Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File:                     nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier:          zRICIYagEBxSWNAOOP6y3CHBfRHNxwvbp8T1EC3e5x0=
Subject key identifier:   9E:7F:0B:A7:F2:D7:8F:ED:C6:62:FE:4F:5D:F5:FA:CE:5A:90:72:9F
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer:       /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial:       019FACAD1874A801C836613EC6DFBE19BC4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number:          0A76
Signing time:             Wed 29 Jul 2026 07:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:52 +0000
Files and hashes:         1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: LArdaAoSe1PEDEvlM+gxBcj06fjGlDedl4QSx9R7A7A=)
                          2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:18:74:a8:01:c8:36:61:3e:c6:df:be:19:bc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
        Validity
            Not Before: Jul 29 07:00:52 2026 GMT
            Not After : Jul 30 07:00:52 2026 GMT
        Subject: CN=9e7f0ba7f2d78fedc662fe4f5df5face5a90729f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:53:82:f2:f0:6c:91:dc:a9:b8:2a:cf:11:
                    f6:b3:a2:d9:84:f6:ce:ca:38:07:e9:7b:67:37:a7:
                    fd:31:8d:40:b2:df:34:a2:e3:05:fc:fb:5d:3c:ab:
                    41:13:23:cb:ba:db:ff:5a:9d:1b:95:88:d9:71:b4:
                    9e:8e:1e:71:a2:73:cd:f7:4b:22:09:65:68:28:33:
                    9b:6a:6e:54:77:d5:a0:ec:5e:ca:c9:6a:dc:e2:6d:
                    60:bd:a6:e1:33:17:90:09:55:f4:14:90:5d:98:52:
                    5f:c6:db:46:2f:c1:4d:d1:04:33:e3:0d:52:e4:86:
                    f4:55:1f:2d:85:c5:bd:89:7d:b6:a3:29:a2:cb:c2:
                    cd:8b:48:b4:4a:ce:95:61:1e:d8:02:44:d6:cf:7c:
                    8b:8b:de:fb:88:da:9a:c7:18:6d:81:bd:ac:13:29:
                    5e:a0:bf:5f:c6:c5:47:f5:f2:34:cc:04:31:22:f5:
                    44:2e:72:fe:ef:31:4a:90:b9:49:01:bf:83:23:fb:
                    48:ca:43:73:b1:da:2d:d6:95:2a:98:fa:10:80:88:
                    01:f5:7a:27:e3:06:84:c7:db:9c:c9:fd:5c:be:70:
                    c2:18:fa:a2:3b:28:ab:a0:cb:b5:45:19:fb:17:06:
                    0b:53:ab:61:be:a9:5b:ea:ce:b4:df:90:81:2b:9a:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:0B:A7:F2:D7:8F:ED:C6:62:FE:4F:5D:F5:FA:CE:5A:90:72:9F
            X509v3 Authority Key Identifier:
                keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:46:bf:d8:f7:96:4a:c7:b4:06:5a:88:49:a1:82:8a:3e:c0:
         6f:b3:5c:4e:7e:ec:01:8b:9e:32:22:d9:23:4d:3f:a2:59:49:
         b4:08:cc:27:7f:51:08:a8:b6:6f:2f:ae:21:c4:cc:32:72:c2:
         f0:88:04:92:e0:8d:8e:86:28:e5:21:4b:54:8e:1f:a1:bf:ac:
         ef:6c:e2:be:5c:03:4b:0e:0c:d3:6d:0c:12:6e:4f:15:ca:41:
         31:2b:78:58:63:9f:01:d3:8b:74:cb:17:42:82:3a:d5:50:82:
         ea:c0:13:b0:34:86:47:09:4c:77:58:5c:d0:45:c5:0e:a6:13:
         36:c7:0a:d3:00:3f:7c:ea:26:9a:20:2c:fa:b7:7f:aa:6a:65:
         b6:a5:bd:7a:e2:1d:d4:6c:2b:aa:f0:aa:31:df:e6:6e:05:6d:
         12:66:f0:41:99:ee:ab:52:0a:fa:75:8b:77:34:e2:37:88:de:
         62:44:d0:00:46:1d:e0:29:7e:21:8e:79:87:af:a7:f2:90:8b:
         70:1c:a1:28:cc:82:f8:c6:c3:c1:d1:22:84:4b:d1:47:c5:0a:
         35:d5:1c:61:a7:28:72:c8:4c:69:de:6b:d7:33:64:33:35:95:
         3c:06:ea:d6:dd:83:32:b8:5e:d1:e1:03:0d:ff:70:f4:3a:27:
         fb:27:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:42 2026 by rpki-client