Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          BuVVrLM+a69QfITuf51BIoeKm81TPFEnHJe3OjUbciE=
Subject key identifier:   2C:00:82:BB:18:46:38:4B:24:F9:0F:3F:1A:1F:3C:C7:AA:7E:9A:84
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       01A088D56147D695EFBB514D61DABBCCF77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          1577
Signing time:             Thu 10 Sep 2026 01:01:20 +0000
Manifest this update:     Thu 10 Sep 2026 01:01:20 +0000
Manifest next update:     Fri 11 Sep 2026 01:01:20 +0000
Files and hashes:         1: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (hash: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE=)
                          2: 6HVpZjDJK-JDd4JLU8A4rcuFHLs.roa (hash: kIuNG7jafmgHvYNR9Juw4bgFLOduPI1o7DgjWmXFliU=)
                          3: 9KvmlPKsY8w8aZTFNLv0zg38axY.roa (hash: E6UjIGV/KuRgFN4UQnHUeYYcpZAFdXo3JairE/1g8kE=)
                          4: CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa (hash: hbMTywJkxAoG5vlp7Fd9e3h3SO2hZD0EHWgX/IJxhMw=)
                          5: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (hash: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8=)
                          6: J5ItodHrRCheXviqPMZtDDHgoRU.roa (hash: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg=)
                          7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: FJEgI3Y+kcMbeyQmQOzPzGTXgmsVWXF4SQFX03rCXP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:d5:61:47:d6:95:ef:bb:51:4d:61:da:bb:cc:f7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Sep 10 01:01:20 2026 GMT
            Not After : Sep 11 01:01:20 2026 GMT
        Subject: CN=2c0082bb1846384b24f90f3f1a1f3cc7aa7e9a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:4b:bc:dc:20:60:70:9b:9f:3b:9a:40:da:
                    16:84:62:2a:2d:8e:e1:7f:1c:c7:22:db:2c:4e:67:
                    8e:79:07:7b:b0:17:00:08:38:cb:d3:a2:9a:4f:bd:
                    b4:d9:5f:8b:12:2d:6b:7d:ad:1a:a2:23:1e:0a:42:
                    df:40:a4:fb:8e:27:37:53:54:55:86:5b:4a:a4:f2:
                    e9:c0:ea:f5:dd:1e:96:ca:38:b6:70:20:fe:d0:b2:
                    7d:ca:1e:fa:e4:ab:77:00:88:82:0f:9d:73:44:c3:
                    09:f8:f0:61:2f:51:75:45:7e:b3:90:7a:65:41:d1:
                    73:d0:9d:a0:1d:08:46:3a:ac:4f:e0:39:76:45:28:
                    92:92:8f:0f:2a:d3:2e:b7:f3:93:1c:b5:8e:54:ef:
                    8e:b3:44:f6:da:bb:75:58:0f:1c:40:07:2a:68:40:
                    e1:d0:1c:43:df:91:0e:94:aa:ee:1e:11:85:1d:f1:
                    93:79:24:82:1f:73:ba:f9:47:6e:25:ba:52:84:f1:
                    39:f3:80:f2:d9:27:25:3d:0e:18:59:d9:e4:7f:0d:
                    e5:a3:75:08:dd:11:28:53:c5:84:d8:e2:56:f6:7c:
                    14:17:d8:cf:2a:9c:27:11:f7:1c:ac:19:11:71:48:
                    52:8b:b6:c3:b4:d7:67:41:de:ac:da:49:fb:79:4b:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:82:BB:18:46:38:4B:24:F9:0F:3F:1A:1F:3C:C7:AA:7E:9A:84
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:df:e6:84:70:1d:76:4f:f3:61:4d:16:43:a5:76:69:d8:
         f6:02:9c:00:94:36:fa:5c:48:eb:a8:11:85:4e:d3:4a:f6:fa:
         64:c2:e4:5d:9f:0d:cb:87:77:a4:3c:e5:16:15:ff:c5:29:73:
         2a:2a:ab:be:73:19:d2:e0:34:1e:fa:98:60:ee:c3:3c:71:73:
         d8:b4:d5:8e:2c:b4:ee:bf:56:31:9b:29:9f:aa:be:58:0f:b3:
         43:00:52:ad:20:d3:76:4c:13:87:22:61:02:68:8e:b1:2d:93:
         cd:4a:1a:b0:2b:55:f6:81:3c:98:cc:78:e5:44:c9:6e:44:a5:
         98:6b:19:46:82:ca:35:28:10:8e:f5:3b:fb:94:9f:08:9c:62:
         ac:38:7c:3c:f2:9c:c7:f0:9e:65:8a:d6:e2:39:89:b8:4a:33:
         c9:d5:e0:b9:8a:2b:22:82:61:ee:5b:b9:da:6f:da:68:57:59:
         27:31:e5:59:8e:42:0d:30:bd:82:37:df:dc:8e:58:ae:37:28:
         d5:d6:2d:6b:b1:0d:ba:53:2a:73:25:4a:b2:bd:c9:29:04:f4:
         38:33:1f:82:53:ab:42:b8:bd:ba:d7:ad:86:23:a1:ea:79:b0:
         e8:19:9e:2f:25:2d:cd:5d:2b:19:fa:ba:4f:42:14:80:3b:9c:
         b9:3a:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:59 2026 by rpki-client