Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File:                     nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier:          pmR2dv0v1PRo4GDayB3zibwevrt/tvEp9Arh3Ullzqg=
Subject key identifier:   56:5B:8B:9D:E7:D2:CC:D9:E1:3B:1D:9F:0B:F9:38:FF:93:3B:2C:83
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer:       /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial:       01A11260B9AC2A8549EE90CB99AEDDFB2731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number:          1415
Signing time:             Tue 06 Oct 2026 18:01:30 +0000
Manifest this update:     Tue 06 Oct 2026 18:01:30 +0000
Manifest next update:     Wed 07 Oct 2026 18:01:30 +0000
Files and hashes:         1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
                          2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
                          3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
                          4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: Ltt/4piKTAVEj87+6cuVd0BOAZ8ci80H35x7VrtNtXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:60:b9:ac:2a:85:49:ee:90:cb:99:ae:dd:fb:27:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
        Validity
            Not Before: Oct  6 18:01:30 2026 GMT
            Not After : Oct  7 18:01:30 2026 GMT
        Subject: CN=565b8b9de7d2ccd9e13b1d9f0bf938ff933b2c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:29:bc:a0:d5:e1:bd:72:f7:56:e7:9d:c1:
                    b3:64:47:0c:66:e4:16:72:27:c1:27:f7:45:1f:aa:
                    b0:19:2d:d8:ad:e1:ce:fd:b7:89:4e:9b:ce:48:53:
                    9f:ef:01:3a:21:8d:df:17:5b:31:78:7b:8a:8d:ad:
                    34:b3:4d:5f:24:a4:12:cd:47:86:c0:f8:b9:40:46:
                    21:21:dd:6e:42:23:ab:d2:7d:42:13:09:1c:3d:95:
                    e2:5e:c8:5b:0b:70:64:81:1a:42:c3:ca:3f:8d:e3:
                    bd:79:3d:57:6a:0f:a2:ad:4f:d2:c2:95:bf:36:13:
                    98:de:d5:fa:7b:8e:9f:7a:13:9c:92:26:15:2a:f9:
                    a1:9e:7b:fa:b4:d4:33:a7:2d:8d:d4:e0:aa:05:d0:
                    99:bd:36:fc:e8:e9:26:e7:51:e8:fc:02:c6:7d:9b:
                    55:e1:f6:6f:d1:e3:64:5c:6d:3c:64:da:85:11:94:
                    a9:dd:20:08:41:3d:6d:26:f1:62:6d:b1:0b:95:38:
                    ce:5a:ba:c7:85:37:b1:80:6a:a4:c7:a5:4b:d0:80:
                    97:73:bd:f4:48:ce:c6:f0:06:e4:fb:11:92:f2:09:
                    a4:17:5e:9c:c8:6a:cb:c0:c3:ae:75:e7:69:a3:5c:
                    dc:00:b0:25:64:9b:21:16:da:e0:74:cb:c4:7b:24:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:8B:9D:E7:D2:CC:D9:E1:3B:1D:9F:0B:F9:38:FF:93:3B:2C:83
            X509v3 Authority Key Identifier:
                keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:36:ed:fa:0a:40:92:1b:72:11:f4:c7:3d:c3:d2:9d:f9:9e:
         8c:09:a4:d7:85:f9:f8:a7:9f:56:84:3c:40:0e:df:56:f0:1e:
         b9:d2:1d:b2:da:a6:98:dd:7e:85:26:e9:db:b9:8d:b0:19:44:
         41:30:3b:4a:89:42:96:f7:75:56:5a:c6:73:77:f6:d7:9d:ff:
         71:df:81:89:85:c6:ca:55:54:07:d0:64:2e:fd:9c:43:5a:8b:
         9e:40:d4:5d:79:fa:b7:dd:5b:2c:7b:20:80:31:be:71:c0:61:
         15:33:ad:bd:d5:5c:10:9b:20:22:f8:de:c5:2c:d6:57:8c:ee:
         81:af:07:92:9c:6f:d6:43:7f:98:6c:26:c0:e6:f4:f8:9f:c3:
         a2:e4:86:1d:7c:66:7f:1c:5f:16:6a:47:55:b9:c6:6a:69:5b:
         f0:3f:a9:71:a2:6a:1d:bb:59:70:99:5d:9f:f0:96:93:de:32:
         e5:85:a0:e8:59:2d:5e:a0:8c:47:c0:80:ef:c2:7f:8f:be:bd:
         9c:67:4b:09:65:f7:31:52:c4:09:1f:1f:a3:36:7b:da:8f:27:
         6f:33:0c:45:52:5c:cd:5b:bf:00:0f:95:a3:19:73:88:62:1c:
         a7:b4:6e:d4:96:7f:63:bc:eb:31:30:91:0f:1f:0c:3e:96:59:
         2c:f4:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:07:39 2026 by rpki-client