Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File:                     nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier:          odDVacjrZTAu3oL84pvGdzOsZYMHtw2VIt9Fk8ocw/4=
Subject key identifier:   82:AC:63:43:AE:FB:5A:20:71:3B:9C:EE:AA:3B:3E:C3:3A:BB:C4:FB
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer:       /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial:       01A14CBE149640AE151B7EC8F3F32A321EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number:          1078
Signing time:             Sun 18 Oct 2026 02:01:27 +0000
Manifest this update:     Sun 18 Oct 2026 02:01:27 +0000
Manifest next update:     Mon 19 Oct 2026 02:01:27 +0000
Files and hashes:         1: 5RFARNnQP81iGTseWeUutxn3EXI.roa (hash: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU=)
                          2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: jo38fi56YbICRxYX3EnvQB4hfx/ndVkaGvGfbPtO97U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:be:14:96:40:ae:15:1b:7e:c8:f3:f3:2a:32:1e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
        Validity
            Not Before: Oct 18 02:01:27 2026 GMT
            Not After : Oct 19 02:01:27 2026 GMT
        Subject: CN=82ac6343aefb5a20713b9ceeaa3b3ec33abbc4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:0f:6a:c4:6a:bc:c8:5f:4a:a3:91:c7:99:
                    41:5b:26:94:80:41:d5:1d:af:8a:44:a2:78:aa:1b:
                    96:0e:b5:1e:50:2c:df:c7:e4:48:2a:75:a2:f5:5a:
                    74:10:9f:e1:8e:bd:3a:56:fb:8f:26:89:22:66:c9:
                    8f:23:ce:32:41:d6:b8:e5:f5:61:71:17:b5:c2:75:
                    ab:a7:94:66:52:05:00:f5:b1:0b:02:fc:72:f8:00:
                    b5:55:97:93:bb:c6:6a:91:3b:db:d0:5b:a2:70:0c:
                    62:3b:5b:00:83:d0:e0:d7:41:f8:e2:e0:8b:7e:b3:
                    61:ca:ae:e4:1d:5d:f8:2c:c9:69:ef:55:4a:ea:53:
                    9c:66:f9:aa:60:c8:58:4d:05:bd:d1:0a:30:26:11:
                    1c:92:43:ec:1c:e9:8d:48:8e:61:a0:ce:b6:d7:a7:
                    c2:1c:18:4a:29:ca:8b:2e:f8:f0:0d:18:7b:a1:a0:
                    2d:f0:b0:b2:77:34:88:d0:17:70:67:f6:5c:d2:b1:
                    1b:85:22:38:ca:41:f1:08:f8:b5:f0:82:d3:b2:45:
                    55:35:e4:b2:d8:25:3c:0d:2c:b9:ac:5f:64:b8:c9:
                    bb:11:b6:a6:64:26:86:bf:d0:ee:9c:5d:cd:30:fb:
                    26:d5:1d:7b:22:db:16:3f:9a:e8:9f:9b:4c:cb:23:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AC:63:43:AE:FB:5A:20:71:3B:9C:EE:AA:3B:3E:C3:3A:BB:C4:FB
            X509v3 Authority Key Identifier:
                keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:af:09:4a:40:3e:97:5d:7f:cf:b2:c8:ac:f5:2c:f7:2f:
         fd:89:c1:34:91:43:91:3c:31:7e:b1:7d:1a:e1:90:5a:0e:34:
         6b:a7:36:ed:3a:98:99:de:15:c3:67:8d:28:ab:5e:46:66:1d:
         30:8a:a8:a3:ea:5d:33:24:de:eb:c3:21:12:45:c4:23:40:f1:
         1e:d6:4e:8c:07:27:3d:18:e8:18:63:6d:f5:50:de:ac:e4:d3:
         3e:8c:6b:ea:57:3f:db:33:bf:1e:cd:7f:22:2f:c7:4d:5b:f3:
         c2:c2:76:64:d6:9c:8a:90:e6:a5:66:db:c9:93:03:bb:e7:c6:
         d5:65:5c:e5:2e:67:3f:73:db:04:d8:b7:f3:5f:c2:41:24:71:
         69:e6:dc:11:da:ea:58:c4:11:80:53:18:69:4e:25:55:b8:a4:
         29:da:da:50:3e:84:aa:a6:a8:8f:7c:8a:4c:e3:6b:fc:a5:0c:
         e2:de:3b:47:21:fa:be:e9:37:a1:05:6f:4f:76:cd:a9:c2:05:
         2b:9c:9c:8a:16:26:85:9d:12:81:4d:42:e8:09:48:1e:ab:74:
         17:02:e7:cd:96:70:ba:1e:86:68:a4:3d:ad:4a:95:2a:26:53:
         08:31:3c:b6:b4:8f:6f:d6:d6:0a:4f:e8:b7:85:74:6e:f5:59:
         1b:27:f1:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMvhSWQK4VG37I8/MqMh7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWU0NjY5ZmMwOGE0ZDQzMzc1MDkxMTA2MTM4NjJiMzE0
ZjFhYzcwHhcNMjYxMDE4MDIwMTI3WhcNMjYxMDE5MDIwMTI3WjAzMTEwLwYDVQQD
Eyg4MmFjNjM0M2FlZmI1YTIwNzEzYjljZWVhYTNiM2VjMzNhYmJjNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhwPasRqvMhfSqORx5lBWyaUgEHV
Ha+KRKJ4qhuWDrUeUCzfx+RIKnWi9Vp0EJ/hjr06VvuPJokiZsmPI84yQda45fVh
cRe1wnWrp5RmUgUA9bELAvxy+AC1VZeTu8ZqkTvb0FuicAxiO1sAg9Dg10H44uCL
frNhyq7kHV34LMlp71VK6lOcZvmqYMhYTQW90QowJhEckkPsHOmNSI5hoM6216fC
HBhKKcqLLvjwDRh7oaAt8LCydzSI0BdwZ/Zc0rEbhSI4ykHxCPi18ILTskVVNeSy
2CU8DSy5rF9kuMm7EbamZCaGv9DunF3NMPsm1R17ItsWP5ron5tMyyMghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKsY0Ou+1ogcTuc7qo7PsM6u8T7MB8GA1UdIwQY
MBaAFJ7uRmn8CKTUM3UJEQYThisxTxrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjkt
NGRkNTljN2M2MzA1LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjktNGRkNTljN2M2MzA1
LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIivCUpA
Ppddf8+yyKz1LPcv/YnBNJFDkTwxfrF9GuGQWg40a6c27TqYmd4Vw2eNKKteRmYd
MIqoo+pdMyTe68MhEkXEI0DxHtZOjAcnPRjoGGNt9VDerOTTPoxr6lc/2zO/Hs1/
Ii/HTVvzwsJ2ZNacipDmpWbbyZMDu+fG1WVc5S5nP3PbBNi381/CQSRxaebcEdrq
WMQRgFMYaU4lVbikKdraUD6Eqqaoj3yKTONr/KUM4t47RyH6vuk3oQVvT3bNqcIF
K5ycihYmhZ0SgU1C6AlIHqt0FwLnzZZwuh6GaKQ9rUqVKiZTCDE8trSPb9bWCk/o
t4V0bvVZGyfxsA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:13 2026 by rpki-client