Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          TpZtZNl+0JfyX4yQhVlTsMPvJm4bXXlTpEUd2lPL86A=
Subject key identifier:   33:77:C5:41:39:1C:48:C8:0B:3A:B7:D1:A6:20:74:44:74:22:88:26
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       019FA9076DBD598C613313152B773CF5FC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          06FE
Signing time:             Tue 28 Jul 2026 14:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:03 +0000
Files and hashes:         1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
                          2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: pfx80yCHxGRj1tB5ah7B4NmLKZ7Iyl0iSxF+olJd1rg=)
                          3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:6d:bd:59:8c:61:33:13:15:2b:77:3c:f5:fc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Jul 28 14:01:03 2026 GMT
            Not After : Jul 29 14:01:03 2026 GMT
        Subject: CN=3377c541391c48c80b3ab7d1a620744474228826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:35:d0:af:7a:2b:ab:39:04:30:af:15:66:
                    d4:cc:83:f8:33:5c:b0:42:0f:eb:3b:2f:f9:6e:90:
                    de:b3:11:e9:17:a6:2c:66:ec:6b:39:78:7c:d3:97:
                    ec:f8:33:a7:7e:51:8f:77:94:f2:5e:22:38:80:80:
                    41:96:f0:4c:6e:bc:3f:7d:27:a7:3a:a1:e1:cb:05:
                    e0:c2:e6:2e:fd:3f:f8:32:00:ec:df:a8:d7:80:0c:
                    c0:79:1e:4f:fb:29:84:45:c2:92:57:93:3d:71:98:
                    49:26:6e:24:cf:0b:c8:8f:ad:c1:90:dd:4f:7e:8c:
                    93:b3:df:bc:f4:fe:87:e0:bf:0d:6f:83:d8:40:14:
                    b8:1e:b9:e0:2e:a6:09:9e:8c:16:c6:eb:c0:41:c7:
                    d7:16:ac:47:ea:91:ce:82:23:4c:9f:d4:e9:36:29:
                    2f:95:ad:15:57:a6:62:15:4c:f4:94:8f:6f:f0:d2:
                    fc:fa:87:19:c5:cf:00:c1:22:92:01:22:81:75:d8:
                    58:8b:d4:3b:55:56:4d:2d:11:92:94:0a:b7:1c:87:
                    3a:9c:a5:07:9f:9a:20:c6:10:66:e1:8d:da:b3:e6:
                    fe:76:ab:76:59:fe:3f:52:33:90:fc:ae:c9:88:f2:
                    28:d1:7b:39:9d:c9:91:59:03:a1:52:c0:fc:eb:cd:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:C5:41:39:1C:48:C8:0B:3A:B7:D1:A6:20:74:44:74:22:88:26
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:08:1d:68:d5:47:1c:13:36:49:3a:3c:bd:61:7f:44:8e:
         95:de:8c:6d:01:1c:f1:23:56:7a:0b:bb:b3:0e:8a:7c:ed:58:
         58:75:36:77:8e:6a:65:e9:bd:fa:14:c1:36:a5:9a:de:f5:f9:
         28:dc:72:63:dc:da:68:2c:b8:93:50:b6:f0:43:af:f9:1f:41:
         bd:54:53:f3:8e:13:c9:4b:f7:74:25:f9:de:a3:79:0f:ee:0e:
         72:ba:bf:40:cf:6f:e5:df:6b:5b:42:18:e8:89:da:68:07:55:
         e8:21:99:b6:9b:86:fd:f5:88:9a:4e:79:76:30:9e:f7:50:d3:
         ad:2b:f2:22:cb:64:58:06:ff:3f:3f:7c:18:85:4c:04:58:fb:
         9c:73:c5:f4:83:6c:13:c5:ae:5d:c0:d8:fb:2d:98:fd:ad:3c:
         66:7e:44:e9:9b:ac:f7:b0:e1:3e:fe:b6:e8:2c:35:70:d1:b8:
         ed:57:ea:51:7b:be:25:6e:e3:f9:81:f3:e8:36:91:36:74:3d:
         8c:40:c3:ea:f8:3c:aa:c1:bc:51:f5:a5:cf:bd:fe:17:13:a3:
         81:46:41:99:11:5c:8b:fd:ed:5c:10:e2:2d:e1:bc:7a:d7:19:
         65:97:4a:df:9a:ac:bd:53:4b:16:e7:9a:65:f2:0b:90:16:90:
         f7:74:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:07 2026 by rpki-client