Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File:                     ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier:          cGSgC4vQfDRksfdxshUtk91XL6qx8b7d9dj0Cb0OOYM=
Subject key identifier:   A5:9E:66:C7:74:5D:4B:80:D2:49:53:F4:E7:61:0E:93:D4:ED:A5:59
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer:       /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial:       019F97A57B73161A6A376F5A2C580ECAB422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number:          1222
Signing time:             Sat 25 Jul 2026 05:00:32 +0000
Manifest this update:     Sat 25 Jul 2026 05:00:32 +0000
Manifest next update:     Sun 26 Jul 2026 05:00:32 +0000
Files and hashes:         1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
                          2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: T2l+QKv/WQouiLHD01SwjkhkeeJj6TF9rcxLasOQQkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:a5:7b:73:16:1a:6a:37:6f:5a:2c:58:0e:ca:b4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
        Validity
            Not Before: Jul 25 05:00:32 2026 GMT
            Not After : Jul 26 05:00:32 2026 GMT
        Subject: CN=a59e66c7745d4b80d24953f4e7610e93d4eda559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:d8:1c:d5:4d:16:f9:ba:41:21:8d:86:30:
                    b5:98:76:a2:64:c3:8e:e1:f0:0d:f9:20:95:73:be:
                    45:87:f7:aa:7e:fe:bb:99:84:8a:e6:33:47:d5:f4:
                    cd:9e:b6:1d:8b:76:cc:ff:c2:65:d9:61:d3:9c:c3:
                    e0:e3:e2:b2:ef:cd:1d:c2:8a:10:f7:e6:50:0f:3d:
                    a9:e4:59:0a:22:2c:1c:28:3f:6d:a1:b7:e9:ba:3e:
                    72:54:2e:9f:14:53:19:cb:eb:8c:cb:af:93:e6:52:
                    df:0b:b0:0a:51:a2:79:41:a4:84:70:73:23:58:3e:
                    c1:94:6a:b4:69:ac:28:39:48:fb:a6:5b:7e:dc:55:
                    38:da:46:27:e5:1d:1b:61:e0:08:ce:fe:04:47:82:
                    d4:78:8e:95:8c:4d:9f:8a:2c:15:8d:84:d5:ac:4e:
                    59:3b:64:e5:70:90:d6:ae:0c:65:02:b3:c5:33:18:
                    8f:78:e2:c3:3d:f7:c0:9a:29:35:e7:41:08:2f:76:
                    2b:ea:74:c2:fc:e2:f4:0e:32:76:a3:a5:12:d5:77:
                    1a:a0:47:b6:cf:f0:db:44:16:10:01:b6:be:c5:82:
                    fe:22:75:b4:00:4c:fb:7f:6c:cf:e5:31:42:af:09:
                    75:09:ea:83:9e:b0:af:20:81:cf:9d:c9:ef:65:a8:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:66:C7:74:5D:4B:80:D2:49:53:F4:E7:61:0E:93:D4:ED:A5:59
            X509v3 Authority Key Identifier:
                keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:98:55:92:4d:38:c7:f6:19:e2:ae:03:9b:9b:d1:ce:f4:
         52:9d:1a:9b:05:ac:dc:b9:16:ac:d0:3d:44:95:31:3e:cb:bd:
         f8:1e:c5:89:5e:aa:df:e1:cc:87:ab:0d:67:be:3e:f9:02:3c:
         36:96:12:5a:9d:5f:ef:c9:7e:4d:6a:7f:6b:c3:13:42:5f:fa:
         bf:b5:23:87:c5:c6:9f:64:a5:b7:7d:ef:7b:da:5d:a4:d7:30:
         9e:9f:f1:e5:82:db:d0:96:e4:03:55:73:46:e5:cb:89:30:3f:
         93:d1:76:cd:58:c9:aa:96:16:5a:14:7a:8c:e5:fc:ea:53:d1:
         10:c5:58:58:0a:fa:ee:a5:c7:24:c0:3e:65:b8:07:19:50:8d:
         cb:3c:46:1d:6a:46:9c:31:bb:52:a0:f5:cc:9e:ef:60:c5:c1:
         65:bc:00:58:f2:9e:e6:7d:13:c0:90:da:26:4d:bb:a7:1f:18:
         6d:7f:d0:20:24:eb:3e:b1:83:26:93:7e:c2:a6:38:a7:7a:26:
         33:18:60:8d:81:f2:5d:02:71:d5:c8:be:ea:a8:29:f6:a3:27:
         df:1c:be:2b:1a:56:1d:70:15:c2:25:0f:3b:b3:82:c9:c3:d7:
         1a:db:79:b1:14:a6:73:9f:c9:51:81:8a:98:50:9a:9c:02:34:
         af:11:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:38:38 2026 by rpki-client