Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File:                     nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier:          Gw1I7GZA/rV7ipIzsxBTP1fYAjWc0AX1g/b5xp1kS9k=
Subject key identifier:   C0:70:3C:60:2A:4B:7C:DF:C4:ED:5E:F5:3F:0D:AC:A3:7B:22:86:96
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer:       /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial:       01A0A001FD6480200E960AE6DAF6D21FE4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number:          1288
Signing time:             Mon 14 Sep 2026 13:01:19 +0000
Manifest this update:     Mon 14 Sep 2026 13:01:19 +0000
Manifest next update:     Tue 15 Sep 2026 13:01:19 +0000
Files and hashes:         1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
                          2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: bviS92l11gqgunyGu0RXERKeXqgEapVoSD3plDuYE1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a0:01:fd:64:80:20:0e:96:0a:e6:da:f6:d2:1f:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
        Validity
            Not Before: Sep 14 13:01:19 2026 GMT
            Not After : Sep 15 13:01:19 2026 GMT
        Subject: CN=c0703c602a4b7cdfc4ed5ef53f0daca37b228696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:42:dc:f2:2b:6d:86:ec:25:f7:b0:5e:26:
                    b9:82:54:13:22:e0:44:a3:59:6a:ae:ea:62:bd:87:
                    78:89:5d:14:de:55:51:10:39:d5:d6:c5:63:d0:82:
                    88:54:61:1e:12:a7:a4:a0:b9:bf:3b:29:ef:af:d5:
                    7d:27:f6:b1:7e:2e:84:39:a4:ef:36:ad:98:f3:8e:
                    84:81:c6:3d:84:a4:54:c5:1b:16:3d:6a:70:68:a5:
                    f1:21:43:ee:f2:ca:8e:f9:4b:eb:7e:18:22:ab:f1:
                    42:12:29:7c:45:79:3c:b5:d2:f4:06:40:4d:53:b2:
                    dd:51:a7:55:0e:52:03:58:b9:9d:aa:e4:3a:44:92:
                    a7:52:e9:38:e7:ac:65:3b:0d:ce:b6:52:14:b4:bf:
                    a2:03:33:f4:34:c7:ce:9f:21:41:92:aa:53:71:24:
                    96:2e:43:c6:1c:80:96:ad:c6:72:35:8e:5b:da:62:
                    e0:60:91:1e:62:b8:08:00:ee:60:fc:48:bf:98:29:
                    d3:7c:c6:42:c3:09:fe:3d:08:c5:ff:0f:ed:ed:ca:
                    af:58:dd:09:9a:0a:d6:1a:4f:97:19:11:81:a1:15:
                    d4:19:3d:95:3a:88:93:bf:7d:51:5e:3a:8c:20:48:
                    13:01:5c:cc:f5:23:d0:b1:c8:a2:35:2c:62:e7:18:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:70:3C:60:2A:4B:7C:DF:C4:ED:5E:F5:3F:0D:AC:A3:7B:22:86:96
            X509v3 Authority Key Identifier:
                keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:f9:16:05:bd:00:02:eb:9f:30:a4:3f:01:8b:fb:ca:41:
         b8:56:91:00:b0:b3:3e:a4:bb:05:10:e0:33:e2:40:6b:f7:40:
         f0:57:8f:77:a8:ce:04:80:2e:a4:7e:38:a0:31:17:c0:00:18:
         2d:2d:3d:dd:df:49:ba:8e:0f:60:16:01:8e:85:28:3b:31:7b:
         28:5a:ee:22:57:03:27:f5:02:3b:3c:11:20:0f:f7:7d:07:cb:
         0b:05:7c:e7:e8:e3:97:48:f2:4a:dd:34:b2:1c:18:1d:58:bb:
         ff:32:22:53:c6:65:19:79:11:bb:bd:50:0d:49:82:8f:56:a6:
         8b:93:d7:95:08:45:12:33:e5:9a:ad:b0:55:07:63:1b:f3:06:
         2e:14:27:e0:5e:10:e6:eb:9f:8d:00:dc:03:35:00:e9:b1:89:
         e3:e2:c4:0e:68:a6:eb:9f:0a:64:5e:43:fc:98:1b:57:46:72:
         ef:5a:c1:29:c9:2a:d3:0d:11:0d:e7:92:f9:0b:eb:e1:f7:f0:
         c9:82:23:d6:6d:7d:1b:a1:08:e7:88:73:49:d6:9d:e1:91:c7:
         b0:09:51:26:5c:7a:17:b4:21:3a:1a:e8:2f:fd:15:ef:76:17:
         57:dd:d2:e5:4b:03:42:56:06:ab:54:6b:b3:7c:62:9e:35:21:
         9e:33:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 16:22:09 2026 by rpki-client