Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          a9GAOcU5IDJhnOglcFmYX7VIwElgrsjTA8fK5Y5s9e8=
Subject key identifier:   08:F0:86:09:09:E3:8F:69:D1:90:FA:33:6F:68:54:D0:1F:2B:7A:9A
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       01A15B8C1D29C5156D3419951339243C163A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          0D83
Signing time:             Tue 20 Oct 2026 23:01:11 +0000
Manifest this update:     Tue 20 Oct 2026 23:01:11 +0000
Manifest next update:     Wed 21 Oct 2026 23:01:11 +0000
Files and hashes:         1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
                          2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
                          3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
                          4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
                          5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: IdI+xV8TS65ygzAgRF0ekQ16XuofmvdzlkV343XPDl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:8c:1d:29:c5:15:6d:34:19:95:13:39:24:3c:16:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: Oct 20 23:01:11 2026 GMT
            Not After : Oct 21 23:01:11 2026 GMT
        Subject: CN=08f0860909e38f69d190fa336f6854d01f2b7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:6d:d6:06:c3:ee:36:aa:53:44:4b:d4:61:
                    24:02:c5:8a:a9:c5:ae:b5:3d:68:00:0e:76:c7:60:
                    c7:67:59:46:cf:dc:2c:06:a4:47:4e:27:c0:d1:d6:
                    6c:41:a7:da:50:58:5f:40:9a:33:be:83:8b:c8:41:
                    6d:ed:e9:3b:cf:13:08:90:c9:c2:b2:3c:73:b0:75:
                    ba:47:2c:5a:b2:6a:36:93:eb:b2:2c:9d:45:3f:b8:
                    df:53:0a:ea:60:a6:79:50:09:99:e8:f3:53:ef:b8:
                    1b:79:cc:fe:ff:04:c1:0f:1c:be:66:92:df:0a:d5:
                    a7:d6:8a:c3:de:62:d9:de:14:62:4e:ae:da:a4:ef:
                    8c:46:31:6f:4d:11:1b:e1:89:9a:ef:94:62:fe:f2:
                    0c:a6:c9:37:27:a6:d2:83:f7:b8:01:d7:9b:a4:5e:
                    07:93:a8:2a:2c:cd:15:66:40:3d:93:d9:08:a5:f4:
                    62:61:e4:2d:92:75:6c:42:5a:03:12:ea:14:d8:79:
                    b1:b6:49:36:cf:e7:c9:59:21:c0:7b:25:27:02:71:
                    b7:9e:1e:74:42:65:cc:4c:1a:40:07:75:6f:c9:42:
                    38:8f:f1:b3:cf:92:48:99:a5:9e:60:c6:00:02:6d:
                    0e:91:ed:c7:c8:4a:07:b3:37:d2:07:1f:8d:b1:1e:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:86:09:09:E3:8F:69:D1:90:FA:33:6F:68:54:D0:1F:2B:7A:9A
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:cb:22:4a:2f:07:2e:27:55:15:c2:2e:bd:bc:38:88:c6:
         f4:57:f3:a5:80:02:78:4c:ac:17:50:d9:93:98:28:02:f5:5c:
         d2:fd:97:f7:cd:72:71:de:35:13:62:07:5d:43:7e:c6:ca:3b:
         d9:a7:80:f8:a4:3a:53:dd:d6:88:91:79:62:05:bb:2d:c1:35:
         8f:1b:c4:d0:67:8f:58:b9:8c:26:a5:6f:e5:6d:cd:04:83:32:
         40:e9:1d:40:c0:8d:b0:46:ce:f4:2d:4a:04:08:a3:06:17:5f:
         ae:83:6b:f3:bd:d6:42:f2:54:98:f8:06:ec:6b:eb:cd:29:5d:
         cb:41:de:52:61:7d:29:6f:d2:8c:80:bf:85:4a:75:67:33:85:
         e0:29:0d:54:dd:5b:ed:0d:47:8d:12:69:2c:6a:c8:6c:90:de:
         4c:15:b6:5a:6c:35:54:c4:01:5c:61:51:45:5d:0d:54:d4:ed:
         52:c7:ff:0c:c4:7f:7a:76:bf:1a:e6:0c:a9:ed:e3:67:9b:0b:
         a7:99:d5:39:83:e1:4a:0b:8a:d6:34:5f:8c:75:ae:20:3c:3a:
         c6:92:e1:21:63:3f:6f:7f:2e:a7:aa:59:59:b6:5f:2c:7c:59:
         cb:9e:f1:cf:15:96:f6:b4:18:b0:e9:97:13:e5:0d:ce:ce:35:
         90:10:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:40:08 2026 by rpki-client