Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File:                     nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier:          QdFvjYEXEgbzNPPfR3TNKHUds+vQmno3cM5iYeTMk2E=
Subject key identifier:   E0:5C:5A:5F:DE:F9:C1:5B:E7:37:21:41:BC:9A:2E:1D:7B:BC:30:1A
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer:       /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial:       01A03C71296861B9B43A1F4DFE3548402A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number:          019B
Signing time:             Wed 26 Aug 2026 05:00:44 +0000
Manifest this update:     Wed 26 Aug 2026 05:00:44 +0000
Manifest next update:     Thu 27 Aug 2026 05:00:44 +0000
Files and hashes:         1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
                          2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: i/3GjdN22BLkVm6WNQavnN7gylL1H6kntr9jXRWotZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:71:29:68:61:b9:b4:3a:1f:4d:fe:35:48:40:2a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
        Validity
            Not Before: Aug 26 05:00:44 2026 GMT
            Not After : Aug 27 05:00:44 2026 GMT
        Subject: CN=e05c5a5fdef9c15be7372141bc9a2e1d7bbc301a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:bf:88:51:83:28:50:62:cb:f7:fd:e3:cd:
                    ad:6e:ff:38:8b:de:2d:24:9c:d9:22:e8:f2:8f:5d:
                    18:e5:e3:45:d9:b7:15:e4:9e:ec:08:9e:9b:af:07:
                    89:cc:db:4b:df:2e:41:67:2a:62:f2:e6:ad:3d:0a:
                    94:94:68:3f:36:36:4d:ef:4b:48:56:0a:69:03:46:
                    03:15:3a:93:66:cd:84:3b:a3:33:46:3b:eb:6f:59:
                    8e:9d:51:c7:e3:f5:2b:85:db:39:ad:fc:69:b5:9a:
                    91:6d:6a:2f:1d:e3:47:9d:a1:3f:eb:5d:1c:05:23:
                    ca:b8:87:2d:cb:ce:d5:1e:fb:ef:cc:70:4d:1d:6f:
                    d8:68:dc:fe:8b:89:6e:34:83:32:a7:a8:d9:c4:38:
                    08:fe:eb:64:02:05:de:b8:c0:61:f3:ae:3f:e1:85:
                    e3:40:ed:d8:f0:69:bb:50:b7:87:e1:96:91:1f:79:
                    3f:99:c4:f0:a1:e2:6c:33:13:0a:d9:3e:3d:e5:db:
                    de:b2:55:91:f9:66:2e:b9:5f:4d:fb:4f:3d:1d:fa:
                    e0:f6:a0:ac:35:6f:50:59:cf:b5:93:83:f7:ce:69:
                    e9:b4:54:7c:1c:7d:7c:53:7e:e8:02:1c:82:ff:24:
                    52:29:5d:11:9c:df:b7:ab:ac:bd:ff:52:51:a3:f9:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5C:5A:5F:DE:F9:C1:5B:E7:37:21:41:BC:9A:2E:1D:7B:BC:30:1A
            X509v3 Authority Key Identifier:
                keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:c0:f7:97:69:41:d3:67:dd:8f:5a:cb:fa:63:41:69:a7:
         8d:40:67:a3:d6:37:d2:65:88:d8:30:5d:67:48:c8:06:ef:23:
         e8:69:83:a0:9f:da:f5:93:5b:91:c1:cd:42:6b:4d:0a:2c:93:
         24:57:e8:1a:ca:8b:a1:f5:f9:ea:22:cb:0b:fd:5f:14:46:f7:
         7e:d1:5b:d6:86:c2:dd:70:34:ec:dd:44:45:11:64:46:e0:a1:
         1d:bd:af:0e:7a:be:6d:ee:08:1f:7d:e1:07:6b:e7:8f:5f:6c:
         ce:67:04:30:6d:d2:60:f2:1b:ce:29:b2:ad:05:88:2e:c3:9d:
         47:1e:c2:d4:15:60:36:80:80:22:6f:4d:21:92:e8:6d:f1:6c:
         26:0b:5a:2c:81:e3:6b:9f:50:42:f9:6d:5b:80:65:98:90:4b:
         dc:ac:7d:df:76:93:84:69:d6:c2:c9:12:2a:33:d1:fe:96:3e:
         e3:da:fb:a2:1f:f0:d3:12:23:ca:69:5c:dc:e5:91:0b:5e:a6:
         b3:dc:36:53:f7:9b:16:00:4b:00:ec:53:6a:d2:f9:0d:29:1a:
         46:7e:b2:6e:65:6d:5b:13:fc:70:8c:4e:ed:48:53:1d:fc:5f:
         84:04:75:3a:b0:ed:22:42:2d:75:0f:a9:df:1a:db:34:2c:8a:
         60:f8:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:04:43 2026 by rpki-client