Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          cVqhbwiDLAuFmbI1SZnIq6hcih3sVaqEqdIBjJU/CDA=
Subject key identifier:   11:0F:96:03:F8:D0:0F:DC:2C:53:07:DD:29:AE:18:09:B9:0C:E8:F1
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       019FAB9A0081A941C25AA3BA3FE1FB48906F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          1007
Signing time:             Wed 29 Jul 2026 02:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:24 +0000
Files and hashes:         1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
                          2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: SAEFA48PHD1joBSjTqHbASgwrHUC8RpEFw+J8OfUK58=)
                          3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:00:81:a9:41:c2:5a:a3:ba:3f:e1:fb:48:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Jul 29 02:00:24 2026 GMT
            Not After : Jul 30 02:00:24 2026 GMT
        Subject: CN=110f9603f8d00fdc2c5307dd29ae1809b90ce8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:bd:0a:6f:17:92:12:75:37:ad:20:3f:9e:
                    a6:df:47:b7:28:20:d6:44:c8:3f:ce:9c:5c:fa:ce:
                    92:9f:3d:96:3c:1d:ed:77:8d:76:32:37:49:e1:8a:
                    f5:c7:73:9f:4e:f1:3f:6d:f3:e9:a9:7b:e2:30:99:
                    1a:50:ed:d6:9c:5c:17:46:a9:a1:9e:58:e4:db:16:
                    3a:a1:e7:50:e2:1b:7f:78:76:c3:4e:5d:5a:a4:00:
                    5e:01:6e:68:86:5d:44:d4:eb:48:8f:51:2f:df:af:
                    5e:a1:d3:9d:46:83:6c:7a:c0:8b:a2:66:58:69:be:
                    f2:4b:61:40:d7:e7:59:1f:4f:22:2b:60:9c:71:dd:
                    ed:35:b2:88:c7:37:2e:f8:f3:71:b2:df:a2:94:78:
                    a2:50:7b:4c:09:0c:c2:5f:77:f1:8e:13:d1:ac:c2:
                    0b:de:ec:ee:25:06:8f:bd:cb:3e:ee:46:bb:71:00:
                    75:9a:f0:01:fb:92:f3:70:3a:52:0c:b5:e0:2f:1d:
                    30:77:e1:f7:d2:48:fd:0c:d0:ac:06:f5:53:40:5e:
                    1f:d5:70:65:42:19:6f:22:50:d3:be:06:2e:8c:80:
                    31:2d:24:ff:bd:9c:2e:e2:62:58:f4:f6:6c:ff:fe:
                    b2:88:81:e6:48:4e:99:61:b0:a2:4a:ad:98:6c:ca:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:96:03:F8:D0:0F:DC:2C:53:07:DD:29:AE:18:09:B9:0C:E8:F1
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:f6:61:2c:3e:09:cf:0c:d4:c1:de:40:76:25:8b:ad:16:
         4c:ca:f5:7b:b8:33:9e:5f:35:14:99:3f:ba:e8:15:5b:9c:08:
         1e:a2:0f:c9:cd:34:aa:19:f7:dd:6b:d2:31:86:f2:51:64:02:
         ba:02:1f:5b:6d:b3:d8:e2:7c:29:7c:cf:ae:40:79:24:36:8b:
         67:2e:e5:92:38:25:e6:7d:43:20:d7:d2:9d:86:3e:ef:5a:5a:
         39:6e:63:d3:3b:db:0e:35:e1:4a:f2:4e:08:b3:25:6c:54:62:
         aa:2a:5e:f6:8a:ad:90:25:5e:ee:cf:b5:a8:6b:26:64:10:21:
         69:61:db:a0:60:65:b0:12:02:1d:bd:1b:23:1c:c5:ac:4f:14:
         49:7d:c8:5c:16:cf:ea:96:3d:a6:62:fc:72:71:ee:03:af:f3:
         d6:d8:64:b4:a7:7b:81:76:b1:f9:9d:e0:e6:d9:59:6f:1c:fb:
         5d:30:f2:cd:52:33:c8:9b:f1:32:c1:d8:9e:01:79:23:c8:8f:
         0d:f7:8b:40:14:b7:59:19:4b:23:01:20:56:81:01:8c:ea:29:
         e6:27:ed:d5:70:ea:3f:ed:06:9c:dc:5e:eb:a6:a6:84:ba:2a:
         58:61:eb:64:47:fa:f5:56:e2:da:02:85:da:fe:a5:d7:ef:7b:
         e8:1d:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:32 2026 by rpki-client