Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File:                     NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier:          2ZEDftho9RCVor2f9AxjLUnpuTduCJX53PXJJtTX3ss=
Subject key identifier:   26:01:40:97:95:AE:8B:08:F5:01:1A:04:C5:33:E8:93:27:72:94:69
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer:       /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial:       01A06DCBAA27447168EA59F7FB7C120221C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number:          0183
Signing time:             Fri 04 Sep 2026 19:00:58 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:58 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:58 +0000
Files and hashes:         1: IoID25YMHzy5rGEknb3wQAVRHUs.roa (hash: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=)
                          2: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
                          3: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: Dwzw5B9OGv6mZnh/jTn1miFFAavLVDbJiN/aDX0aZG4=)
                          4: nRBo528tP43KmAQk4RnVYbDzWU0.roa (hash: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=)
                          5: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:aa:27:44:71:68:ea:59:f7:fb:7c:12:02:21:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
        Validity
            Not Before: Sep  4 19:00:58 2026 GMT
            Not After : Sep  5 19:00:58 2026 GMT
        Subject: CN=2601409795ae8b08f5011a04c533e89327729469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:86:71:7d:d0:f4:72:1c:f4:83:94:b6:fe:
                    f3:d1:69:c4:23:cf:67:6d:cc:93:40:ed:11:11:37:
                    52:b5:77:78:9e:83:33:a9:14:0d:24:2d:0e:92:ee:
                    b7:27:75:43:bb:48:bb:af:56:d2:96:6a:ba:92:ab:
                    cc:b8:be:67:d9:0e:f8:d8:7f:67:99:72:f7:57:b8:
                    95:60:db:eb:52:a0:2e:6a:5a:42:68:71:8a:ce:93:
                    20:85:f7:a7:85:01:21:86:7c:8c:fa:bd:2b:e3:2f:
                    b7:7c:2d:76:ff:4c:d2:46:18:3a:5f:17:c9:53:1a:
                    22:fc:bc:a3:9b:35:a5:d6:68:61:7e:3a:f5:3e:e4:
                    4f:41:f1:8e:4b:e1:27:c2:16:50:a3:75:f3:27:ee:
                    e1:a4:e6:7c:ab:1b:36:a0:e7:75:5d:b2:5a:fd:22:
                    90:2f:da:f9:93:44:4b:14:28:72:4c:49:68:0e:e1:
                    5c:1a:bd:31:ef:dd:3e:87:a1:4a:2a:70:2d:6a:f4:
                    8c:50:32:b6:a3:14:ce:fb:f4:e2:99:10:3b:60:84:
                    fe:25:7e:b4:3f:9c:c2:e2:e5:d5:1c:21:d6:11:21:
                    d7:99:2e:3a:b4:e6:15:3f:43:9b:ec:63:d4:f9:04:
                    67:00:03:bb:15:4b:b9:0d:73:4d:cd:71:55:8e:3c:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:01:40:97:95:AE:8B:08:F5:01:1A:04:C5:33:E8:93:27:72:94:69
            X509v3 Authority Key Identifier:
                keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:c5:3e:92:83:04:16:c7:d9:bc:70:ca:e8:03:b0:38:55:
         6b:0d:6f:86:20:82:c6:3c:cf:ad:78:3c:99:df:42:73:36:ba:
         40:c5:ec:2d:ac:b0:fb:11:4b:49:c8:3e:77:aa:79:0a:a5:24:
         f7:50:19:d3:94:57:6c:aa:43:34:8d:2a:f2:43:5c:5f:73:34:
         21:ed:77:fd:60:58:51:4e:d3:8c:3e:85:c1:aa:a5:bd:1e:56:
         fe:29:69:34:7f:fd:45:e9:51:8e:28:72:7e:4a:8c:b1:30:89:
         a2:1a:f2:a8:6d:f9:e4:f8:6a:54:c8:8c:3d:57:94:56:c6:d9:
         e5:2c:60:20:2f:82:e5:79:68:f0:9a:a9:c2:38:20:a2:5e:ab:
         89:d1:1c:b7:88:1f:08:e1:d8:76:a8:12:57:48:ea:6f:7f:be:
         a2:4e:b7:af:59:52:72:49:d8:7f:29:d4:39:ab:19:b6:09:8a:
         d3:f3:60:49:12:74:30:78:b6:e3:c5:6a:68:dd:b7:cd:7d:ac:
         eb:fe:d0:fe:d8:59:f9:ba:bc:65:4a:90:10:f5:e6:cf:39:d6:
         31:9d:01:99:9f:01:42:a1:f2:3c:a3:ad:c6:e8:a9:59:28:cb:
         06:4e:c4:8e:35:31:89:0f:79:61:e4:f1:7d:05:93:a0:09:97:
         cf:b5:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:46 2026 by rpki-client