Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          9futbWonPtJPy95ewKHnAQ3Iqwm5C0h8GjuuRr0lKDk=
Subject key identifier:   98:F5:6F:B5:08:3A:94:7C:FC:2C:A4:E9:A0:79:8A:38:7F:11:43:1D
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       019F935B2874EABDBE00B5B64762DBC260C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          07ED
Signing time:             Fri 24 Jul 2026 09:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:52 +0000
Files and hashes:         1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
                          2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: /skq7t35NtpL3bJ2duA4t8ohxAcy/0EG34A2hEQAVHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:28:74:ea:bd:be:00:b5:b6:47:62:db:c2:60:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: Jul 24 09:00:52 2026 GMT
            Not After : Jul 25 09:00:52 2026 GMT
        Subject: CN=98f56fb5083a947cfc2ca4e9a0798a387f11431d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:cb:35:7c:03:14:a6:e8:d9:e9:d6:d7:cc:
                    35:70:47:1c:ed:24:2e:8d:21:d7:aa:65:55:76:21:
                    ca:8f:f7:4e:75:0a:c2:12:9e:53:dc:03:1a:05:e5:
                    43:20:e2:88:39:5c:bd:5c:e9:83:b3:e5:c0:00:fe:
                    64:d3:ef:6f:a4:9e:65:fb:70:cc:a3:b0:1b:b7:7e:
                    6f:ce:60:f7:3b:d2:0d:6d:e6:f7:a5:92:ce:af:f5:
                    87:2e:b7:21:f1:2d:ff:8d:b7:1a:4b:05:81:53:1b:
                    04:da:87:b8:04:a9:52:23:d9:37:75:ed:2a:2b:a2:
                    b9:28:2b:c4:c0:e5:af:0d:da:39:3a:f8:cd:79:99:
                    8d:c7:5b:0d:7a:56:b5:14:66:11:12:8c:f7:53:c0:
                    0d:2d:12:35:fa:94:9f:a9:f9:f4:fe:46:f3:46:5b:
                    d1:c5:e5:6d:5a:d1:0a:92:a9:f4:ac:65:00:1a:35:
                    fd:04:38:26:ca:43:93:76:69:9c:b8:7b:e0:d4:d4:
                    41:8a:b1:54:1d:d1:a9:42:c3:ec:2c:73:c9:38:04:
                    67:a2:44:c6:d4:54:56:72:55:ea:23:e1:3c:fd:2d:
                    52:f0:4a:ca:4f:27:22:2a:f3:fc:66:20:76:a8:fd:
                    c1:2d:af:a0:98:9d:5c:fe:99:3b:0e:6e:3a:c3:b2:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F5:6F:B5:08:3A:94:7C:FC:2C:A4:E9:A0:79:8A:38:7F:11:43:1D
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:02:3b:38:30:5a:41:12:f3:63:2a:d6:ea:d8:0b:67:bf:
         90:45:2e:4f:1a:d2:31:33:b3:d0:c7:f9:4d:f5:82:b5:52:e1:
         76:c7:da:d4:b0:84:53:0e:11:26:6d:70:dd:70:23:9b:99:44:
         3d:05:ab:96:c2:9f:22:7f:34:2c:11:06:7a:50:3d:57:c9:f9:
         87:be:58:b2:7f:10:a9:4b:67:14:69:72:fa:2c:0e:cf:1f:00:
         0e:e6:33:37:8a:84:71:fe:d1:91:4a:6b:d4:b0:49:0f:00:af:
         5e:58:82:01:1d:7f:b8:4f:d1:88:e7:33:86:c5:53:9a:0a:47:
         e5:bf:6b:80:45:e2:00:df:ae:51:d2:a2:21:3d:22:b4:c0:d1:
         b1:ec:ee:91:07:2f:83:fd:6c:26:12:9c:e4:58:62:36:de:f8:
         66:6d:5b:99:4b:c0:06:0d:21:e3:60:86:91:bf:9c:b1:d2:38:
         66:77:98:c1:2a:a6:96:69:1d:5a:ed:be:ec:3b:98:42:6e:58:
         98:a8:60:10:3e:7f:fa:44:d2:2a:1c:f2:f3:97:c9:30:6e:c6:
         2f:81:9a:07:11:99:87:6d:47:18:ac:11:a7:9a:36:d2:db:5e:
         45:53:1c:40:19:15:43:f8:e3:f2:2d:a0:a7:c6:e3:b2:31:b7:
         43:e3:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:21 2026 by rpki-client