Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          ytyW4iK+89y/aIQgaaUCE8/lvC+YACZA1chU2kRKlZc=
Subject key identifier:   1F:47:DE:95:20:91:29:D1:25:0B:AF:1A:C6:2E:33:E8:68:7B:03:E4
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       01A08ED758987F45970D9A0DAC2BEE4BE926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          056F
Signing time:             Fri 11 Sep 2026 05:01:12 +0000
Manifest this update:     Fri 11 Sep 2026 05:01:12 +0000
Manifest next update:     Sat 12 Sep 2026 05:01:12 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: XiJ4eY1xwA3V+Q/ZJl7146QKvwyRUiAw6MosUn7rz+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:d7:58:98:7f:45:97:0d:9a:0d:ac:2b:ee:4b:e9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Sep 11 05:01:12 2026 GMT
            Not After : Sep 12 05:01:12 2026 GMT
        Subject: CN=1f47de95209129d1250baf1ac62e33e8687b03e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:f4:06:58:b6:f1:6b:7b:e3:7b:00:bc:22:
                    c7:b2:fa:83:46:77:a4:7f:44:d5:21:e3:fc:7c:c4:
                    3d:43:96:38:2b:e4:c7:e5:de:47:77:bf:25:bb:d0:
                    8d:57:e5:8e:05:4e:75:fc:57:73:f5:6d:e1:d6:c5:
                    d6:60:56:41:17:5a:30:f1:6a:c8:f8:18:ba:14:bd:
                    a3:24:48:ce:9f:34:4d:9d:79:f6:f3:01:ba:df:e7:
                    6c:e0:e0:6f:db:29:7c:4e:32:eb:97:c4:ec:6c:b0:
                    d7:16:20:cf:ba:e4:d5:87:b7:3d:53:65:56:55:a8:
                    e7:da:f6:27:8a:71:54:e3:d6:c2:f9:4e:ec:b6:1a:
                    f9:e0:25:6f:e1:cc:2b:93:ee:be:e8:96:b1:df:aa:
                    a4:06:34:fb:19:01:93:1c:b6:e4:80:6e:a9:ab:a7:
                    1f:58:82:4c:57:3c:33:e2:53:59:d5:4c:4f:be:a9:
                    19:3e:ac:be:ae:7f:00:47:67:0a:48:88:6c:24:b5:
                    1a:b2:ec:39:e4:e0:1b:a7:b7:eb:fa:e2:85:5c:01:
                    14:a8:01:26:1b:9b:ea:9f:01:2f:d0:1c:e7:0f:87:
                    58:22:aa:8a:51:13:4e:57:0a:8c:8c:e4:5b:53:a1:
                    a2:17:6f:db:29:8a:b2:1f:af:c9:79:7a:00:bd:c9:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:DE:95:20:91:29:D1:25:0B:AF:1A:C6:2E:33:E8:68:7B:03:E4
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:59:a4:22:a6:ca:a5:f3:b9:5c:f6:d3:34:ca:9f:b1:73:
         99:10:b1:ee:32:ae:ef:db:9a:3f:6a:a0:35:05:8e:23:18:97:
         85:a2:8e:40:f7:b2:1f:33:6d:3e:05:8f:df:f0:e3:62:e8:a5:
         99:67:5a:57:ff:79:6a:be:f0:e8:e5:2e:52:b4:04:03:59:54:
         43:35:c1:bc:93:7d:24:5a:0c:8d:7d:ab:ab:16:90:24:15:23:
         63:12:05:c3:5d:cb:dd:a4:fd:64:a0:84:15:9e:56:d2:ee:ed:
         8d:7a:39:0b:85:ad:e5:a9:af:20:54:70:d8:5d:e0:8e:03:43:
         99:39:ac:f4:e8:d6:af:02:80:67:7c:e1:54:be:13:5d:4d:c4:
         61:77:8c:c4:d6:3f:12:0e:d1:54:93:c6:48:5e:79:f3:0e:71:
         3d:ed:2b:0f:db:b7:df:b2:3a:ba:e4:6c:83:57:a9:46:2f:45:
         64:78:9a:93:3a:1a:50:b2:c0:c2:71:c8:e8:30:56:a5:b6:f5:
         5d:19:38:2f:6c:94:65:c2:cd:5b:a7:73:ec:af:20:a8:45:6e:
         67:68:9f:e2:e3:fd:db:35:39:f1:bb:6b:30:1c:1d:09:26:50:
         ef:af:e9:9c:0f:ab:fc:c4:ff:1e:1d:21:a5:65:95:2b:d4:7a:
         9b:1a:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:25:48 2026 by rpki-client