Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          /EViDOUyt2jvrJTu2G12m67PjYwC1QDwFRLfNS8eAa4=
Subject key identifier:   D2:AC:3E:16:69:EA:3E:BA:32:12:3D:EE:FE:DA:76:66:3F:E9:A0:EA
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       019FAB2C0DC441F113897B36725B8CF19061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1791
Signing time:             Wed 29 Jul 2026 00:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:18 +0000
Files and hashes:         1: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (hash: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk=)
                          2: 8vxStV176PVhHBrk8PFYjrws9_k.roa (hash: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: tUBG9jYOAdgnB0Km5Ox9FAPAsw2rFX01CzOAKvZ8K1A=)
                          4: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (hash: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA=)
                          5: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (hash: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:0d:c4:41:f1:13:89:7b:36:72:5b:8c:f1:90:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Jul 29 00:00:18 2026 GMT
            Not After : Jul 30 00:00:18 2026 GMT
        Subject: CN=d2ac3e1669ea3eba32123deefeda76663fe9a0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:77:97:6e:62:b9:93:5f:9d:1c:44:c2:5a:
                    43:c4:bf:79:ab:1d:cb:c0:42:06:61:bb:12:dc:72:
                    d9:b9:dc:10:93:07:7d:41:49:3c:94:1a:91:02:57:
                    df:b5:2d:63:4c:c5:55:93:4a:05:a5:60:3d:9a:b1:
                    83:b4:1e:b2:e5:14:97:08:44:69:78:73:37:5e:b6:
                    ea:57:21:f0:a5:bf:cc:8f:0c:ca:ff:ce:02:e2:69:
                    6a:c3:f0:e7:8e:a5:f4:0d:c6:f9:d7:f8:21:d2:b7:
                    f3:6d:c5:1c:0f:b7:76:7b:2c:da:24:d9:8a:3d:ce:
                    1a:c7:93:7d:a8:cf:e8:92:43:7f:a2:56:c0:9e:73:
                    bc:3e:ce:2c:33:5f:09:da:e5:b0:ca:7c:a5:4c:40:
                    5a:c6:b0:c8:b3:23:5c:40:8b:4f:8a:8a:d8:47:c8:
                    ae:23:9d:f3:9b:9a:58:fe:22:d1:6a:c1:59:bd:78:
                    8b:18:e9:86:31:b1:34:aa:76:6c:e7:e3:e3:ab:3d:
                    73:7e:15:27:cc:b9:27:db:e8:e7:0b:6c:bc:2d:b4:
                    39:0b:8a:9f:61:27:34:68:b1:8a:66:a0:ec:df:b7:
                    3b:67:2b:14:00:6a:61:ce:c0:f1:e7:dc:1b:f5:84:
                    68:37:c0:98:1a:e8:7f:d3:a9:6f:97:d7:70:45:b3:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:3E:16:69:EA:3E:BA:32:12:3D:EE:FE:DA:76:66:3F:E9:A0:EA
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2f:ea:95:af:93:34:22:f9:65:fd:28:56:37:58:87:ad:de:
         37:2a:39:7a:90:56:9a:90:11:44:a3:f4:8f:e1:e7:f5:8a:f8:
         bf:54:59:41:80:b0:24:da:ec:f7:9e:fb:54:9d:ea:97:a4:f8:
         a0:d8:a7:23:4a:97:fd:8a:e6:9f:05:fa:64:22:ff:81:b9:9f:
         dd:58:9b:ab:e5:7a:f0:a3:ef:2f:a3:f8:ac:e9:c2:89:37:86:
         cc:ab:e5:0d:a5:b6:30:d9:d3:8c:d8:09:c6:c8:1e:1c:e2:dd:
         c5:22:9b:38:56:35:9f:e3:61:85:31:f4:7a:a8:73:3e:a9:d6:
         6b:e6:d8:13:82:d6:b0:75:0f:21:0d:e1:9e:7c:35:41:17:39:
         5b:b0:05:b3:44:a0:7e:ab:d1:db:83:dd:d5:b6:e2:ab:92:4e:
         1a:57:30:17:23:2d:87:a3:2a:97:b0:30:d4:e4:3c:34:c1:0b:
         b7:c4:b1:33:b9:e0:4d:16:a0:0a:55:7c:d7:bf:98:85:10:40:
         f9:02:51:e7:3d:04:70:3f:7d:b1:1b:02:4e:0e:af:93:d2:98:
         5b:61:d4:85:e3:0f:1c:fc:41:21:22:75:be:14:d2:96:c3:20:
         5c:5b:76:0d:c3:21:e0:49:2e:b7:b7:4d:b7:dd:09:17:20:5c:
         bc:82:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:15 2026 by rpki-client