Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          86za95Zc0VxvmeRR/aTRQOJz1OYnPNIytSyNzYvFxjI=
Subject key identifier:   B7:F3:87:17:0F:51:70:C5:B4:D6:7E:7D:62:6B:28:3A:AD:77:B7:33
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019F90FF0E5D88E64EFA2ADF2A8BC2B6EBD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          04EF
Signing time:             Thu 23 Jul 2026 22:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:02 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: XqlXFEM1YVbEBFWwXeMdVDt8nQzaJVGFXRFOUkDx4qU=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:0e:5d:88:e6:4e:fa:2a:df:2a:8b:c2:b6:eb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Jul 23 22:01:02 2026 GMT
            Not After : Jul 24 22:01:02 2026 GMT
        Subject: CN=b7f387170f5170c5b4d67e7d626b283aad77b733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:49:dd:c3:99:0b:77:3d:67:0a:9e:8d:3a:
                    3c:c6:d0:59:ae:69:7d:1c:91:c9:fe:d6:e3:9b:5a:
                    77:84:19:04:59:c3:de:ad:52:d3:84:c7:d5:db:08:
                    7d:8b:7c:a6:7d:02:03:a5:be:c8:54:b8:0c:a0:44:
                    a3:b5:a8:34:b5:ad:fc:c3:a5:01:99:3d:90:90:ad:
                    b0:a9:70:28:01:10:40:9e:13:73:d7:57:d4:22:55:
                    20:f5:80:d1:d3:dc:dc:e0:48:2e:80:82:85:11:ea:
                    44:81:e5:7c:72:50:45:4d:dc:16:8d:17:ec:ae:7e:
                    e0:22:d3:37:b9:80:0d:5e:6c:59:fe:88:86:a6:07:
                    c9:bb:2c:10:81:c6:87:d3:09:73:c8:93:fa:d4:9e:
                    d0:5f:4b:0c:c9:bd:20:9f:6d:27:c8:c4:d9:e9:e7:
                    1f:32:ff:87:21:39:e4:75:13:62:72:de:d5:cb:95:
                    61:93:14:81:46:03:44:d0:c2:ec:7b:48:03:99:3b:
                    c0:62:d4:6d:ca:f0:b0:7a:b1:8c:e0:38:be:a5:ef:
                    0b:32:82:70:65:9f:46:6a:fa:04:ab:1f:a7:89:88:
                    f9:93:5c:4d:d2:28:79:e9:73:98:33:1b:c1:1f:ee:
                    70:e4:e5:47:9c:5b:0d:a1:5a:ff:eb:0b:30:ec:a4:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F3:87:17:0F:51:70:C5:B4:D6:7E:7D:62:6B:28:3A:AD:77:B7:33
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:a0:ad:af:4c:43:be:d1:8f:d0:4f:19:09:28:90:eb:e3:
         50:3b:b0:63:ef:3d:5f:7b:8a:21:2e:5d:66:11:f0:a1:fc:2b:
         b1:cf:9c:c1:fc:f7:64:c5:c1:bd:f4:2f:21:d3:3d:d6:04:67:
         d1:ed:ea:f1:db:ca:ec:5e:c6:08:23:f2:a7:34:1f:bd:b5:d4:
         43:a1:7f:4e:37:b2:6a:3b:45:4c:79:cf:2d:dc:16:79:02:72:
         ba:bd:0a:c3:31:52:e5:bc:92:72:97:49:2c:c9:da:f2:65:44:
         35:5f:02:e8:e6:72:ed:9e:f8:9c:5e:31:ec:c8:cf:a2:9c:c4:
         13:5f:09:c1:49:87:bb:28:74:71:be:71:38:79:37:3b:4c:f9:
         0e:ae:b0:82:5a:83:49:9a:0b:c3:ac:d1:76:df:f5:b0:ea:91:
         5f:d3:c8:1a:04:80:d6:0c:3c:22:af:cd:17:38:c3:62:1b:94:
         a1:4c:56:9b:6f:21:88:dc:4f:2f:ce:d4:46:1c:8c:3a:14:4f:
         1e:a2:47:a1:5a:aa:f0:a8:86:b3:ab:ac:66:2e:99:ed:85:e8:
         7e:7d:bd:29:3d:04:16:1c:33:f6:b0:3a:14:fa:dc:7e:ce:c2:
         53:25:2e:7b:79:6e:c6:0f:97:6b:24:d3:10:85:47:84:e7:f4:
         ec:70:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:27 2026 by rpki-client