Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File:                     nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier:          nDieptMRmuKaoCVorsXKdQEtq2eDwQ6gLP1V93n3jkk=
Subject key identifier:   A0:72:F5:1E:48:63:44:06:55:25:09:AE:7D:E1:C2:60:16:01:50:D3
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer:       /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial:       01A0024AA4FEA5608809B92CFE504B1029F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 22:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:41 +0000
Files and hashes:         1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
                          2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: 61bVNkPZ7CupcSGkIR57XIMYk5YjF0mSYFUyAFhRLm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:a4:fe:a5:60:88:09:b9:2c:fe:50:4b:10:29:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
        Validity
            Not Before: Aug 14 22:00:41 2026 GMT
            Not After : Aug 15 22:00:41 2026 GMT
        Subject: CN=a072f51e48634406552509ae7de1c260160150d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:bc:24:5c:dd:f0:e1:7b:2b:fa:6b:bc:1c:
                    e7:3e:69:40:e7:93:67:d1:f7:0d:6c:01:95:99:3a:
                    17:45:44:28:f1:cf:cb:d4:da:5c:58:2a:30:34:e2:
                    3c:a6:df:bd:7c:f7:71:6d:31:5f:54:07:86:ff:53:
                    f4:aa:4b:29:53:a1:46:13:84:01:23:4f:0e:77:d5:
                    33:a8:ce:7d:2a:cf:bf:8c:97:a4:4b:90:27:81:ca:
                    ec:37:2c:88:21:85:99:7a:95:39:f1:f6:e1:27:d2:
                    fb:eb:23:a2:41:91:5a:ba:ce:c2:b4:2d:95:98:08:
                    61:67:34:0d:83:56:fe:03:2a:21:ce:12:b5:97:94:
                    ef:f5:c9:96:bd:6c:1f:30:74:40:ab:a6:73:70:24:
                    cc:1e:e9:d3:50:96:cb:39:c6:de:94:bf:07:7c:13:
                    4f:92:62:94:46:03:c7:76:64:8f:d7:9a:f7:b2:d8:
                    b8:50:b3:fb:49:0d:63:54:12:bb:2c:a8:8b:d1:8b:
                    b6:8c:85:7e:70:bd:1f:57:1f:a6:21:3f:d0:45:7a:
                    af:dd:63:b4:cf:cf:48:08:57:55:fa:ae:3f:56:31:
                    d1:0f:27:72:c0:9d:a4:46:9a:29:fe:16:84:07:1c:
                    85:37:90:4a:91:12:18:9c:45:1c:b8:e8:5a:7b:2e:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:F5:1E:48:63:44:06:55:25:09:AE:7D:E1:C2:60:16:01:50:D3
            X509v3 Authority Key Identifier:
                keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:81:90:03:06:30:66:2e:ad:9c:e0:0a:b3:26:52:4f:84:7d:
         a9:ed:32:f3:0e:fe:43:b5:4c:65:e3:07:61:80:06:a1:93:d4:
         c3:e3:f5:8a:a0:60:55:6f:71:e7:6e:8b:28:40:50:da:9a:41:
         f9:b5:e0:b6:58:0f:1e:80:b2:03:1c:b5:45:cd:07:34:f5:22:
         11:48:5b:0b:fb:f7:02:d9:c4:7f:dc:11:aa:c2:df:b9:e4:81:
         42:57:33:4e:2f:09:74:2f:8a:b3:39:fb:bb:f4:e1:79:5e:4b:
         ff:18:88:c5:b9:31:b6:b3:4a:ed:da:18:91:31:65:ea:09:a5:
         56:bc:12:0e:64:d8:56:1b:a6:dc:21:c7:3a:9f:3b:23:32:35:
         0b:33:a1:70:fc:2f:47:56:f9:1e:64:39:c4:ff:a0:aa:12:63:
         ec:2d:32:03:45:07:0b:68:af:d3:2b:9a:ae:af:51:0f:4e:9f:
         e5:a6:b1:3e:9b:27:e4:76:0d:d3:76:92:29:7d:ba:f7:c5:56:
         ae:34:af:bc:3b:0a:5a:df:c0:81:52:1b:09:14:76:06:d6:89:
         3e:17:37:9b:ae:6f:8d:cc:0c:a6:af:44:eb:b2:13:55:2d:73:
         d0:4c:95:84:68:d3:19:1d:6f:2f:35:bf:d2:8f:cc:a5:7d:a0:
         f8:57:00:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSqT+pWCICbks/lBLECn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjYwODE0MjIwMDQxWhcNMjYwODE1MjIwMDQxWjAzMTEwLwYDVQQD
EyhhMDcyZjUxZTQ4NjM0NDA2NTUyNTA5YWU3ZGUxYzI2MDE2MDE1MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjm8JFzd8OF7K/prvBznPmlA55Nn
0fcNbAGVmToXRUQo8c/L1NpcWCowNOI8pt+9fPdxbTFfVAeG/1P0qkspU6FGE4QB
I08Od9UzqM59Ks+/jJekS5AngcrsNyyIIYWZepU58fbhJ9L76yOiQZFaus7CtC2V
mAhhZzQNg1b+AyohzhK1l5Tv9cmWvWwfMHRAq6ZzcCTMHunTUJbLOcbelL8HfBNP
kmKURgPHdmSP15r3sti4ULP7SQ1jVBK7LKiL0Yu2jIV+cL0fVx+mIT/QRXqv3WO0
z89ICFdV+q4/VjHRDydywJ2kRpop/haEBxyFN5BKkRIYnEUcuOhaey79+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBy9R5IY0QGVSUJrn3hwmAWAVDTMB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIGQAwYw
Zi6tnOAKsyZST4R9qe0y8w7+Q7VMZeMHYYAGoZPUw+P1iqBgVW9x526LKEBQ2ppB
+bXgtlgPHoCyAxy1Rc0HNPUiEUhbC/v3AtnEf9wRqsLfueSBQlczTi8JdC+Kszn7
u/TheV5L/xiIxbkxtrNK7doYkTFl6gmlVrwSDmTYVhum3CHHOp87IzI1CzOhcPwv
R1b5HmQ5xP+gqhJj7C0yA0UHC2iv0yuarq9RD06f5aaxPpsn5HYN03aSKX2698VW
rjSvvDsKWt/AgVIbCRR2BtaJPhc3m65vjcwMpq9E67ITVS1z0EyVhGjTGR1vLzW/
0o/MpX2g+FcAsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:08 2026 by rpki-client