Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          yUpEda9cfOf/gL/JTey5am5VZGE1XQ5W7mVEv5WFNWw=
Subject key identifier:   C2:A3:82:3E:AE:89:C1:DD:9B:04:0A:F7:C9:BE:AC:84:1D:4B:CD:C3
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019FAA87CC3E6F7D44FA820BEDB57BE479FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          19B4
Signing time:             Tue 28 Jul 2026 21:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:54 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: BV0MvPxo5TSbNtCqSKPV5gr09i25gvhouULrLITvtfc=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:cc:3e:6f:7d:44:fa:82:0b:ed:b5:7b:e4:79:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Jul 28 21:00:54 2026 GMT
            Not After : Jul 29 21:00:54 2026 GMT
        Subject: CN=c2a3823eae89c1dd9b040af7c9beac841d4bcdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:78:70:48:91:e7:af:6f:88:df:8d:e4:64:
                    7b:ff:2e:0f:6b:a0:79:40:3e:5e:04:f8:cb:aa:e6:
                    94:aa:5d:76:f5:d0:7f:ef:be:a9:39:3f:a4:a1:a3:
                    36:2a:a5:f4:89:6c:89:2c:76:d0:ec:20:40:4b:d1:
                    79:2b:4e:f7:c8:69:38:c8:bf:7c:13:ed:18:2a:a0:
                    f1:00:11:8e:28:b1:2c:9d:e3:07:b8:4e:2d:5d:7a:
                    6e:e7:d1:d6:83:48:77:f9:4f:69:26:e1:1c:fd:9a:
                    e7:0d:21:0e:6a:55:28:bb:c8:00:6a:ee:ff:16:73:
                    29:8d:61:01:bb:1d:43:5a:a4:79:2a:91:03:94:5e:
                    94:25:ba:84:75:63:56:b0:d4:f4:e4:db:e6:56:a8:
                    98:3e:3d:6a:5e:33:67:45:b5:57:03:87:d7:68:2a:
                    ba:db:70:ed:96:de:b8:4f:5f:d3:a1:88:19:21:7f:
                    dc:0a:8b:2b:cf:9f:0d:9a:15:6d:78:b6:c7:67:a6:
                    21:7a:d5:eb:be:20:7d:f6:92:35:30:24:2e:03:4c:
                    f8:e1:85:a9:59:db:ef:ce:a2:7c:b6:7d:19:12:b7:
                    42:3a:82:61:8c:d2:fa:bd:50:f5:7e:e5:d6:a9:3b:
                    37:49:b2:39:fb:c3:e3:73:e3:17:7a:fd:81:dd:63:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A3:82:3E:AE:89:C1:DD:9B:04:0A:F7:C9:BE:AC:84:1D:4B:CD:C3
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:10:5f:cf:9c:a6:87:6d:f7:d0:ce:88:60:84:b0:50:eb:2a:
         8a:30:fb:b1:e3:1f:3b:0f:37:5b:46:16:af:1b:49:d1:4f:b9:
         b4:6d:9d:29:7e:4e:0a:ab:b0:c5:53:71:8d:37:e1:82:64:81:
         89:c4:0d:31:7a:07:5f:6d:66:c8:5c:1b:62:9b:d1:03:ad:98:
         41:c4:ee:37:e7:b8:cf:6f:a0:5c:44:10:2e:ff:78:a2:80:53:
         f6:3f:bb:75:75:d9:e5:bf:0b:a0:28:f2:4e:f2:7d:78:1c:bc:
         34:c0:d1:80:e3:84:8c:37:99:24:f7:79:72:e9:3f:1c:82:22:
         54:6d:81:e2:70:65:34:e6:3e:73:65:55:06:6a:bb:d5:a8:de:
         78:5c:06:1d:ab:a6:15:86:1d:5d:70:28:5c:e6:94:1a:79:2b:
         16:95:32:7f:3b:14:8b:0b:4f:5e:60:ed:ee:23:06:9f:c5:8c:
         51:4d:d7:90:60:6c:d9:28:00:b8:b5:1b:39:9f:2f:67:75:7c:
         77:27:16:ad:73:14:a4:5d:94:d6:98:81:2b:8b:db:de:e8:3f:
         5b:03:22:da:a7:44:44:a5:d9:42:d8:9f:93:2c:ad:eb:f4:bb:
         83:90:5b:ed:d9:66:a1:61:f1:4a:45:b0:da:d9:78:01:28:70:
         e3:2f:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:15 2026 by rpki-client