Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
File:                     nq6sEAdE1f1pSjlRQgPxZWfowxc.mft (raw, json)
Hash identifier:          1BRIyaAKQPtQQNQobmVQr4LHW5QVT4hGM1c8K3To3hA=
Subject key identifier:   BD:E8:86:53:1C:0D:BA:88:84:9D:C0:DF:6F:4B:D5:10:A1:C5:62:24
Authority key identifier: 9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17
Certificate issuer:       /CN=9eaeac100744d5fd694a39514203f16567e8c317
Certificate serial:       019F9549FDD1C567FEA2993A4DDDAD6FB164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:22 +0000
Files and hashes:         1: nq6sEAdE1f1pSjlRQgPxZWfowxc.crl (hash: qobxu6YU0RBeqKDsJg1Ez+yzDVIP+eMjLOF2wKewz6E=)
                          2: s9EWiU39iYMNrFtqvNq3BJrO4kk.roa (hash: o8TXQ6W+cJhZM+9AeN/X1v6EizJQvO7ynYTfhk5CPpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:fd:d1:c5:67:fe:a2:99:3a:4d:dd:ad:6f:b1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eaeac100744d5fd694a39514203f16567e8c317
        Validity
            Not Before: Jul 24 18:01:22 2026 GMT
            Not After : Jul 25 18:01:22 2026 GMT
        Subject: CN=bde886531c0dba88849dc0df6f4bd510a1c56224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:6f:40:43:92:f5:1e:c8:f8:26:8b:d3:70:
                    34:a6:d0:0b:ba:fa:05:5c:0b:f7:19:57:06:72:b3:
                    3b:ba:b5:d4:18:bf:80:53:2e:eb:8b:8d:c7:e3:7f:
                    b3:81:79:66:5a:e4:ee:dd:90:0e:5d:b6:dc:8a:4d:
                    95:4b:98:a2:19:ac:91:9f:4e:b8:02:d0:0a:6d:c4:
                    0e:21:44:76:78:c4:df:d2:b3:39:13:61:76:01:29:
                    5e:b6:78:1d:25:86:9f:9c:83:84:c9:32:79:3f:ef:
                    df:84:04:65:12:a3:91:13:cf:04:67:6c:9d:e9:4c:
                    49:8c:da:fe:a3:5a:31:f1:84:8d:c3:13:f5:9c:ae:
                    79:1f:e0:a8:5b:c3:c5:28:d1:22:32:07:19:f5:0c:
                    bf:c0:16:14:18:f3:fb:7a:96:5c:fd:2d:d7:8f:27:
                    0a:96:3f:76:c1:63:e7:62:ff:f5:6d:09:52:06:39:
                    bd:5f:ac:5b:3b:26:5b:e3:6f:95:39:c6:d6:c9:c8:
                    28:c0:3e:d7:8f:c2:be:b8:f3:13:a1:5f:ff:e7:ad:
                    0a:7e:98:f7:02:a5:b3:85:98:ce:fe:77:84:98:c0:
                    24:1f:5c:9a:4c:15:e6:58:fc:36:90:92:ba:6a:f9:
                    40:da:4e:68:ea:f2:86:69:85:9d:94:a3:24:11:73:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:86:53:1C:0D:BA:88:84:9D:C0:DF:6F:4B:D5:10:A1:C5:62:24
            X509v3 Authority Key Identifier:
                keyid:9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:c8:00:90:94:f1:4a:4d:44:50:83:fe:08:8f:01:70:3f:
         e0:59:23:9c:ac:37:81:d2:79:45:31:d8:cf:c2:96:45:73:46:
         9a:a0:9b:12:b2:53:80:aa:2d:5a:ee:7b:b7:e1:7f:e4:ba:9d:
         96:c9:1d:52:a3:96:ef:99:c3:51:4c:33:f9:e2:7c:31:2d:b2:
         e6:70:54:45:98:9b:a9:74:cc:b8:c9:7e:e7:52:44:77:16:31:
         c9:25:45:68:19:31:a9:c6:f0:b7:e7:5a:b6:9e:72:59:d0:b1:
         56:25:f3:c7:cc:6d:ab:f9:87:13:62:00:b8:5b:c5:56:4f:54:
         94:16:54:21:78:62:41:b6:f6:88:0d:6b:6b:49:6d:2a:de:0f:
         03:9b:8d:44:fc:4f:72:28:82:28:59:21:4f:92:38:2f:08:29:
         6e:13:f0:03:32:0c:a3:af:00:be:f7:f7:0d:43:24:bf:ca:5e:
         0b:26:94:0b:ad:91:55:2b:d4:c2:f3:65:90:6c:15:7e:70:91:
         47:bb:07:56:e5:9e:13:d4:f4:68:cc:df:b7:b6:d7:94:19:e8:
         29:e1:bc:4a:95:e0:47:db:bd:1b:27:5e:b0:c7:8c:1d:59:82:
         3c:1d:71:03:b1:f2:78:c8:b4:05:d3:e4:7c:90:8d:a4:d9:79:
         b1:ef:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:51 2026 by rpki-client