Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File:                     N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier:          8J3BoZK6lCW6RtvzCDxnk1U+oZN2eDFsu3YfXmROYMY=
Subject key identifier:   2E:4C:88:3E:92:00:B2:77:A3:88:3E:4E:8C:0D:6C:7B:AA:08:FA:1A
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer:       /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial:       019FA93E77E7C22B4ABAA7E9033FA163A83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number:          108A
Signing time:             Tue 28 Jul 2026 15:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:11 +0000
Files and hashes:         1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
                          2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: vdfQ2hClzvdSHn5WQHJd0uFiaHZuE0Hehp6VS9e3SK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:77:e7:c2:2b:4a:ba:a7:e9:03:3f:a1:63:a8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
        Validity
            Not Before: Jul 28 15:01:11 2026 GMT
            Not After : Jul 29 15:01:11 2026 GMT
        Subject: CN=2e4c883e9200b277a3883e4e8c0d6c7baa08fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:33:7e:19:2c:33:64:29:6f:3f:be:e1:8c:
                    c7:da:04:61:f0:b4:4f:37:ca:46:4c:56:a0:f8:39:
                    72:90:9c:2c:5d:f5:da:6d:80:f2:c8:46:9b:57:48:
                    a9:a1:49:7e:db:df:1e:f2:c1:4f:96:a0:0d:89:30:
                    20:76:78:3e:fa:e5:ef:96:e3:65:6d:d0:39:0d:9a:
                    c1:9f:97:aa:8c:43:53:2d:71:c2:4d:d6:7c:73:ea:
                    99:cb:f4:e5:3b:9c:78:93:d8:4e:14:28:3b:74:30:
                    25:30:38:3a:32:c8:5c:d6:a3:70:14:0b:0e:e7:e0:
                    e4:18:c2:19:a3:44:21:70:44:ff:3f:cb:bb:e1:1c:
                    82:ab:55:d6:b4:94:d2:cf:ea:7e:3d:2b:cb:73:d1:
                    50:1f:b7:18:f7:bc:c3:72:98:47:54:d2:7d:07:a4:
                    39:24:61:e7:a0:a9:36:e8:c5:dd:62:08:39:c0:da:
                    ab:40:2e:3a:99:ce:4a:c4:50:5d:35:bd:2f:37:8e:
                    f8:b5:96:fb:bb:45:4d:db:8e:58:02:53:b8:11:10:
                    eb:66:b1:d0:0b:47:aa:44:67:25:0d:7b:b8:2d:a2:
                    ad:74:0b:6b:14:72:d0:97:88:a1:dc:f6:75:8e:f9:
                    6d:44:17:d8:60:90:e9:3e:10:8d:67:8a:1a:a7:76:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:88:3E:92:00:B2:77:A3:88:3E:4E:8C:0D:6C:7B:AA:08:FA:1A
            X509v3 Authority Key Identifier:
                keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:38:a1:b5:cf:d3:f6:94:e1:cf:99:fe:f4:fb:65:b0:6d:
         c6:da:9b:c7:f3:50:36:78:67:17:2f:d0:d9:99:8c:57:b0:8b:
         c9:38:7a:91:af:80:b3:1d:72:0a:b2:b6:ec:b4:c1:62:9b:61:
         07:92:44:5f:11:23:c9:06:77:e3:99:1a:e4:9a:35:08:dd:a0:
         32:d8:54:27:1b:be:da:1b:e4:03:48:89:30:35:78:dc:a2:60:
         4c:26:0b:3d:f6:04:2d:12:41:e4:a5:b3:66:ec:9c:48:2e:9b:
         d7:af:62:b8:91:a6:61:93:d7:cc:f9:0c:ef:9b:c3:49:32:61:
         47:64:b3:08:39:6e:2e:67:3f:54:70:b9:2e:14:f8:db:90:ef:
         52:99:a4:04:85:06:61:6c:11:84:2d:44:3c:89:ba:3f:83:95:
         1b:09:39:3e:82:70:af:34:96:4e:1d:f3:e2:8e:f3:b8:5c:1a:
         6d:03:48:3a:1a:80:6c:1e:c5:b0:6e:52:23:91:c2:09:f3:dd:
         48:e6:0d:14:3a:5d:f0:0a:96:0c:bc:7f:b5:56:1a:b7:b5:e6:
         07:71:fc:43:e0:bd:fa:f4:86:41:45:6e:2b:a8:b0:d8:d2:6a:
         84:63:0e:37:35:eb:0c:bc:40:23:c8:56:4f:6a:ad:6c:4b:b1:
         46:88:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:42 2026 by rpki-client