Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File:                     nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier:          7Cico3V24J+52Aao11wroeYjnInSRJj4KCZubOZCcHs=
Subject key identifier:   68:43:5E:7C:D8:6C:5D:DA:78:D3:A0:D2:E2:4E:12:2F:08:99:D1:BE
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer:       /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial:       019FAE2D63277D49CF0D9841655CCF0D00DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number:          05CB
Signing time:             Wed 29 Jul 2026 14:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 14:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 14:00:37 +0000
Files and hashes:         1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: W7rAUCC39YiSxjx0ANIXCfF5xDRDft5vPR/WDKMW/uA=)
                          2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:2d:63:27:7d:49:cf:0d:98:41:65:5c:cf:0d:00:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
        Validity
            Not Before: Jul 29 14:00:37 2026 GMT
            Not After : Jul 30 14:00:37 2026 GMT
        Subject: CN=68435e7cd86c5dda78d3a0d2e24e122f0899d1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:68:5c:6b:6c:0e:df:91:53:ac:c3:ff:69:6a:
                    b2:38:e5:9b:10:e2:8f:99:ce:ab:d8:d0:80:15:e7:
                    65:9d:bd:8a:14:60:fb:c2:54:9f:b6:59:20:9d:32:
                    65:01:6c:af:30:3e:42:b6:9b:40:65:54:b6:21:07:
                    3e:2f:e3:a0:4f:a4:55:d0:25:5d:a8:ed:62:0c:a3:
                    47:40:3a:1a:0f:9f:f2:c3:3f:cf:05:c9:df:dc:5a:
                    7f:8d:d2:59:cd:63:11:bc:09:83:5a:f9:59:9e:6e:
                    a7:66:e9:72:fa:c5:41:93:76:5b:ba:45:28:41:57:
                    b5:dd:c0:8d:28:4b:b2:3d:3d:9c:b9:ad:b3:8f:51:
                    55:72:77:20:1a:6a:57:9b:0f:0a:99:65:73:a0:49:
                    af:d6:a8:48:8c:9e:b9:50:03:0b:8d:dc:bd:e8:8d:
                    0b:b2:72:d5:6f:fa:04:ce:5e:c0:38:49:84:97:53:
                    24:bc:06:ce:72:32:55:8b:6b:02:2e:05:48:a1:10:
                    a8:50:d8:26:5a:d3:62:71:40:61:32:60:e1:91:0e:
                    f1:6f:11:69:f3:bc:33:26:2e:57:cd:4d:95:0e:28:
                    bb:57:7d:a1:86:cf:bc:9d:3f:c7:41:71:c1:41:2b:
                    82:af:03:f2:4e:f1:a3:70:28:58:67:a5:93:fe:20:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:43:5E:7C:D8:6C:5D:DA:78:D3:A0:D2:E2:4E:12:2F:08:99:D1:BE
            X509v3 Authority Key Identifier:
                keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:87:94:95:d7:2a:f5:67:38:1d:97:bf:d9:11:51:55:19:c8:
         24:34:83:e3:7c:5f:93:d8:fe:71:b4:a7:50:19:1a:fc:cc:9e:
         80:19:54:ab:82:18:58:6e:b7:e3:50:47:50:cf:00:1f:1a:21:
         c5:74:52:6f:c7:41:3d:3f:09:b5:ee:b5:33:40:c1:43:53:da:
         09:75:a9:4e:b5:1b:72:8d:61:41:ef:ea:bf:89:0a:ef:0f:82:
         f0:3f:49:8e:df:b1:39:8c:ef:67:fb:ad:20:b9:42:a2:76:ab:
         79:73:6e:04:b4:0c:f2:5f:b0:8e:3d:da:79:1e:2e:79:4e:fe:
         42:1d:20:3b:c4:88:4a:f9:39:34:bc:c7:d2:11:b1:d4:c7:8c:
         33:52:97:85:de:39:21:8d:40:46:5a:bd:a9:1a:13:1d:d1:1a:
         d7:36:17:9f:7f:1c:35:48:0a:11:ec:1a:43:0e:80:05:77:55:
         d4:ef:f0:c1:2b:7c:9f:23:5b:e5:51:bf:d0:40:0b:32:f9:22:
         54:d1:61:58:24:35:0a:08:98:41:66:8b:79:20:b6:fe:42:e6:
         eb:e9:2d:a3:ff:d0:af:5e:e1:bc:73:cd:59:cc:78:b7:a1:2a:
         7a:1b:5d:08:a6:c0:52:b9:99:d1:11:48:e8:df:05:9f:75:21:
         17:07:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:29 2026 by rpki-client