Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File:                     nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier:          jSwMe1o7zq42ysB23Z9Qt53LA55JEZGKsZ7OuUlRVyE=
Subject key identifier:   71:07:26:26:0F:1F:D6:4C:ED:02:2A:B9:58:EF:3B:8B:58:7E:9A:92
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer:       /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial:       01A12466F31D63A368D1DE8B0CD0C910FB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number:          0723
Signing time:             Sat 10 Oct 2026 06:01:28 +0000
Manifest this update:     Sat 10 Oct 2026 06:01:28 +0000
Manifest next update:     Sun 11 Oct 2026 06:01:28 +0000
Files and hashes:         1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
                          2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: 6WSy454vW6HOQjalW33CdpE6MEHYHufwVy1dIB2Ev4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:66:f3:1d:63:a3:68:d1:de:8b:0c:d0:c9:10:fb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
        Validity
            Not Before: Oct 10 06:01:28 2026 GMT
            Not After : Oct 11 06:01:28 2026 GMT
        Subject: CN=710726260f1fd64ced022ab958ef3b8b587e9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:5a:5c:6a:2d:89:a5:0c:ca:cc:4b:84:02:
                    65:44:2e:8c:27:a0:76:86:9b:e4:c4:e7:ee:9b:fc:
                    62:8b:0d:52:cc:53:cd:78:27:cf:32:2e:36:aa:9f:
                    39:99:73:dd:c8:48:b4:a8:f5:95:9d:8c:46:6c:6a:
                    0f:78:78:b9:f0:a5:15:08:f0:d0:89:40:37:9a:8b:
                    18:f3:14:db:3f:0d:96:05:a5:23:69:46:dc:85:33:
                    bc:86:7d:69:2f:b4:f5:af:09:f4:43:c3:ac:71:e9:
                    83:6a:1a:cf:76:f9:75:b2:b6:46:68:00:a7:ce:92:
                    53:0a:bb:99:43:b6:55:f9:b2:de:f1:6d:3b:2c:0c:
                    8a:a1:d2:72:73:88:2d:8b:ef:1f:93:12:49:11:89:
                    2e:9a:21:2e:f4:98:07:82:8a:3d:32:02:cd:d7:23:
                    ff:a9:48:10:98:4a:fe:c9:01:bb:23:df:12:21:bb:
                    d5:4c:7b:ec:04:8e:2c:35:df:8d:6a:3b:bc:e5:c6:
                    90:c8:78:62:21:0f:69:83:28:cb:2f:19:a2:1a:08:
                    d4:5f:80:32:80:44:8a:38:ec:1e:da:db:58:63:b7:
                    21:31:8d:b7:75:50:ab:d4:ae:8d:79:d0:fe:30:79:
                    48:d5:e6:3d:91:77:a4:4c:b0:22:a1:88:3a:46:6f:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:26:26:0F:1F:D6:4C:ED:02:2A:B9:58:EF:3B:8B:58:7E:9A:92
            X509v3 Authority Key Identifier:
                keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:d8:f1:9f:41:90:b7:77:d5:a9:84:ff:27:32:e4:79:c3:
         0c:3f:94:b3:ee:10:18:0c:75:9d:ba:81:1a:85:78:97:4f:fd:
         e4:fa:13:ea:cf:ea:76:e5:ec:de:4e:6b:d3:44:73:a0:b2:d1:
         33:f2:44:4d:03:8f:32:71:2a:ef:90:ca:de:67:13:02:a9:b3:
         31:d3:9a:55:5e:f7:4a:b2:7d:9f:69:1c:36:89:07:bb:86:92:
         a7:ef:77:1e:0b:4f:66:b7:c5:fd:87:2a:8e:a1:b1:5e:10:8f:
         78:bb:1c:ee:71:8d:37:f1:ea:be:f0:95:3d:fd:87:4b:a2:04:
         95:ee:d4:6d:13:fe:52:8b:c4:12:06:6c:1b:b2:49:b7:4b:37:
         76:90:fc:eb:97:a9:0e:b5:59:dd:b1:04:bf:d8:5e:93:4d:b7:
         98:01:9a:88:85:25:24:fd:56:68:e0:d8:ef:5b:4e:1e:1c:16:
         2a:f6:99:39:aa:e0:ef:81:29:22:6b:13:49:d5:84:a0:70:53:
         d1:15:02:94:4a:e6:9e:9e:d8:6b:bb:60:ec:5f:59:6d:21:03:
         a5:6d:27:1f:18:d2:8e:0d:10:b3:48:95:3c:eb:5c:a4:75:cf:
         30:f2:ff:61:32:d8:13:00:7e:0d:0c:4e:27:11:27:9a:7b:8a:
         d9:53:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:01:28 2026 by rpki-client