Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File:                     ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier:          rtSJKHsUH4XTGEj2OPzfHm5JS+Mc+6PyEUEsLs6u3Sc=
Subject key identifier:   AB:03:BC:FE:01:A1:F7:A3:4D:D2:EC:42:5B:3E:85:57:7A:3B:AB:15
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer:       /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial:       019F95B7DC028A223D7910F3C9AB10F2036D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number:          1221
Signing time:             Fri 24 Jul 2026 20:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:22 +0000
Files and hashes:         1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
                          2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: 46aKkg7/JXvo1R2onab/rDAG86pi3HJsE+uy8vencYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:dc:02:8a:22:3d:79:10:f3:c9:ab:10:f2:03:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
        Validity
            Not Before: Jul 24 20:01:22 2026 GMT
            Not After : Jul 25 20:01:22 2026 GMT
        Subject: CN=ab03bcfe01a1f7a34dd2ec425b3e85577a3bab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:7a:aa:65:a2:8c:cc:2e:f9:52:e8:00:93:
                    8a:3e:14:2d:21:b3:20:64:dd:38:f5:77:65:44:07:
                    56:c5:bc:d3:91:d3:f8:a2:40:be:b3:55:12:7a:1f:
                    bc:49:b5:e4:1d:c5:b7:b8:7b:a9:dd:76:28:9d:55:
                    d6:46:fe:16:5a:8d:de:75:dd:28:f0:85:3b:29:11:
                    2b:e3:60:fc:04:dd:4f:4b:85:7f:19:7c:48:b7:5c:
                    32:e4:a9:0e:9e:35:1e:63:08:04:60:59:c7:b9:c6:
                    40:72:52:14:35:3d:e0:5d:e6:b8:63:7d:68:5b:ca:
                    a3:d1:d4:c2:96:ca:5b:70:ff:74:10:a8:f1:8a:37:
                    70:b9:8a:58:1d:9b:b9:44:88:e3:b2:04:cf:94:2a:
                    97:a9:a4:fc:e9:d4:70:fe:1f:8e:1b:80:0d:65:b4:
                    7a:57:fc:cc:e0:d0:d2:f8:7a:ec:59:81:c4:4b:39:
                    d9:4e:2b:cf:2b:13:14:03:cf:08:82:3a:f9:65:7e:
                    ca:0c:26:33:78:5b:99:a6:90:51:a6:57:2f:6e:5c:
                    17:82:47:ae:d1:15:ca:88:d3:41:5e:b8:56:05:80:
                    9d:09:ea:69:b3:b2:8b:0d:a0:1f:ba:ef:8a:fa:0f:
                    db:19:a4:4c:90:bf:bb:03:37:3a:ee:a2:f7:1f:d4:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:BC:FE:01:A1:F7:A3:4D:D2:EC:42:5B:3E:85:57:7A:3B:AB:15
            X509v3 Authority Key Identifier:
                keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:fe:e0:4f:ff:2c:21:97:58:51:a4:6f:5a:95:14:d1:80:
         5b:59:0c:fc:a2:7c:06:11:0b:64:ee:96:38:32:63:69:5a:f6:
         22:87:96:0e:af:19:7b:bc:53:d6:1f:60:9d:24:de:d8:b5:e7:
         8e:da:15:0a:f0:1a:2a:2f:f8:c6:cc:5b:cf:36:09:87:5b:63:
         57:e2:f4:39:94:c7:8e:72:29:9b:69:e6:3c:ad:3b:e4:5f:42:
         30:33:a4:2a:24:49:1b:31:66:b2:69:2b:72:11:d7:53:94:2a:
         c6:17:00:39:ac:e6:d5:08:42:12:91:79:bc:d8:11:01:2c:15:
         26:1a:3f:3e:f6:77:a3:06:d3:d1:be:ec:19:f9:a1:8b:48:01:
         5a:a6:e3:36:d3:c6:8d:7a:98:a4:6b:ae:9b:9d:b5:bb:52:f2:
         fc:a9:48:26:04:c4:aa:73:53:85:67:c5:b6:e5:3e:c2:34:07:
         41:d8:f8:b7:1a:61:e4:2d:8b:e9:33:23:2a:6b:00:f6:b5:f5:
         16:60:cf:7e:f4:6d:2c:0f:e9:37:6a:6a:3f:f2:20:39:a9:3e:
         c1:24:75:bb:29:3e:13:a1:4d:93:35:80:09:f8:a9:1a:80:bb:
         c3:d4:49:04:02:4f:34:51:c3:3f:ab:8b:7e:ed:4c:53:2a:eb:
         c4:46:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:32 2026 by rpki-client