Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File:                     nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier:          WNbCa3mthMsP1R6GiBdwzo7JrzBA3r/sxu8UkfFSJQQ=
Subject key identifier:   B5:7C:EE:DE:3C:55:2E:9E:2A:F7:E6:F5:72:91:36:58:3D:6B:3B:41
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer:       /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial:       019F95B7363F65AC158B13256766AFD8FB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number:          04CE
Signing time:             Fri 24 Jul 2026 20:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:39 +0000
Files and hashes:         1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: lVbIDYD96cG+V2K+VNHjTENYDRb3PkHqmR2Ijr7QxRw=)
                          2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:36:3f:65:ac:15:8b:13:25:67:66:af:d8:fb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
        Validity
            Not Before: Jul 24 20:00:39 2026 GMT
            Not After : Jul 25 20:00:39 2026 GMT
        Subject: CN=b57ceede3c552e9e2af7e6f5729136583d6b3b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:61:49:99:21:c3:18:ae:a3:f8:33:a8:fa:
                    ac:bc:bb:a6:50:4d:dc:7b:a9:98:f3:ed:f2:6a:0d:
                    ad:57:57:bd:0c:e0:7d:22:2c:e8:2b:2f:8e:9d:c7:
                    68:a3:c7:23:8a:c1:c7:27:0f:bd:2b:7a:82:26:8d:
                    fa:9b:4b:56:6d:96:15:73:9f:a3:ff:7e:d6:81:a7:
                    44:c8:ed:97:64:e3:b0:09:33:12:e3:ac:62:36:28:
                    f8:63:4e:75:14:e7:95:fe:e0:59:5f:31:56:dc:ec:
                    b4:59:e8:3d:b3:3f:53:b0:f7:c6:33:de:03:8a:fd:
                    73:d7:8c:18:11:d4:a9:5b:18:41:78:01:8a:1f:a0:
                    c3:23:b1:86:98:f8:c5:77:28:18:b3:45:4a:ef:92:
                    2d:74:05:bc:ee:a1:ec:f3:89:22:5f:3c:2b:00:85:
                    93:99:d2:17:65:08:b5:21:3a:4c:ca:d3:97:c3:f4:
                    b3:e2:5c:d2:a2:e1:d5:88:a1:3d:91:77:6a:d3:38:
                    e7:0f:fe:f4:0a:e5:8b:b6:35:ec:f7:d6:fa:d0:c6:
                    35:24:38:85:e1:6f:84:b7:ed:ec:08:d5:30:dc:ee:
                    2e:1b:b1:14:24:8c:ee:09:59:fc:d6:77:e6:b5:34:
                    d2:5b:13:8a:2b:22:d3:59:8e:74:8b:e8:7e:16:70:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:EE:DE:3C:55:2E:9E:2A:F7:E6:F5:72:91:36:58:3D:6B:3B:41
            X509v3 Authority Key Identifier:
                keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:38:3f:7b:d1:2f:93:80:ab:5e:1e:c2:7e:19:84:72:ae:79:
         1e:fc:13:95:39:33:81:ab:07:be:8d:f0:f9:46:d3:a8:5e:ba:
         02:00:f8:2b:f6:f3:09:02:56:f6:63:ad:64:af:a6:49:99:e0:
         12:10:aa:5b:f3:ca:d1:b0:45:61:10:55:b5:bc:be:e4:0b:1c:
         95:e5:be:fa:74:ab:49:8d:1a:19:e0:e8:38:81:45:ca:33:c0:
         4c:20:69:5a:01:2b:9f:43:5d:cb:90:ff:2b:39:f1:2f:aa:b2:
         7f:d7:1d:8e:ba:c6:58:d2:2a:05:7c:b7:90:09:e5:20:18:0f:
         4d:60:63:f6:d5:c2:fe:e3:d0:a8:76:7d:2a:86:76:23:fc:1a:
         4d:5a:c3:32:ff:8d:69:c8:90:ab:78:ad:46:f6:dc:5b:df:79:
         c6:11:df:98:c8:ea:62:dd:19:d7:b8:c4:5c:f9:84:e5:c2:0c:
         d1:2e:f5:dc:ee:f7:b0:c1:fc:b2:d7:cb:63:77:49:1c:8f:c6:
         d5:db:55:c6:7d:be:f7:65:45:5d:f5:e5:1b:67:77:cd:03:4f:
         19:6b:88:da:a1:c0:83:d4:36:9f:e2:92:c3:3a:01:4c:fa:22:
         ec:d9:e6:c1:8a:e9:8a:27:a0:15:28:b2:6c:6c:8f:47:be:9f:
         e2:52:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:32 2026 by rpki-client