Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
File:                     Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft (raw, json)
Hash identifier:          h3aKqkA0r3PUUCXmEdcSnnE7oJvddhNz+oard8TH7H0=
Subject key identifier:   6B:07:30:F4:E7:99:0D:D6:BD:F9:CA:AC:E6:0E:0B:EA:80:6D:A9:F5
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Certificate issuer:       /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial:       019FA899D95AA1CBEE454901E54A4260995D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:22 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:22 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:22 +0000
Files and hashes:         1: Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl (hash: vPS9JAStOVESk7fEdAUGE6JwC+MoUpILL1wkXui2Au0=)
                          2: b0w2NwRKZd0v1YirWaHR-yonRpM.asa (hash: Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d9:5a:a1:cb:ee:45:49:01:e5:4a:42:60:99:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
        Validity
            Not Before: Jul 28 12:01:22 2026 GMT
            Not After : Jul 29 12:01:22 2026 GMT
        Subject: CN=6b0730f4e7990dd6bdf9caace60e0bea806da9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:f2:6e:11:eb:24:51:64:5f:b0:0c:b3:3c:
                    9c:f8:19:d3:69:d2:9b:6a:e6:77:53:15:bc:b7:e4:
                    e8:f2:9b:bf:71:65:fb:56:55:75:0c:41:3e:98:44:
                    14:99:6e:22:00:8b:56:be:51:b8:96:25:31:58:8a:
                    07:72:c4:0f:5a:73:08:83:93:ab:4e:d7:9a:53:16:
                    50:6b:90:06:49:f1:9f:18:a5:88:b5:f8:fd:4e:03:
                    38:8e:6b:92:db:82:5f:67:b7:2f:a5:26:12:39:ba:
                    bb:3e:ad:fa:e8:2f:75:f4:bf:59:d7:00:e7:12:b2:
                    01:49:20:29:82:1e:55:90:0e:e1:c3:e8:0e:48:9d:
                    9b:fd:ba:9d:2f:be:c6:fa:c4:34:04:b9:7a:3d:3f:
                    54:1c:ad:11:18:af:a9:ca:8b:a3:2a:0a:de:5d:b0:
                    75:5a:63:6c:3c:02:cc:f7:c4:a6:7f:2a:fe:3a:cc:
                    db:98:6a:ef:14:78:35:59:61:28:42:af:00:9e:40:
                    da:11:50:64:35:db:b2:1f:1d:33:01:28:cc:04:17:
                    d9:86:2c:69:6c:51:0f:a5:83:6e:93:c9:90:07:61:
                    00:f2:1f:6f:68:6d:eb:94:aa:7e:14:3c:d7:3c:8c:
                    3f:3e:d7:e5:08:cd:f9:ce:2c:a4:71:be:a1:0e:77:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:30:F4:E7:99:0D:D6:BD:F9:CA:AC:E6:0E:0B:EA:80:6D:A9:F5
            X509v3 Authority Key Identifier:
                keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5d:dd:40:12:77:b2:34:5d:bc:3b:cc:ff:17:33:bb:59:40:
         96:11:6e:68:cb:02:1c:54:ab:3d:39:49:3c:49:23:80:cd:96:
         60:e3:15:96:b7:d6:44:fa:b0:9b:3c:57:23:8c:c9:5f:12:04:
         71:0b:b4:5b:d7:33:01:b1:90:5e:dd:f7:7c:e1:31:da:32:da:
         25:2d:06:31:0e:c7:c3:f2:96:11:a3:0a:d9:1f:f9:fd:35:9a:
         3b:39:90:b2:95:48:b6:b0:6b:f1:59:18:b0:da:fc:c6:d9:71:
         9a:fb:55:c7:81:d3:6b:0d:3b:42:e2:ea:b5:41:d5:c2:3e:ae:
         52:34:94:5e:e0:ac:ed:7c:65:00:f1:3d:3d:ec:3f:87:92:1a:
         8c:3d:3b:6d:0e:94:5e:91:db:85:9f:14:f6:44:f3:1e:90:a3:
         0f:ea:8a:03:f8:4c:4f:94:c5:7c:a4:f8:75:b3:e0:10:32:8d:
         40:95:2e:e7:f8:ee:c0:5a:bd:6c:67:5f:1b:4e:ce:7c:bb:73:
         82:bc:cc:89:24:74:6f:18:b4:f2:aa:54:73:b5:3b:43:97:83:
         a8:22:86:15:7c:6e:ae:46:7e:d8:17:47:a8:aa:a7:74:2d:1b:
         22:6f:12:a3:f9:61:f6:6a:31:ca:60:6c:ed:23:1e:27:0b:74:
         b7:e2:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:49 2026 by rpki-client