Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          9Un9EhnG4xCQRZbRVzH1IFTzzkaHZg/+JhW2Cmjh6m4=
Subject key identifier:   BC:0E:BF:40:48:B0:B3:1F:F6:AF:F3:A7:7E:30:A2:2A:B6:D5:FF:61
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       01A029FD4C88001BA8DD779A442BD327C8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          19F6
Signing time:             Sat 22 Aug 2026 15:01:01 +0000
Manifest this update:     Sat 22 Aug 2026 15:01:01 +0000
Manifest next update:     Sun 23 Aug 2026 15:01:01 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: xStDwq3YMz16ZjeoikQEIo88zSyZl3ECK9C3f3EU7qc=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:fd:4c:88:00:1b:a8:dd:77:9a:44:2b:d3:27:c8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Aug 22 15:01:01 2026 GMT
            Not After : Aug 23 15:01:01 2026 GMT
        Subject: CN=bc0ebf4048b0b31ff6aff3a77e30a22ab6d5ff61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:bc:ea:7d:8e:24:92:ae:fa:cc:f6:f7:9b:
                    fb:9e:aa:6a:be:90:fb:1c:f1:47:cc:11:0a:eb:89:
                    a5:7f:2d:17:47:33:4b:69:ef:a6:8c:c0:ab:1f:bc:
                    61:d2:6d:95:f7:10:01:c7:26:8e:ac:c8:4f:69:3a:
                    b8:4d:5e:85:47:9b:79:d4:1e:d9:43:07:d6:ac:d6:
                    6a:77:61:2e:03:b2:70:4a:3f:ce:57:11:dc:90:57:
                    f4:15:7b:b8:37:33:5d:ce:b6:3e:b9:cf:37:af:28:
                    69:36:3d:5a:23:8b:f5:08:0c:7c:c8:6d:93:4b:2c:
                    f2:11:26:a3:7c:f5:c1:87:dd:d7:a7:d3:44:db:2f:
                    f5:cc:e7:57:fd:4a:b8:cd:8c:8f:0f:e6:96:a8:4e:
                    74:d0:68:1f:f0:a3:be:3d:e1:40:12:b0:86:20:a8:
                    47:fe:24:7b:a7:3d:5a:95:b6:50:90:e0:59:cf:aa:
                    f1:b1:38:8a:3c:62:5e:9a:31:98:21:87:23:28:15:
                    fc:fb:eb:9f:f9:83:0b:a1:24:16:c7:40:64:ce:25:
                    44:12:10:47:96:ef:a9:b3:b6:40:b2:25:8e:e7:f7:
                    c4:72:75:34:dd:6c:b4:ce:f4:09:99:c6:dc:67:a2:
                    ed:78:ce:b7:53:e0:4d:a2:86:3d:28:5f:89:de:cb:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0E:BF:40:48:B0:B3:1F:F6:AF:F3:A7:7E:30:A2:2A:B6:D5:FF:61
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:e7:cd:16:62:df:04:a8:e7:e7:c7:18:b3:9e:d6:24:f9:
         dc:25:02:5d:d8:e3:f9:df:c3:56:eb:50:50:32:a0:91:26:48:
         fd:5f:50:90:32:fa:32:56:2a:c8:e8:7d:47:d3:02:81:0a:70:
         b8:a3:0b:a0:c3:49:6e:76:c6:6f:53:ee:aa:08:fd:65:19:37:
         0d:90:c5:12:48:24:dd:c0:44:d5:4f:a0:c4:1e:46:3c:54:91:
         ae:4d:ba:00:06:2d:65:0f:dc:19:52:aa:12:aa:cc:aa:1f:c1:
         64:51:a5:72:f3:78:9d:90:b8:57:ea:2c:e9:c3:93:05:b2:5a:
         3e:16:9d:54:9c:d7:c2:34:e3:b1:75:cf:63:65:10:38:16:96:
         ac:c4:a3:8e:af:4c:9e:5e:37:e9:79:d4:0b:d1:7e:f3:ce:bf:
         5d:3d:be:50:46:29:25:e4:24:b6:e5:4d:c4:e8:e6:43:77:c6:
         89:8e:22:25:75:fe:a2:05:80:33:e7:0d:47:0a:61:de:71:9c:
         6b:86:0f:79:41:fe:76:c6:8d:62:1e:d8:68:15:3f:20:40:0e:
         7e:76:11:51:80:11:c2:ad:24:42:91:6c:00:85:87:97:06:64:
         d6:80:cb:df:d8:bd:2a:cc:eb:d7:72:19:86:57:15:98:47:d1:
         f1:07:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:46 2026 by rpki-client