         ba:58:e2:49:c9:c5:c7:a9:2e:58:27:d2:60:51:51:dd:5a:e5:
         6f:6e:f3:1f:80:1d:90:82:ba:a3:57:12:cb:b0:03:db:4a:1d:
         7f:eb:9b:58:14:02:e3:b5:f5:f0:58:18:2f:81:59:f1:cb:15:
         13:94:c8:8c:0b:8c:6e:31:a2:b7:3f:38:c9:8b:58:87:53:2e:
         4d:96:97:e5:8a:87:0a:ef:50:9a:26:b7:38:bf:75:4f:51:ab:
         2d:2f:1a:63:f6:77:5e:f1:95:81:3a:c8:dd:fd:a8:79:c1:77:
         29:78:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:25 2026 by rpki-client