Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          A83aj/zSJwlXQ3PryVEZVTqS/QX2mBdLlmlePTZaRWI=
Subject key identifier:   90:A6:3D:92:D1:1D:80:AB:67:EF:24:4B:B1:52:70:BD:B7:AD:55:ED
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       01A06EA7B8BBACE31AB5C1628651322A5ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          1404
Signing time:             Fri 04 Sep 2026 23:01:20 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:20 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:20 +0000
Files and hashes:         1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
                          2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
                          3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: Fv2tj5/t1/iUwkUPK/056sPHdbV85BxWNxqPkzDRRhs=)
                          4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:b8:bb:ac:e3:1a:b5:c1:62:86:51:32:2a:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Sep  4 23:01:20 2026 GMT
            Not After : Sep  5 23:01:20 2026 GMT
        Subject: CN=90a63d92d11d80ab67ef244bb15270bdb7ad55ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:7b:62:da:a1:04:7f:f6:48:d7:b0:26:c7:
                    29:77:19:6f:c7:8a:6b:29:1f:c3:20:8d:65:7a:a6:
                    34:51:e6:65:ba:b2:f3:0e:d0:19:03:e6:88:2c:c2:
                    97:28:e9:e3:cc:c4:22:1d:ec:9a:3d:76:13:2a:a3:
                    69:3a:b9:ae:f2:91:38:dc:d2:a4:7d:81:09:2a:53:
                    a7:a5:14:0e:64:a1:16:96:64:3d:6f:83:f8:79:02:
                    89:cd:e0:07:42:a5:b7:3c:97:9a:5a:42:6b:58:e2:
                    81:36:91:15:f5:1f:3c:49:e2:6f:44:00:97:97:aa:
                    f4:00:80:98:10:0b:f5:99:84:24:65:ba:aa:2a:65:
                    3c:91:10:6c:56:0d:68:aa:2d:c1:83:13:dd:c4:38:
                    8a:94:1a:e6:f0:75:7e:83:16:c2:f1:e8:bf:54:7d:
                    fb:ec:1d:07:75:e8:2d:1b:93:ac:23:41:de:26:4c:
                    fd:10:fd:e4:c6:b6:d5:a3:e5:79:c9:31:96:ff:2f:
                    bc:03:9e:2e:68:b3:eb:e6:51:2c:03:41:30:83:f0:
                    d4:dd:11:0b:24:0a:82:3b:84:e6:99:c5:52:33:2f:
                    34:be:cc:33:53:75:24:f8:f8:b9:fa:11:e3:d6:ad:
                    f7:bf:08:b7:81:b3:b4:d0:40:3b:a3:f2:30:93:04:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A6:3D:92:D1:1D:80:AB:67:EF:24:4B:B1:52:70:BD:B7:AD:55:ED
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:21:09:75:c0:5c:3a:3d:75:be:e0:78:05:95:59:cf:fe:
         d1:68:38:a8:ae:09:32:b1:b6:ed:a2:6d:12:19:09:2b:b4:df:
         28:ab:58:75:96:b6:53:fd:69:c0:4b:75:06:48:d1:6d:14:81:
         c0:fe:47:7d:eb:12:72:0b:bb:43:31:15:47:56:f0:09:98:c4:
         34:20:77:b7:a2:63:06:72:41:c6:f4:aa:25:a1:87:ba:c4:3b:
         0d:20:f6:98:75:94:a9:c2:22:71:34:7d:79:3d:88:da:3a:e0:
         47:39:b6:6d:0c:c3:17:dd:1f:c9:95:ea:ce:33:d9:2a:25:0d:
         04:4b:c8:ff:43:c3:74:62:6a:47:95:4e:95:98:bb:e0:e4:71:
         42:b7:a9:df:a3:af:b7:e8:d6:80:48:12:c7:ed:4d:d2:91:7b:
         7f:8f:5c:3d:15:62:84:c6:78:b4:93:83:eb:b0:e2:b1:5f:c2:
         9c:f8:0a:1c:96:35:c3:c3:d2:e5:1a:fb:9e:a0:98:f2:42:8b:
         61:d0:16:95:47:1a:e0:70:c9:64:73:64:80:76:5d:16:ac:d6:
         67:fa:ea:4b:dc:50:c9:dc:49:62:7d:c3:2c:b4:2b:f6:60:74:
         b4:ce:f7:6a:13:41:1b:a2:73:b1:4a:e0:27:6e:f7:e8:e4:fc:
         ab:81:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:51 2026 by rpki-client