Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File:                     nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier:          qygr6Ky3bMsF8dKaUItPERBetlSZKW3HkwZfA26+nHM=
Subject key identifier:   89:EF:6C:C3:CA:AD:90:DF:CF:A0:B2:D7:38:5F:91:62:A2:2E:0F:03
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer:       /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial:       01A08B9EBC7724A78119D440E256949E23F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number:          197A
Signing time:             Thu 10 Sep 2026 14:00:30 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:30 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:30 +0000
Files and hashes:         1: NF_ZJXamVG-MCa_q4NzRMxK6B08.roa (hash: BEU1FyfqqI6VaL+KOpo/X80Gj2W8UWl6HtfuD6fI7nE=)
                          2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: 5rZOCn4iUmHNwstWJ/ihc0Iw1B824OJFXPinLzejUk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:bc:77:24:a7:81:19:d4:40:e2:56:94:9e:23:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
        Validity
            Not Before: Sep 10 14:00:30 2026 GMT
            Not After : Sep 11 14:00:30 2026 GMT
        Subject: CN=89ef6cc3caad90dfcfa0b2d7385f9162a22e0f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:69:9c:29:f2:72:56:16:ea:73:a6:f8:02:
                    95:22:14:e3:36:1a:c7:9e:69:54:3c:ce:54:a4:3a:
                    2f:6f:1f:79:37:4b:ff:0b:d3:06:8b:aa:6e:52:10:
                    ee:19:60:35:99:10:0e:2b:be:8d:0f:21:44:02:9a:
                    b1:ae:dd:6d:66:6b:d6:3d:a0:35:14:cd:24:c2:78:
                    8f:db:ea:15:a3:95:da:f1:95:8d:98:94:84:e6:a8:
                    d6:30:f6:68:3d:13:04:f7:2c:4d:67:7c:30:5b:c0:
                    e3:61:ec:32:df:76:e8:51:e9:5a:56:4a:99:2d:f8:
                    79:e6:1c:4f:a4:45:6d:de:4c:8c:8f:25:fe:95:4d:
                    6c:d2:66:1e:d1:05:90:b8:c8:cc:02:02:da:50:c3:
                    c9:a8:83:8d:f0:fd:e4:21:e3:fd:87:01:e1:37:90:
                    b9:01:9f:1a:62:58:d6:1a:c9:fb:8e:a1:2b:ad:01:
                    98:1d:da:6a:d9:ed:97:5f:8e:db:c9:23:5d:d3:b0:
                    43:bf:fe:f2:a5:0d:c1:cb:03:5d:b8:6a:63:b3:23:
                    17:fb:a4:5e:61:24:30:76:95:1a:42:69:2c:b5:f0:
                    73:06:e1:e9:63:c4:4f:09:6c:f0:6c:a5:37:e2:6f:
                    f9:42:0c:cf:04:31:28:ee:73:f5:bf:45:e5:5c:cc:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:6C:C3:CA:AD:90:DF:CF:A0:B2:D7:38:5F:91:62:A2:2E:0F:03
            X509v3 Authority Key Identifier:
                keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:33:47:7c:13:7f:1b:dd:64:84:31:4f:53:ca:74:6c:74:21:
         87:59:42:7d:37:86:d8:b8:b2:f3:1c:b8:46:8a:ed:ff:46:43:
         fd:e1:aa:a2:21:6b:a4:97:2c:9e:f0:7a:eb:da:ec:0c:b0:48:
         cc:63:17:fd:4c:c3:47:ad:13:eb:5a:00:67:8b:bf:f8:03:22:
         eb:23:86:b3:51:c1:14:51:8e:3c:22:f5:ca:2d:f3:a5:73:73:
         34:8d:28:a4:62:da:25:10:ca:80:24:a6:c3:51:12:5a:01:85:
         fe:0d:9d:76:84:04:c3:ea:21:63:81:98:a1:e8:42:b4:6f:d9:
         18:82:47:81:1f:b5:53:a5:94:46:10:9f:af:44:26:0e:20:c0:
         4f:bf:ee:22:19:55:87:70:96:41:c8:86:72:9a:c7:ad:e5:ae:
         f8:b5:a6:62:bf:81:51:31:90:da:c3:92:af:a1:05:2b:c2:e0:
         b9:4c:35:a1:80:5d:e3:e4:b9:f3:79:2a:d5:e2:32:f2:31:75:
         2f:3e:0d:12:e0:14:ee:be:1a:71:39:e9:df:cb:00:65:62:43:
         7e:cf:7a:48:32:f2:ea:57:9c:af:ef:74:9e:16:8e:33:5c:8f:
         91:e7:42:0f:d2:9c:36:b9:7c:40:f2:57:5d:f2:7f:7c:f2:76:
         cb:89:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:35 2026 by rpki-client