Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File:                     nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier:          Bw9wgoUVIGie44ILe0P8LoznLaglJQ4uLxECnOdljxg=
Subject key identifier:   E4:D5:4D:D5:38:69:47:7B:09:13:38:D8:9D:D4:2E:CE:4D:6D:E7:69
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer:       /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial:       01A06E0349245758E6C72401CE45766ECE66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number:          010F
Signing time:             Fri 04 Sep 2026 20:01:44 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:44 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:44 +0000
Files and hashes:         1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
                          2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
                          3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: tqK6eUP3CoLNik6JqcKbsUYrKJKzENl3A1JSmkEcv2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:49:24:57:58:e6:c7:24:01:ce:45:76:6e:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
        Validity
            Not Before: Sep  4 20:01:44 2026 GMT
            Not After : Sep  5 20:01:44 2026 GMT
        Subject: CN=e4d54dd53869477b091338d89dd42ece4d6de769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:9c:e1:c1:b7:51:84:3c:ce:17:17:98:ca:
                    ee:0b:b5:13:2d:83:0f:d4:9b:5e:fe:7f:c9:4c:44:
                    5f:b3:01:9e:08:40:68:83:84:75:8d:d9:49:5d:4f:
                    01:ce:e8:b8:a4:fc:63:a5:1f:d6:56:81:1c:19:a1:
                    58:13:d6:c5:95:14:81:cb:1f:67:f6:01:1f:e6:f7:
                    d7:7d:32:85:3a:d2:17:42:33:4b:02:ea:6f:4a:98:
                    8e:62:ba:53:51:fe:9b:98:8f:b8:da:72:9b:b5:b6:
                    c9:87:af:24:b8:0e:28:03:23:bf:9d:62:18:4c:95:
                    60:15:73:81:03:53:0e:ef:f5:08:20:83:41:35:54:
                    2c:fa:2c:37:2b:c5:fb:1b:4c:06:d9:95:72:0a:0c:
                    07:ca:ca:0b:b9:78:59:a8:77:a6:33:cf:0f:fb:83:
                    50:39:79:52:ed:32:e6:d3:25:ad:ed:a1:4a:30:7a:
                    1b:71:86:e7:15:ef:a8:97:74:47:64:c5:2c:a9:75:
                    f2:cb:8c:1c:d3:f7:9c:2a:cf:20:d4:70:98:71:40:
                    64:74:db:6a:85:63:30:df:fc:64:ec:fb:30:9c:61:
                    e9:1e:a3:29:82:20:e1:37:2f:c0:d7:2c:4d:49:77:
                    95:09:f5:9f:77:bd:cd:ab:d6:4f:94:c4:d7:d6:6d:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:4D:D5:38:69:47:7B:09:13:38:D8:9D:D4:2E:CE:4D:6D:E7:69
            X509v3 Authority Key Identifier:
                keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:ca:a7:30:91:a4:55:e1:ca:96:07:b1:7e:16:f1:70:da:
         f5:4b:bc:70:00:30:4f:1a:3f:bb:56:fd:37:10:26:85:2d:b8:
         b9:54:f5:4d:1e:a3:14:d9:df:bd:2b:d6:fc:75:4b:58:ed:c8:
         ea:be:0a:56:b9:36:ea:b9:17:46:00:8c:73:ff:ef:fa:b2:82:
         94:f1:9d:f0:30:ba:73:a8:51:2d:7c:a7:da:70:eb:02:b6:4c:
         8b:a1:45:72:22:05:fc:5d:87:3c:ce:c7:e5:77:29:76:dc:ad:
         7b:27:d1:91:5d:9e:80:f7:ae:91:23:12:de:ad:10:93:87:e8:
         c7:2b:89:c8:6b:57:6a:d6:de:6b:a9:49:36:d0:7a:fa:2c:3e:
         12:53:d4:d3:17:57:72:3e:62:63:77:23:03:60:a6:0f:f1:86:
         e3:45:af:eb:c7:cc:45:f1:62:59:de:e8:be:31:2a:b1:8f:66:
         91:97:69:33:0c:fb:b9:5e:2d:04:ce:09:3a:df:7d:bc:af:fc:
         ad:36:a4:52:38:d3:d9:e2:5f:77:b1:bd:17:e7:65:37:55:ad:
         9d:90:b4:38:98:0a:ed:3c:8a:65:25:e0:c1:b1:0c:87:e1:cd:
         72:6b:2f:99:0f:19:68:b3:b9:4f:44:8d:6a:66:40:53:b2:82:
         82:67:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:32:07 2026 by rpki-client