Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          sa4VuUA8K8J44dH0zjuFvyGApGwHUKK0tEik4YRqqNs=
Subject key identifier:   08:D9:96:FE:05:1B:99:A6:84:A4:01:91:6E:FB:6D:77:6A:2C:22:F1
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       019F8F7E084775F3CF29AB93922D43A56E3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          102D
Signing time:             Thu 23 Jul 2026 15:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:29 +0000
Files and hashes:         1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: IiFRnrxd3hP1/noSNPNec4h97uj/SyG19Wo2RQiLHiw=)
                          2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
                          3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
                          4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
                          5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:08:47:75:f3:cf:29:ab:93:92:2d:43:a5:6e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Jul 23 15:00:29 2026 GMT
            Not After : Jul 24 15:00:29 2026 GMT
        Subject: CN=08d996fe051b99a684a401916efb6d776a2c22f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:21:a7:20:67:a2:f6:20:69:7e:e9:71:bf:
                    07:5b:13:a3:20:88:c0:08:cf:6e:51:1f:bc:ad:0b:
                    d0:53:ca:c3:6d:02:11:fe:03:b8:66:10:48:55:e1:
                    3f:39:3c:b0:b8:b4:5a:b2:c4:4f:1f:70:6c:6b:4d:
                    d5:08:6a:fe:71:0c:1d:27:eb:20:a7:74:f1:b6:2a:
                    9e:02:26:31:6c:1e:ad:b8:4e:6a:1b:73:5a:5a:a4:
                    1f:20:66:5c:46:a4:b9:f7:f7:ab:6b:f8:10:52:2c:
                    f3:dd:ff:42:62:fe:d8:49:a7:0f:2e:da:28:ae:51:
                    26:6c:1d:49:93:9f:2f:05:6c:d7:07:66:cd:02:49:
                    55:63:89:21:b8:0b:cb:88:55:74:22:75:0c:21:9a:
                    09:7f:ec:37:3c:7d:7e:64:3e:58:60:53:28:19:22:
                    b4:12:c1:56:a0:19:12:d3:dc:07:f5:c4:2a:7f:7b:
                    79:31:08:00:cd:81:50:cc:ae:4c:63:97:99:9f:9c:
                    95:27:f0:36:ce:6a:71:e4:36:8c:26:cf:2c:10:70:
                    d9:2f:db:1b:e3:26:b5:d5:81:41:05:01:12:fb:ca:
                    e7:56:7f:f4:ff:ea:2f:a7:a1:90:4a:a6:50:3d:e1:
                    ab:32:dc:b2:4e:9d:a3:21:f8:df:46:dc:8b:cc:f7:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:96:FE:05:1B:99:A6:84:A4:01:91:6E:FB:6D:77:6A:2C:22:F1
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:7c:96:8c:8f:2f:1f:95:a9:98:7b:7d:71:58:2a:d1:da:
         3b:08:84:d3:04:31:c9:21:54:08:7c:42:a9:ec:81:3c:47:65:
         ea:97:d2:56:05:b0:b1:be:10:4d:38:c1:55:4d:43:87:a6:46:
         ef:74:a7:e3:74:d8:2d:65:02:06:84:1a:e8:49:1a:26:d7:ea:
         72:e5:ef:ce:2a:4e:8d:24:5f:a6:34:56:8c:c5:25:0d:a9:63:
         6d:ac:5d:9e:c9:04:37:1c:0c:bb:73:d2:62:36:39:f9:88:4e:
         a5:15:12:b6:8a:58:8c:56:3c:d2:53:da:06:29:10:fe:f7:82:
         24:d0:1d:be:9b:61:23:1a:10:31:cf:dc:ac:f7:3c:b3:b6:48:
         50:eb:f3:9e:a8:9e:07:a2:47:44:83:de:bd:e6:33:7b:c6:cc:
         39:58:2d:6f:92:2f:41:33:8e:3c:e1:ab:11:e7:1e:e5:61:72:
         09:ed:44:59:01:fe:8b:08:f3:99:ec:eb:ce:78:16:62:ed:3a:
         fa:1a:27:d6:93:42:7b:b8:95:72:61:46:21:d3:7c:3d:e8:2d:
         74:74:e9:39:d7:41:af:bb:5e:d0:49:b8:88:d9:c8:04:18:7e:
         49:de:98:bb:6c:ae:68:1b:92:b4:f6:97:f7:2e:3e:ab:96:d3:
         51:ac:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:03 2026 by rpki-client