Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File:                     nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier:          1G6bycv3DDGpcxVm2TWPZoFANPRQVTUmy79aSDMOAsg=
Subject key identifier:   3E:0A:3E:90:AF:1A:DE:FE:34:36:54:5D:63:54:7E:3F:8A:E7:73:07
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       01A03A8334047B2912ADDD3CFFAF1E6670B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number:          0244
Signing time:             Tue 25 Aug 2026 20:01:12 +0000
Manifest this update:     Tue 25 Aug 2026 20:01:12 +0000
Manifest next update:     Wed 26 Aug 2026 20:01:12 +0000
Files and hashes:         1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
                          2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
                          3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
                          4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
                          5: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
                          6: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
                          7: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
                          8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: uHeOVSQ6fVYX2ESwgZSxdBPrt3tLaRkOM3t0mch3bC0=)
                          9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3a:83:34:04:7b:29:12:ad:dd:3c:ff:af:1e:66:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: Aug 25 20:01:12 2026 GMT
            Not After : Aug 26 20:01:12 2026 GMT
        Subject: CN=3e0a3e90af1adefe3436545d63547e3f8ae77307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:48:5e:f7:26:44:6c:37:42:a4:24:de:e3:
                    c6:08:e3:f5:35:69:af:5f:9f:0c:af:46:8f:4e:a9:
                    f1:83:48:d9:b3:35:37:a5:fb:0c:ea:84:81:c8:cb:
                    bb:fa:da:43:b5:b6:8b:d6:8f:00:84:82:fa:7f:bc:
                    c7:5f:16:7e:7a:d4:ae:77:67:6f:bf:21:6f:3a:c8:
                    8b:1b:04:a8:37:f1:58:b6:b5:24:49:af:6b:7e:47:
                    61:dc:3f:48:90:3e:3d:76:05:78:c3:6a:dc:1e:59:
                    37:64:6f:a1:ef:88:e5:17:71:02:f2:f1:a6:1f:5c:
                    2c:4b:6e:0b:b9:15:97:e9:72:ea:82:2e:72:b1:5e:
                    08:a4:b3:e1:74:6b:1b:c2:5d:35:dc:86:0b:bf:96:
                    e0:a8:ec:44:34:87:ed:f8:86:5d:a1:d2:4a:d3:ff:
                    d7:a5:f2:46:48:32:31:25:19:81:81:7b:fa:fb:ba:
                    62:a5:88:c3:67:29:b1:88:38:ac:a0:01:0d:04:06:
                    f7:ff:02:19:70:5f:25:ee:04:7f:66:71:a4:1f:3e:
                    38:9a:59:c6:59:dc:16:01:96:c4:ed:5a:d6:5e:7f:
                    40:71:bf:d1:75:93:d8:ba:02:23:3e:84:26:04:14:
                    e3:04:16:eb:4b:92:29:b8:69:e8:df:b0:d5:65:da:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0A:3E:90:AF:1A:DE:FE:34:36:54:5D:63:54:7E:3F:8A:E7:73:07
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:88:56:10:0f:14:b5:f8:69:6d:8d:d4:76:49:e1:61:54:
         7d:53:6d:f9:94:20:17:72:3f:b3:c4:0d:b2:e3:82:e6:eb:37:
         83:49:74:ba:b4:9c:8c:9a:3f:68:0d:c4:66:ba:22:6d:ee:9d:
         39:eb:85:bb:06:c8:9e:b5:a6:46:63:43:7e:00:c7:58:66:79:
         fc:a9:39:98:58:3c:38:5f:f4:2d:22:08:9a:97:f8:de:6b:b3:
         0e:a0:ff:7f:07:41:66:d1:93:65:3e:e0:be:f5:63:8b:a7:23:
         f7:20:24:4f:f4:90:a5:e1:e0:18:d0:e4:6b:b0:f9:93:1c:4f:
         3c:22:5e:0e:3d:d7:8d:ae:09:9a:cb:e6:cc:2e:45:cc:ef:d1:
         2a:d0:7d:41:ba:e2:d0:64:84:3a:1f:2a:4a:fc:7a:6a:13:6c:
         9a:b0:5b:b4:d9:33:07:ba:2b:e4:e0:39:65:ba:c8:cb:de:04:
         46:d2:f6:5e:6b:0d:8f:87:eb:cd:0f:66:13:d2:bf:c6:e6:e3:
         0f:a9:58:8b:ea:36:d1:aa:59:82:fc:2d:81:aa:b2:0a:58:47:
         a3:02:d9:1f:25:76:d8:32:7a:63:f6:1f:ee:5e:da:0a:a3:57:
         30:03:22:cd:59:68:05:1b:29:95:91:87:ae:46:f2:25:e4:99:
         25:64:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:32:49 2026 by rpki-client