Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File:                     nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier:          VMaFyyjNze8pbgyVy1y39myJxYcDYGSEek6vwVIMNJ4=
Subject key identifier:   D9:AD:1C:B3:34:D0:8C:EB:FA:E2:7E:A8:1A:5D:B7:37:42:D1:3F:50
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer:       /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial:       01A0E2F45BD10941CF4A807D33B500FCF18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number:          01D5
Signing time:             Sun 27 Sep 2026 13:01:00 +0000
Manifest this update:     Sun 27 Sep 2026 13:01:00 +0000
Manifest next update:     Mon 28 Sep 2026 13:01:00 +0000
Files and hashes:         1: 0ukpVUSxlWUjEn8_3Xhh5EdLxE4.asa (hash: j4wQB6gt1Z/UKS98HN0+WjuxJxJyXB/YyRal6d7AqSk=)
                          2: 1zwO-pRpLQjpKdc2fMnL99i_j-Y.roa (hash: SYfKKB6gtn0cNSUNi0rlTL24CWOzIm0TRFFugkUSGaY=)
                          3: ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa (hash: SVrmw2kPu3uWDYtUFMQIl+Wr3E0Z77xS+MusJocEbUE=)
                          4: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: w0+TKMuW7Z2rN5PaLnrzhxk9ty1LD0pjjH6OWJpXZGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f4:5b:d1:09:41:cf:4a:80:7d:33:b5:00:fc:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
        Validity
            Not Before: Sep 27 13:01:00 2026 GMT
            Not After : Sep 28 13:01:00 2026 GMT
        Subject: CN=d9ad1cb334d08cebfae27ea81a5db73742d13f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:e8:da:b5:51:07:a4:03:f2:44:ce:66:4f:
                    4a:95:f7:87:da:74:aa:22:af:5d:24:cf:89:f5:ff:
                    9f:a3:b1:38:89:15:a3:ad:96:37:cf:ab:34:eb:56:
                    91:0a:20:f6:6e:3d:0c:07:f0:76:18:2a:02:f1:c9:
                    d7:cd:3a:30:09:05:13:f2:92:f7:ef:cb:16:b3:4f:
                    39:ec:eb:d6:85:44:68:a1:f3:08:15:1b:01:66:09:
                    1d:ea:80:e3:2c:e9:27:82:06:7a:6d:dd:89:af:b1:
                    51:36:b0:ac:b7:4e:ed:de:c6:de:c8:18:66:43:28:
                    68:5b:0f:8b:ab:27:15:94:68:74:87:4c:30:4e:50:
                    7d:ee:d6:e6:b4:a9:a8:d1:9d:a0:06:00:27:74:7f:
                    76:47:f2:21:71:45:a2:13:6a:9c:1e:aa:b3:35:19:
                    2b:c8:a0:1a:e6:8b:ad:2c:fc:b3:b3:ad:6e:2f:85:
                    d1:60:91:1f:e9:0c:49:b4:5f:8f:76:77:d6:4d:9f:
                    97:f1:08:90:39:52:95:c6:a3:36:7f:d7:72:1a:e9:
                    e9:a0:82:5b:8f:41:e6:2b:68:b3:de:d0:51:b3:d5:
                    f2:17:26:e6:77:bd:1a:ff:d7:aa:c2:91:f0:3f:18:
                    86:e9:73:50:91:39:97:b4:5b:f5:ab:ac:53:bb:63:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:1C:B3:34:D0:8C:EB:FA:E2:7E:A8:1A:5D:B7:37:42:D1:3F:50
            X509v3 Authority Key Identifier:
                keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:92:27:44:f5:a7:4a:01:d5:74:31:d0:c0:3d:bc:61:89:98:
         cb:ae:1b:18:9d:48:b4:4c:fe:e6:94:42:21:f0:18:22:0a:81:
         4f:09:16:66:ff:14:84:2a:21:05:32:5f:c6:e3:b0:fe:c1:8b:
         71:ea:4e:23:dd:8a:ad:ef:50:b8:99:27:20:b1:74:f0:a0:99:
         ae:08:30:ba:a0:3b:64:64:54:ce:0f:0c:48:32:d5:17:37:d1:
         e2:3a:cd:c9:db:1f:24:70:0c:ab:61:4b:57:2b:b6:bd:c5:9e:
         c3:56:e2:91:71:68:45:40:a4:98:b8:12:3b:07:b3:cf:01:d1:
         2a:6d:65:8c:20:6e:df:0c:16:69:7b:a4:76:ae:2b:31:48:28:
         f4:fa:13:ef:7a:54:1f:88:cd:4c:76:0e:26:6e:ac:5d:9f:3a:
         8a:df:9c:cd:57:73:9e:ca:1c:14:f5:0f:6b:53:82:2b:f7:f8:
         30:40:af:56:b1:ca:29:f8:52:02:57:19:4e:b1:ef:64:ea:71:
         87:2c:f8:1e:74:22:3f:ae:fa:9f:dc:ad:82:c8:cf:bb:92:2e:
         87:12:37:b0:ce:4b:6f:c7:3c:dd:3c:f0:3a:cd:66:ef:70:e9:
         1c:90:3b:56:39:1a:f6:72:a2:fd:8d:ba:01:45:01:c1:30:44:
         ad:ba:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:06:10 2026 by rpki-client