Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
File:                     N0APqidmcJP67lLVG3cVZIg_QFI.mft (raw, json)
Hash identifier:          gSlGyKpQY31eFdZWJiGjTepw3YHSj04I+Vy2HyTPqgw=
Subject key identifier:   D5:8B:DA:DB:85:B3:A2:FE:BF:91:7A:D9:62:23:B4:2F:F5:78:A6:B1
Authority key identifier: 37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
Certificate issuer:       /CN=37400faa27667093faee52d51b771564883f4052
Certificate serial:       019F8F46FAAB791CD9617D4F74388C9DA599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
Manifest number:          30
Signing time:             Thu 23 Jul 2026 14:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:21 +0000
Files and hashes:         1: LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa (hash: HeYlfayHJfnirL1LiLShWkumJCawOk5vgyurfllDT3E=)
                          2: N0APqidmcJP67lLVG3cVZIg_QFI.crl (hash: B2ZC+++LXJkSca2ixHTwcOLqi92xna7wtXi0cNJ54Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:fa:ab:79:1c:d9:61:7d:4f:74:38:8c:9d:a5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37400faa27667093faee52d51b771564883f4052
        Validity
            Not Before: Jul 23 14:00:21 2026 GMT
            Not After : Jul 24 14:00:21 2026 GMT
        Subject: CN=d58bdadb85b3a2febf917ad96223b42ff578a6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:dd:e3:21:42:a5:36:ab:13:69:d7:cc:02:
                    83:8c:d7:31:7d:21:0f:56:25:b4:32:52:a0:d3:96:
                    e4:70:bc:3b:3a:7b:f6:87:45:35:4e:58:1a:ab:c8:
                    ec:e7:f2:0c:f3:6d:8f:d7:19:dc:fb:6c:01:41:d2:
                    b8:93:cb:44:75:1f:b1:21:f3:cd:17:9b:77:ce:68:
                    15:d4:17:b9:61:de:4b:81:a2:1b:16:88:d0:7a:70:
                    6c:25:7e:98:fa:d2:12:12:d5:0b:43:95:f1:08:22:
                    20:6a:84:be:93:2c:1d:1e:1b:2d:92:35:d8:03:13:
                    ec:b6:6e:00:3c:f6:b3:f6:8f:83:e0:06:cd:bd:98:
                    71:dd:a7:6d:3b:0d:28:18:d5:e8:61:a0:67:36:9d:
                    1f:c9:86:dc:bd:de:92:73:86:f4:35:b8:38:8c:e0:
                    59:70:4f:55:ce:e8:26:18:9d:24:53:97:08:d7:0d:
                    f1:58:c6:6c:8c:3d:08:3e:73:44:ce:c6:bc:33:53:
                    56:4c:8d:f6:14:dd:95:d3:a3:0b:15:b9:af:57:45:
                    ee:94:2b:e1:3e:38:7c:41:f3:49:23:12:5b:35:a7:
                    69:39:96:58:71:66:bf:f0:12:2c:0a:7f:b2:e5:dd:
                    0c:f7:89:ea:53:1e:f1:ec:21:40:44:cc:4e:4c:d4:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8B:DA:DB:85:B3:A2:FE:BF:91:7A:D9:62:23:B4:2F:F5:78:A6:B1
            X509v3 Authority Key Identifier:
                keyid:37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:97:a3:95:2e:2a:b3:7e:88:f7:05:3c:76:fb:68:7c:f3:db:
         e7:87:fa:b6:4f:cd:04:7e:e7:39:5a:a4:76:8f:00:a1:fb:90:
         f1:02:e5:1c:1b:45:ba:8f:13:3a:37:fb:85:42:2d:d5:36:4c:
         cb:73:fe:52:4a:77:5c:35:0e:6d:9e:2d:0f:32:e0:8d:bd:05:
         1d:76:d6:86:c7:d0:83:f8:5c:1d:9f:10:98:b5:9a:09:13:1d:
         4a:6d:11:ab:d0:11:82:b9:8a:10:6e:7a:43:f1:f7:6e:3b:53:
         27:c2:ac:ca:29:f3:2d:05:73:c7:6f:37:68:64:df:bf:da:2a:
         ec:fc:b5:18:6f:4e:75:47:e3:c6:16:df:d9:7f:b5:02:e7:0a:
         ec:dd:72:3f:45:de:8b:01:ee:be:08:88:01:93:67:4e:d6:00:
         2c:fc:d7:f2:ea:2b:54:db:65:83:8b:95:3a:37:db:95:07:46:
         27:df:e0:28:78:2a:b1:b2:78:56:fa:04:4d:4c:e0:8b:6b:d0:
         c4:a2:ff:72:a4:c2:cd:7e:ef:e1:c3:1c:43:7a:52:28:18:84:
         02:d7:49:a2:26:a2:be:1c:16:5f:93:af:31:09:2b:58:b3:26:
         e0:58:65:29:c4:4f:27:5a:b2:be:44:be:5e:15:19:2d:c5:27:
         46:91:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:10 2026 by rpki-client