Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
File:                     Nl81kB17-TkbVrA0VzsklXS66S0.mft (raw, json)
Hash identifier:          gzIUKpXKh9gt/3Klf2hM575/eG6lmPU0b6F2ZLGg+9A=
Subject key identifier:   D5:35:20:23:C2:14:A2:FE:3C:22:58:4E:FA:0B:A7:D3:DE:A4:2F:46
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Certificate issuer:       /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial:       019FAC75FB9CC2E810CDD2066884AA1C6C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:40 +0000
Files and hashes:         1: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (hash: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=)
                          2: Nl81kB17-TkbVrA0VzsklXS66S0.crl (hash: Bk9F0tLo6Qv0mu4m6bikb8ZYdeZh1+jtaWsexZkvho4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:fb:9c:c2:e8:10:cd:d2:06:68:84:aa:1c:6c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
        Validity
            Not Before: Jul 29 06:00:40 2026 GMT
            Not After : Jul 30 06:00:40 2026 GMT
        Subject: CN=d5352023c214a2fe3c22584efa0ba7d3dea42f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:77:9d:a5:8f:d7:48:f8:7b:42:f7:4b:30:
                    05:2b:69:9a:2a:dc:45:94:05:66:95:33:17:92:69:
                    7d:2d:14:56:f6:c2:99:64:e1:0d:8a:ea:6a:90:8f:
                    6b:5e:8a:2c:e9:f6:74:8e:e8:30:37:f4:06:4a:cb:
                    9c:66:2f:f2:26:d4:bd:db:dc:35:a8:a7:c1:2a:a8:
                    cb:70:80:a5:1e:2f:6a:2b:e7:62:e5:81:7b:82:96:
                    63:c3:f7:c5:10:b1:7e:90:58:52:48:85:89:67:29:
                    b5:15:15:48:3f:46:5c:93:53:da:07:2b:76:a1:a6:
                    d3:7b:5b:78:0f:c9:65:e7:60:71:52:9e:8f:d9:83:
                    ae:d5:47:5a:b8:6e:80:55:30:47:5e:97:8a:c0:c0:
                    19:79:1c:f7:b6:56:0e:2a:45:8c:2c:54:bb:8c:bf:
                    1f:74:84:5c:04:98:2c:88:ad:9c:89:90:a9:75:ac:
                    92:42:44:a6:32:d2:39:dc:bb:69:c1:49:cb:57:0f:
                    53:81:6e:b5:46:10:24:cb:75:34:bb:8e:b1:4d:74:
                    ec:eb:2b:c1:5c:18:2e:d2:44:97:1a:02:ac:2c:8f:
                    09:9f:f2:5a:a4:99:96:b2:bf:bc:ab:e8:58:63:c5:
                    3b:52:ac:de:7d:07:c2:18:cc:e4:0a:3b:e0:20:0e:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:20:23:C2:14:A2:FE:3C:22:58:4E:FA:0B:A7:D3:DE:A4:2F:46
            X509v3 Authority Key Identifier:
                keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:df:07:2b:08:20:f5:e4:78:d7:22:2e:be:cc:14:31:03:a2:
         76:07:61:bc:62:e5:7b:b5:b0:16:1d:ec:a2:69:f9:66:e8:11:
         77:93:bc:ed:f3:a5:cc:a2:c2:d2:cd:1a:c2:e7:ce:c3:28:b2:
         fc:7d:df:42:6f:62:42:7a:b4:e4:8d:8c:3a:2c:67:62:2f:77:
         db:91:ae:34:e2:18:bc:a2:1d:ad:f1:e1:93:3c:1c:20:b8:f1:
         0d:67:1a:25:a9:b6:8f:81:d4:4f:2c:34:6a:a7:af:1b:c4:80:
         2e:84:ae:da:3c:49:b4:3b:04:a6:a8:ac:ef:0c:84:a4:36:b2:
         1b:33:ca:b7:78:12:b0:11:3c:8c:6e:3f:1b:05:d3:2c:bc:6a:
         28:ae:7b:db:62:4c:ed:e7:07:e4:1a:a2:f8:80:2d:61:4c:90:
         41:89:ea:7f:de:62:1e:4c:f4:2b:65:62:4b:b0:57:11:69:30:
         74:b7:4c:ec:c4:dc:0a:b7:0b:68:29:d4:06:34:6c:70:1f:de:
         e2:46:2a:84:80:7d:9c:f6:19:62:70:00:4a:80:c3:7a:bb:a7:
         8a:ca:1e:eb:22:e7:bb:45:e1:24:d2:de:c9:16:64:2d:bd:57:
         c1:3d:c1:13:77:95:70:c6:90:e1:32:c3:06:69:f5:c6:77:df:
         90:24:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:06:11 2026 by rpki-client