Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
File:                     nJDYRR9QxPd5xDksMdCMGQPRcbM.mft (raw, json)
Hash identifier:          eXWMEPcioUvrEOvgsf6B/F836MyXuawY+8GLO6keEV4=
Subject key identifier:   EB:60:13:32:88:64:CD:5D:D6:40:81:80:6D:23:44:96:EE:1B:23:F3
Authority key identifier: 9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
Certificate issuer:       /CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Certificate serial:       01A17401DF2625DE10AA7301A273809D16F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
Manifest number:          01B6
Signing time:             Sun 25 Oct 2026 17:00:42 +0000
Manifest this update:     Sun 25 Oct 2026 17:00:42 +0000
Manifest next update:     Mon 26 Oct 2026 17:00:42 +0000
Files and hashes:         1: 0B6TTL2Ovm5IyyizUs5dyCiNfGY.roa (hash: iM7sj42gsr07BNC7So8eVXquELxcg4zLh2sPTtFgoK8=)
                          2: esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa (hash: 1eCK8LrpSrRj8EFJVrIKYjfWX5NzAdlbGgvE1Hoh2DA=)
                          3: nJDYRR9QxPd5xDksMdCMGQPRcbM.crl (hash: Rt84zGCL2r5sSd4F8c+4RDoBOp4N1A0q6SHZNCLHKUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:01:df:26:25:de:10:aa:73:01:a2:73:80:9d:16:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
        Validity
            Not Before: Oct 25 17:00:42 2026 GMT
            Not After : Oct 26 17:00:42 2026 GMT
        Subject: CN=eb6013328864cd5dd64081806d234496ee1b23f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:9b:fb:90:57:20:ad:8b:25:1b:be:69:12:
                    11:c5:33:42:b0:4a:eb:39:9f:58:ce:3d:79:be:76:
                    eb:f0:2a:d8:83:56:81:0a:95:a2:c1:16:ab:c7:35:
                    b0:b2:b1:44:dd:4c:4d:32:d1:2f:cb:2e:e6:59:1e:
                    4b:92:3d:a1:10:15:67:dd:c0:ca:77:8c:87:5c:37:
                    ba:3c:c9:fa:dc:f3:b0:e7:ec:c7:b1:13:e4:30:b2:
                    62:10:fb:c2:9d:c7:a9:1a:21:22:a9:bf:a1:80:ba:
                    a2:be:c5:44:1b:d4:e3:ba:71:9c:c4:d2:83:58:df:
                    45:6c:f4:d6:63:c3:b5:52:ba:e7:5c:bf:b3:d6:4d:
                    69:fe:68:9c:2a:9f:5e:70:64:4d:ad:ed:35:6a:60:
                    50:21:29:47:f4:49:e3:1a:9b:96:43:ec:68:32:74:
                    39:3b:bd:85:9e:25:64:18:ed:b4:b4:c3:f3:8b:b5:
                    a4:4a:12:e2:14:b2:17:bb:f4:b8:75:bc:01:d2:a2:
                    35:94:cf:9e:a4:47:a4:d8:db:9e:c9:97:fb:dd:30:
                    8a:ae:26:22:8d:60:e6:d2:ba:ed:fc:0c:c8:55:a3:
                    40:d4:dc:f5:51:ac:5e:27:60:40:79:14:2e:4a:4e:
                    d4:d5:37:4c:a7:f0:24:dd:04:0c:eb:cb:3f:b6:e4:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:13:32:88:64:CD:5D:D6:40:81:80:6D:23:44:96:EE:1B:23:F3
            X509v3 Authority Key Identifier:
                keyid:9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:8c:e6:18:db:70:17:34:75:7a:46:5b:e6:0b:a7:46:aa:
         99:0c:04:39:cb:d6:23:8c:49:aa:b6:85:21:20:ae:9e:e3:3c:
         41:67:35:d1:21:94:ca:43:f3:ad:c0:0e:a0:d5:63:95:71:81:
         f1:0d:bb:99:10:b3:5c:38:ee:4b:a1:64:ed:cb:81:41:bb:3c:
         cc:0e:5e:9b:53:06:70:5d:f1:87:22:6c:9f:2c:5f:53:30:0e:
         88:91:f8:32:8e:08:34:e8:66:93:48:17:d1:1d:fc:86:3a:7b:
         52:b5:c9:bb:a5:17:e5:0f:92:1c:b9:0d:12:20:ad:09:55:6e:
         28:92:a4:3b:7f:ff:d3:5c:56:63:f0:45:bc:6f:8d:5d:ea:c6:
         3d:9a:e3:50:bd:05:4a:9a:32:0f:68:4e:f5:95:f8:b6:62:2e:
         60:d5:e4:1d:a3:91:fb:c3:6b:ab:33:c2:73:2e:61:60:3b:cd:
         8f:f5:32:01:99:d9:89:d9:53:66:8b:76:37:1f:03:ba:29:25:
         74:fb:25:dc:48:2c:ba:bd:a3:a2:f5:37:62:37:62:3c:39:c3:
         b3:b5:fa:28:4d:d4:36:69:64:d9:69:dc:ca:82:2d:78:5f:c8:
         60:81:05:66:83:a0:01:c1:ac:7f:61:7e:01:08:53:26:a2:15:
         94:be:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:46 2026 by rpki-client