Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          1HVPDGjPEdLagQGkhorNh2PAKpw82LmDUYIexmaqj4Y=
Subject key identifier:   9B:78:D2:0F:15:5D:E3:32:31:7B:C6:76:2A:C2:E9:A3:57:41:55:CF
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019FA9E338AE6A85A5362E37B9D837C4FE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          19FC
Signing time:             Tue 28 Jul 2026 18:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:08 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=)
                          8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=)
                          10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 4V4EFbCw93M9XanhOx/oH4YN9cC1xqbBG7u+DDS7EPk=)
                          11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:38:ae:6a:85:a5:36:2e:37:b9:d8:37:c4:fe:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jul 28 18:01:08 2026 GMT
            Not After : Jul 29 18:01:08 2026 GMT
        Subject: CN=9b78d20f155de332317bc6762ac2e9a3574155cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6d:63:58:79:02:be:25:14:ba:aa:1e:91:9f:
                    94:01:e4:dd:80:f8:24:0d:4a:ce:c8:50:7b:8a:50:
                    59:6a:27:42:8a:58:ca:bb:37:4f:9a:3c:cf:3f:43:
                    ea:e8:d3:d0:23:3c:b1:b4:8d:49:07:53:9e:e7:dd:
                    00:4b:69:52:28:8c:08:6d:d8:43:75:16:5f:f5:cc:
                    52:73:23:f7:10:d9:bf:39:01:ca:d2:44:59:f0:60:
                    42:31:9a:f8:18:27:70:99:03:b8:c1:e0:e0:e8:8d:
                    40:2a:80:14:6a:aa:27:55:d0:03:2a:81:77:09:d4:
                    bf:78:f7:a6:b1:69:79:be:4b:df:4b:91:ca:ca:95:
                    d4:1d:a3:12:c9:be:4b:d2:f5:cf:61:e8:c2:12:10:
                    f6:2e:b1:78:fb:ca:98:61:aa:0b:a4:a9:4a:f8:51:
                    1f:57:4b:2a:2c:36:60:bf:e1:75:c3:ff:48:33:92:
                    52:28:85:2b:ca:7e:f8:16:cf:e2:35:25:99:60:5a:
                    08:dd:61:9d:de:2f:b9:13:ef:73:9b:fb:15:fc:41:
                    10:9a:cb:27:21:b5:6a:5a:dd:3d:f8:59:70:15:3a:
                    e8:92:ef:01:ab:b5:a8:7e:67:9f:17:93:42:45:7b:
                    05:86:4f:45:a9:be:d2:15:f9:a8:c8:5b:de:9a:93:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:D2:0F:15:5D:E3:32:31:7B:C6:76:2A:C2:E9:A3:57:41:55:CF
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:e4:c8:9b:bd:00:8c:6c:0c:1f:b3:bf:78:85:c3:d8:fb:
         82:57:60:c0:2b:59:72:89:81:02:9f:f0:26:d5:84:f8:0e:d8:
         1f:66:57:08:77:79:22:c4:68:cf:e6:f4:20:2e:16:e9:2f:e0:
         38:9f:d6:e5:6f:04:ea:5f:87:45:5d:4e:59:78:ae:80:79:8d:
         29:97:96:e8:df:bc:3b:73:59:25:36:09:9e:9a:31:7f:d0:c3:
         b1:b3:4a:5d:55:b7:6e:49:b7:da:3c:9c:b8:36:dc:2a:dd:d0:
         50:57:76:e6:79:d0:2e:9e:79:67:b3:a1:32:cf:4e:76:10:f4:
         5c:ad:13:cf:a2:a1:26:31:17:b9:14:41:a3:74:34:d6:69:a5:
         19:bd:bd:3b:25:2c:cb:ef:a8:de:0b:81:70:8a:7e:16:5c:36:
         dd:fa:ea:7a:49:82:34:8a:09:75:16:f4:01:26:ae:45:56:d8:
         c1:50:0e:2e:02:a3:dc:95:37:11:c0:19:68:62:bd:c1:c1:d9:
         3d:93:65:7b:27:27:6a:bf:8e:c1:f9:bc:50:1a:01:ad:55:c8:
         73:db:95:a3:f0:f9:ab:10:b6:f1:bc:1a:9a:32:26:f1:7f:90:
         65:28:4b:81:0b:62:48:c6:ec:f0:a3:c0:ac:3d:2c:94:5f:14:
         70:93:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:08 2026 by rpki-client