Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          BLMlejs5hOitj5N1yD2BNWCOE9V+qpXaRt+ekYhCLbE=
Subject key identifier:   EA:57:D1:0A:49:3B:7A:00:24:95:46:B9:9C:79:E7:A5:1B:09:38:C0
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       01A08AC37444601B161A8460082DED3296E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          1A56
Signing time:             Thu 10 Sep 2026 10:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:59 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: UKXUv2dT/OhD7Kj32gJ67FOIi4UxnhQLBycPUUyBhFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:74:44:60:1b:16:1a:84:60:08:2d:ed:32:96:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Sep 10 10:00:59 2026 GMT
            Not After : Sep 11 10:00:59 2026 GMT
        Subject: CN=ea57d10a493b7a00249546b99c79e7a51b0938c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:c2:49:f2:6c:e7:55:9a:41:d4:c5:d2:c2:
                    b2:76:ad:a5:e9:23:f5:20:ad:5c:53:6e:fd:80:66:
                    82:bb:1b:5d:95:8d:ed:f9:2e:ab:7e:f1:d6:9c:8c:
                    56:9b:fd:f8:70:7f:62:51:3f:6a:1a:28:7e:49:4f:
                    53:d0:45:1e:9f:a1:02:80:b7:71:6a:69:63:68:4e:
                    39:21:55:61:c0:10:34:a2:aa:ff:1e:47:59:5b:45:
                    b3:1a:5d:72:a9:d8:bd:72:e6:89:0a:a7:58:60:78:
                    d8:08:07:89:16:ca:09:5b:d2:34:9a:17:d6:b8:64:
                    36:ff:1f:1b:5b:6e:bf:b9:56:a7:12:be:dc:39:e8:
                    15:a3:a5:21:6d:57:2b:a8:8d:b0:60:4a:38:8b:3d:
                    91:2b:cb:9f:84:37:dc:4e:28:6e:c4:7d:b2:09:93:
                    8a:66:5a:6e:4c:eb:f0:33:87:6a:c4:83:59:82:9f:
                    c3:f0:7a:b0:e9:0b:9d:24:9f:08:c5:77:b1:b0:69:
                    10:e2:f5:3e:62:07:f8:90:98:ea:63:89:f5:25:96:
                    e2:f3:90:cc:60:2d:d3:81:62:83:49:79:0e:3a:94:
                    84:11:19:aa:e6:5e:9a:7d:b8:36:4d:96:b8:8f:e9:
                    f4:d6:db:db:cd:4b:73:a9:fc:08:24:ad:f6:ad:68:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:D1:0A:49:3B:7A:00:24:95:46:B9:9C:79:E7:A5:1B:09:38:C0
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d7:0e:91:91:5b:84:6a:ac:33:58:e1:22:1a:7c:82:c0:8e:
         0c:cb:bb:54:72:24:fa:14:43:59:77:d8:28:66:2a:2a:27:6a:
         67:f2:25:8a:d6:88:2b:eb:5c:f5:82:3c:6a:ad:93:f1:54:f5:
         dd:13:df:3a:65:a7:b2:2a:d3:f8:7b:27:92:7c:56:47:4a:8d:
         c1:8b:a5:2b:fc:5e:3c:5c:19:52:9f:9a:3f:12:09:0b:42:09:
         d2:49:c6:7e:09:1d:59:c5:01:3b:43:46:10:e7:37:5d:da:08:
         63:e1:a7:d3:fe:54:ad:3f:d5:4c:bd:c9:b6:69:4e:62:a9:2d:
         8e:09:8e:37:02:6b:17:a2:6e:01:2a:58:f3:dc:bb:be:3c:33:
         03:c8:71:7d:ec:84:52:b3:83:79:7a:b5:92:58:13:8b:cc:9b:
         c9:4e:24:97:9a:5a:8a:3a:3a:92:c3:3b:29:c7:d6:6d:ff:a9:
         2a:94:4f:8c:b3:08:96:92:84:02:2e:39:19:fb:51:8f:02:79:
         67:b8:3f:dc:3e:5b:b4:15:95:4a:bc:7a:bf:16:33:38:30:fe:
         35:a8:f7:4e:cc:e1:5b:f6:27:fc:d8:21:2b:46:97:20:7e:20:
         10:32:63:eb:50:82:44:99:81:3a:0d:63:44:7d:dd:0b:e8:8b:
         40:d9:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:35 2026 by rpki-client