Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          DcPrKi1ti/ZdJnfoJyb6ay/g6neF3w1FdSZxhztrrPI=
Subject key identifier:   D9:27:B0:0B:15:A7:C4:3C:F7:8F:42:AA:62:52:B1:36:11:80:8D:96
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       019F94A53EACCF1EA03CCD54C9BC42DAE93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          19C4
Signing time:             Fri 24 Jul 2026 15:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 15:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 15:01:24 +0000
Files and hashes:         1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
                          2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: 8Zwr98KWF7SlR6/jedmnww0LBLohCTNX5TIeT2bMvNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a5:3e:ac:cf:1e:a0:3c:cd:54:c9:bc:42:da:e9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Jul 24 15:01:24 2026 GMT
            Not After : Jul 25 15:01:24 2026 GMT
        Subject: CN=d927b00b15a7c43cf78f42aa6252b13611808d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:08:b1:61:cc:82:45:f0:f2:a4:b3:d7:c9:
                    78:6b:3f:35:a6:2f:c8:82:3a:9b:69:5c:69:e9:71:
                    71:35:e7:9f:a4:ae:93:b1:d4:ef:58:8f:b1:31:6c:
                    52:b4:68:11:28:f3:93:dc:e4:d3:c6:6a:ac:45:26:
                    11:12:cf:ab:01:a9:5e:72:87:b5:5c:e4:2e:e1:30:
                    09:f6:a9:17:3d:4b:8f:76:57:f6:73:80:71:be:0e:
                    48:c8:0e:f0:34:0a:2f:e7:09:41:83:41:c9:bd:a6:
                    f9:10:46:e7:18:85:1d:48:77:26:b0:ed:0f:9f:67:
                    5c:34:d1:05:e9:07:48:9e:c2:a2:c2:2d:36:2a:8a:
                    d2:1e:ed:02:5f:25:47:1c:a3:9f:63:18:17:b6:54:
                    da:59:34:29:31:4f:51:6c:58:4b:07:fa:0f:03:3e:
                    c8:d2:39:bc:01:69:b4:94:98:83:29:06:57:78:1b:
                    6b:a0:cb:2e:d5:56:fb:94:b8:ad:47:05:55:98:98:
                    28:ad:47:b2:db:e6:f5:e5:fc:d9:0e:eb:7e:9c:9f:
                    0a:36:25:99:40:72:bc:2e:ab:e1:c8:b2:5b:e2:e2:
                    00:ee:1f:76:95:45:3e:30:e2:fe:fe:0b:8f:ed:77:
                    31:60:60:1a:f4:62:a8:73:03:8a:57:77:64:88:4a:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:27:B0:0B:15:A7:C4:3C:F7:8F:42:AA:62:52:B1:36:11:80:8D:96
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:50:9f:fc:bf:14:e8:3f:bb:36:fb:d4:dc:a1:ff:e1:24:ec:
         fe:08:45:50:a3:cb:b3:18:28:87:53:aa:b0:f2:8a:74:0c:2c:
         f8:9f:65:7a:4b:6f:1d:91:ba:a7:a8:8f:f5:fb:c7:7f:64:6e:
         26:63:5c:cc:4d:18:fa:c2:0a:97:4d:b2:c9:25:4b:ae:ee:91:
         bd:65:9b:96:32:10:4f:06:a0:bb:7e:aa:69:a4:34:02:69:5f:
         89:dc:3f:01:a3:e7:6b:35:97:d9:56:5e:b2:e2:db:36:ed:99:
         d0:81:55:89:9f:be:e9:fc:81:75:c8:81:47:22:d4:a6:d8:cc:
         59:d8:d3:cc:1e:5b:61:51:ad:5e:f0:41:01:26:3a:03:4d:ee:
         c3:27:a2:15:42:f7:83:68:3e:cb:ec:1b:9e:4c:c7:c1:ef:cc:
         dc:de:b1:37:67:ad:6f:93:b1:80:52:5c:e8:cc:c7:17:73:f4:
         18:f0:69:ce:66:72:bb:51:c8:82:3d:e0:43:e5:56:37:5e:3f:
         39:2d:c4:d6:b5:96:06:34:db:6c:05:91:3c:c2:14:7f:2e:0d:
         20:18:5e:22:64:a8:03:76:ca:ed:53:23:19:80:3a:45:df:ea:
         97:7a:51:b2:75:d0:c8:80:a0:0a:66:68:2a:c1:30:57:78:d0:
         e6:78:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:10 2026 by rpki-client