Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          8Uraf3OtLhdboFOzfKmGCwfPX+NcrizogBhSj8Qwjow=
Subject key identifier:   7C:CA:48:07:5D:90:0B:8F:AE:96:AE:CA:A1:C8:3F:42:7D:54:2A:73
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       019F8E34B0C7D3C62D64C7050DC85267782D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          0970
Signing time:             Thu 23 Jul 2026 09:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:45 +0000
Files and hashes:         1: Ai8Bugd7lzzruNa57KT-lV3wYm8.asa (hash: BwsAqkJnuFBXHrVkW12Nt079T8kms4s4hbMPa9Sf/0I=)
                          2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: oxP4eZEEe9ZjaE8keo+EybA1D9YnUbl5eg3gSc+lg1o=)
                          3: ZCvgjfcdUvB5emDgJUqlCNrfN4U.roa (hash: 9CWeQ56fOiBQ0iE9QR8Rty2enOxfpS87kCa0J2lyyi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:b0:c7:d3:c6:2d:64:c7:05:0d:c8:52:67:78:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: Jul 23 09:00:45 2026 GMT
            Not After : Jul 24 09:00:45 2026 GMT
        Subject: CN=7cca48075d900b8fae96aecaa1c83f427d542a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:16:a6:b9:cb:ae:6d:83:35:7a:95:0c:06:
                    b3:a6:ec:22:83:30:dd:0a:77:ac:6c:a0:95:10:1f:
                    c2:fb:ce:40:cd:b4:a5:82:26:60:2d:22:84:b8:8e:
                    8d:a7:18:3e:7b:88:80:47:d9:08:02:44:dd:05:32:
                    07:60:6a:83:96:66:63:b2:b9:05:db:e2:b3:94:29:
                    2c:eb:c2:39:52:e8:03:30:3a:b2:fb:e8:ae:a9:57:
                    b5:6f:b6:90:a6:de:75:e6:8a:34:c7:80:ed:46:cc:
                    c9:bb:03:60:74:ad:ef:52:12:07:b7:3d:57:46:f0:
                    52:1b:b9:71:c5:f0:b0:73:02:15:96:0d:af:10:4b:
                    69:99:e1:6d:da:79:1f:51:f0:70:2d:e4:33:05:63:
                    d1:65:15:b8:d7:8a:b4:39:d1:be:4a:f9:c8:42:de:
                    84:7f:d0:12:38:3e:f8:35:dd:d7:58:c5:87:be:2c:
                    09:ff:3b:57:f0:60:77:79:78:9b:47:d4:1b:73:38:
                    4c:68:00:d6:67:be:3a:c8:62:73:a1:04:ff:77:1e:
                    d9:3c:e1:d4:da:1b:3d:09:2a:62:85:4d:53:8c:6e:
                    9e:64:67:b1:c4:ea:18:5c:50:e5:26:06:cd:a0:db:
                    fc:f4:25:07:70:e2:a2:e4:f3:f4:ff:b3:dd:73:61:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:48:07:5D:90:0B:8F:AE:96:AE:CA:A1:C8:3F:42:7D:54:2A:73
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:91:bc:ab:fb:5b:e0:be:d5:4b:11:bf:0c:ba:35:9f:39:
         b1:82:42:c6:fa:28:68:53:a3:9e:81:50:19:40:56:2c:be:94:
         50:51:e2:fb:93:20:7d:f1:ed:09:87:62:68:61:7f:f3:88:c5:
         bd:a8:63:ef:29:7e:86:fb:08:a5:c7:e8:c3:9a:03:52:6a:f2:
         99:bb:cc:f1:67:8e:fd:a9:af:36:a3:ca:b4:e9:87:31:3a:b4:
         4e:82:b8:93:3c:38:51:7a:3b:18:da:d0:27:38:d4:63:64:73:
         ee:b5:80:20:d0:e5:bd:b8:c8:07:7b:58:cb:30:d9:3e:98:bf:
         13:a2:57:65:cc:4a:19:c0:a3:ad:6f:e4:fd:f4:09:40:e9:35:
         29:22:4c:4a:08:53:59:06:05:2f:1f:c5:a2:f6:6d:51:9f:91:
         f2:fc:54:e3:27:f8:74:38:c2:ea:ce:86:ba:f0:e8:ee:78:d4:
         68:5d:2d:3c:0a:11:9d:b8:6f:16:c8:91:42:5a:c8:4a:28:94:
         c0:68:df:47:62:86:6b:cf:57:34:91:25:7c:c8:c7:67:0c:36:
         b0:64:83:3e:7a:9f:04:e4:89:bc:43:62:8d:9e:5f:ec:97:80:
         ff:42:f6:c8:8a:4b:df:cd:9c:ef:6b:63:cc:ec:07:83:bd:46:
         ac:88:9c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONLDH08YtZMcFDchSZ3gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmQ2ZTllN2FjYjM3NTgzMjViYjNlNDI0NTkxOGYzMjRm
ZmVkYTEwHhcNMjYwNzIzMDkwMDQ1WhcNMjYwNzI0MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg3Y2NhNDgwNzVkOTAwYjhmYWU5NmFlY2FhMWM4M2Y0MjdkNTQyYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUWprnLrm2DNXqVDAazpuwigzDd
CnesbKCVEB/C+85AzbSlgiZgLSKEuI6Npxg+e4iAR9kIAkTdBTIHYGqDlmZjsrkF
2+KzlCks68I5UugDMDqy++iuqVe1b7aQpt515oo0x4DtRszJuwNgdK3vUhIHtz1X
RvBSG7lxxfCwcwIVlg2vEEtpmeFt2nkfUfBwLeQzBWPRZRW414q0OdG+SvnIQt6E
f9ASOD74Nd3XWMWHviwJ/ztX8GB3eXibR9QbczhMaADWZ746yGJzoQT/dx7ZPOHU
2hs9CSpihU1TjG6eZGexxOoYXFDlJgbNoNv89CUHcOKi5PP0/7Pdc2EcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzKSAddkAuPrpauyqHIP0J9VCpzMB8GA1UdIwQY
MBaAFDb9bp56yzdYMluz5CRZGPMk/+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjk4NTItN2U1Yy00NTJhLTllNzMt
MGMxMGRjNTA3MTczLzEvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMjk4NTItN2U1Yy00NTJhLTllNzMtMGMxMGRjNTA3MTcz
LzEvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHGRvKv7
W+C+1UsRvwy6NZ85sYJCxvooaFOjnoFQGUBWLL6UUFHi+5MgffHtCYdiaGF/84jF
vahj7yl+hvsIpcfow5oDUmrymbvM8WeO/amvNqPKtOmHMTq0ToK4kzw4UXo7GNrQ
JzjUY2Rz7rWAINDlvbjIB3tYyzDZPpi/E6JXZcxKGcCjrW/k/fQJQOk1KSJMSghT
WQYFLx/FovZtUZ+R8vxU4yf4dDjC6s6GuvDo7njUaF0tPAoRnbhvFsiRQlrISiiU
wGjfR2KGa89XNJElfMjHZww2sGSDPnqfBOSJvENijZ5f7JeA/0L2yIpL382c72tj
zOwHg71GrIicaw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:51 2026 by rpki-client