Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          VKHY5n/DjZxTTdNvcZlfTQEzgUG+mFtiIOj7VQWM+Hk=
Subject key identifier:   27:13:5F:08:D0:10:E6:99:39:43:CB:FB:87:A4:6F:D7:77:4B:F8:5B
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       019FAABE50CC6C36E466ECA60472753E27DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          1317
Signing time:             Tue 28 Jul 2026 22:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:26 +0000
Files and hashes:         1: QXvdf-kfkCqDOGFDPxtMYLWrQHI.roa (hash: f3NerkrqCiw7WLEljVvu/M9+wfwW4SsFhdBrrw3Fl+8=)
                          2: U7oUIwqNkAcWng1AoQ2yRuNMwRo.roa (hash: jc+b8+PFodDUod3IoDVdMM++eET9wVKeCNE2IXdwBOs=)
                          3: UT82bVvbFZN0Klu1mqOTYQBNxWw.roa (hash: oyZ/B5zzSvaRc9Ctci5GyXXQUAialxundovqq61f2VY=)
                          4: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (hash: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k=)
                          5: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (hash: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo=)
                          6: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: AWvu2HxnjKpIVHXPy2ppRkKj9D8XZzHGvCvgUbq+Yzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:50:cc:6c:36:e4:66:ec:a6:04:72:75:3e:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jul 28 22:00:26 2026 GMT
            Not After : Jul 29 22:00:26 2026 GMT
        Subject: CN=27135f08d010e6993943cbfb87a46fd7774bf85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:28:1d:2f:a4:1d:fa:08:dc:ca:b1:76:fb:
                    cd:c3:36:10:56:55:23:a2:e4:8d:34:11:a6:55:43:
                    c7:40:37:b0:be:23:18:5c:4a:76:6e:15:bd:52:0a:
                    a9:b4:f7:09:f0:67:39:8d:7d:0c:b1:0f:82:dc:56:
                    a0:c7:cf:79:cf:ee:58:b0:bd:9a:0f:c8:af:0b:92:
                    bb:13:0e:e2:de:74:40:b0:5b:d2:b7:8f:f5:4a:6e:
                    31:51:28:46:39:68:18:6f:8b:1a:e9:a4:9d:de:3a:
                    3a:ac:03:62:36:96:37:88:3b:6a:7d:ec:6b:6d:86:
                    3c:af:b5:98:d5:ac:7b:43:80:2d:7d:33:c7:c1:08:
                    c9:e8:db:34:c5:72:fa:dd:c8:00:b8:38:b0:0e:20:
                    0a:88:35:3b:1e:7d:cc:2a:18:0b:61:21:60:a7:2b:
                    20:82:b1:c9:9c:80:17:de:d8:2a:1b:2b:bd:7f:c4:
                    81:3e:81:32:b6:4e:04:8c:0d:43:19:5f:6e:81:c7:
                    5f:ee:ca:83:29:fe:30:fe:b0:22:b1:7c:22:0e:75:
                    7f:a9:a4:98:2a:3e:01:b0:b7:cb:ba:48:d9:87:68:
                    7f:e8:6a:6f:bf:6d:8c:e4:14:d8:d4:11:d8:b5:6e:
                    67:51:8c:b5:b9:50:15:b9:90:d4:00:06:15:04:bb:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:5F:08:D0:10:E6:99:39:43:CB:FB:87:A4:6F:D7:77:4B:F8:5B
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:87:0f:64:01:96:49:31:38:1c:fe:85:e7:2a:ef:df:7f:
         7f:6c:a1:23:02:7a:14:1a:7d:80:d8:91:a1:95:45:2b:dd:9c:
         7a:40:83:0d:67:b6:c1:30:00:f9:14:3a:9c:96:68:3c:11:54:
         72:2c:18:b8:8d:79:55:cd:4e:63:06:b8:62:45:b9:c1:90:0f:
         2a:77:3b:ed:a6:36:23:98:19:d3:25:c5:55:02:82:94:ee:80:
         f2:3b:c1:2c:58:ca:50:d6:08:d7:d0:a9:88:67:c8:1e:a3:33:
         3b:5f:79:e3:7a:85:e8:bc:cc:26:3b:4f:d1:9c:ce:1e:da:df:
         58:4c:e2:a3:5e:c6:89:24:eb:aa:10:8f:fb:57:43:a1:01:6e:
         56:2c:4b:c6:63:d0:bb:8f:e0:be:61:68:15:d2:8e:35:77:c1:
         48:d2:3d:d7:5d:90:94:bc:88:09:6c:c2:bf:64:bc:40:69:85:
         da:0e:4a:cc:47:11:75:c4:03:af:1f:2e:b5:f6:b1:78:b6:9f:
         2c:b2:5d:91:98:f3:c9:73:27:f5:09:86:c1:ee:b2:58:88:df:
         64:7e:e1:3d:f2:1d:1c:70:89:21:1b:98:5f:76:17:33:67:bf:
         e6:0b:dc:1e:f4:75:7e:d0:5f:26:eb:c2:1d:b6:a0:c8:9a:fc:
         a1:24:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:58 2026 by rpki-client