Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          2axKxcZ7Pyc1xLrHj2oHtmJBx8tWtR5KJ/1n90TXddg=
Subject key identifier:   52:02:2F:03:1C:E4:39:27:2D:D8:49:0B:29:E2:3C:D5:B9:61:9F:CD
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       01A178BA76A466CF765CC004C71FF5208556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          07CC
Signing time:             Mon 26 Oct 2026 15:00:48 +0000
Manifest this update:     Mon 26 Oct 2026 15:00:48 +0000
Manifest next update:     Tue 27 Oct 2026 15:00:48 +0000
Files and hashes:         1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: sEDn5d9thG2i+fXxPsAlpuXs0nQ9deDPUiPJlXRt+6Q=)
                          2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:ba:76:a4:66:cf:76:5c:c0:04:c7:1f:f5:20:85:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Oct 26 15:00:48 2026 GMT
            Not After : Oct 27 15:00:48 2026 GMT
        Subject: CN=52022f031ce439272dd8490b29e23cd5b9619fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:f1:62:92:88:94:23:41:15:a6:85:5b:d1:
                    c0:32:75:a6:9f:9e:5e:d9:87:77:f8:4f:5f:63:c7:
                    30:f4:71:30:e7:2e:23:f2:3f:5f:7d:08:cf:cb:47:
                    1e:69:cb:7e:22:0e:25:aa:65:c7:9c:a1:13:ab:81:
                    ab:df:fd:49:38:c2:50:d1:31:35:89:8d:56:20:dd:
                    47:bb:20:d4:6c:bf:89:b3:c7:ab:11:05:16:bf:bf:
                    a0:fd:a2:e7:7d:2c:02:9a:0e:a2:85:e8:d8:19:fa:
                    83:fc:3a:ce:31:f2:43:f4:33:03:e1:00:9f:97:84:
                    28:03:ab:3e:b9:7a:2e:ce:a3:27:f4:15:34:59:4a:
                    70:f1:31:59:21:20:2a:72:11:41:81:e8:92:55:83:
                    39:d1:e5:68:da:e8:6a:4f:c3:99:51:cf:fe:cf:4b:
                    0f:a2:00:60:68:a0:ca:e4:53:db:67:5e:b1:dc:e3:
                    77:4e:0e:1f:86:6d:bb:1a:23:60:c1:6a:f5:99:66:
                    3f:12:51:f9:24:89:46:0f:11:70:ee:6f:00:c2:fe:
                    ed:20:8c:ea:02:5b:f5:40:27:6c:94:0e:7c:68:7b:
                    e5:67:5b:de:cd:2f:50:0a:ff:36:c9:90:a4:87:af:
                    08:ab:04:6c:1a:3f:6d:eb:bb:7f:25:44:a1:bb:06:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:2F:03:1C:E4:39:27:2D:D8:49:0B:29:E2:3C:D5:B9:61:9F:CD
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:aa:ae:36:27:d9:55:d0:f8:3b:5b:a9:f6:d5:e4:fe:e1:
         f8:31:da:dd:45:c0:1c:b2:79:19:12:e8:39:98:d3:31:7f:4e:
         6a:1c:84:5c:e2:56:26:00:62:10:8f:a3:03:3c:94:89:fe:ba:
         d3:55:63:0a:fc:f5:aa:3c:b1:a6:6f:6e:6a:c4:2d:e6:3d:3c:
         d3:e7:7a:2f:cb:80:03:ae:53:dc:b6:01:be:e4:c4:7e:96:93:
         26:f7:62:61:23:0c:f2:b2:f6:4b:9e:cc:25:eb:3c:9a:7d:6b:
         79:a4:f8:82:57:8b:31:22:88:d6:8b:31:83:dc:93:4c:91:b7:
         1f:22:7c:b5:c2:98:38:f3:e9:0a:0e:a5:63:01:fe:3c:96:30:
         88:90:d8:8b:17:46:d6:cd:8b:9b:30:19:63:bc:83:40:c4:ad:
         5d:91:fc:59:45:2d:9c:de:d2:6b:4b:1c:51:2a:1a:fe:cb:92:
         d2:0c:32:49:e3:6a:6f:fb:ab:5e:bf:3c:57:75:a7:35:35:cc:
         2f:e6:bc:0d:a8:bb:a7:96:21:64:ec:e5:a2:a4:8c:28:fd:88:
         9f:87:f8:68:fc:b4:c1:ff:62:01:96:50:6b:3a:82:98:35:b5:
         cc:c6:a7:e6:19:13:28:3e:7f:ea:06:ee:7e:ae:39:5f:e6:2a:
         e8:02:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:52:12 2026 by rpki-client