Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File:                     nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier:          v2VxtMoVzyQXVBCiwauUE3kzZ3F6x6wys0Tr0+AMODE=
Subject key identifier:   F3:C5:99:61:D9:30:97:EA:EF:CA:05:2D:97:4C:1B:C7:89:85:9B:B3
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer:       /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial:       01A08979D79C017DC90DF76D217329ED6593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number:          1726
Signing time:             Thu 10 Sep 2026 04:00:58 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:58 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:58 +0000
Files and hashes:         1: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: QPLrGaSfab1bVcU0qmWqYI4zuGOyMbTyNdugA7wpV+E=)
                          2: yc62V3uIeA0-wy5Fq3O35pcJbHU.roa (hash: 7ByXG9IeLzWoaYBiJRWc0wUwLkE/yLcff/PMKmyqASg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:d7:9c:01:7d:c9:0d:f7:6d:21:73:29:ed:65:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
        Validity
            Not Before: Sep 10 04:00:58 2026 GMT
            Not After : Sep 11 04:00:58 2026 GMT
        Subject: CN=f3c59961d93097eaefca052d974c1bc789859bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cd:3c:41:ac:63:5d:09:e8:bc:ed:9f:5d:7d:
                    8e:ee:6c:aa:84:bc:7f:80:2f:e2:54:39:19:0e:40:
                    11:a9:d6:80:6a:61:5a:40:7f:c3:75:5e:66:df:d0:
                    7a:c9:19:16:40:76:29:d1:41:ba:32:50:95:4b:6d:
                    91:2d:11:dd:28:bb:32:1c:31:72:b4:8a:38:61:19:
                    11:75:6c:9b:f7:57:24:06:a0:5f:25:2b:fe:5b:ae:
                    1e:91:a5:76:a3:9d:b6:27:16:2a:78:90:b7:92:69:
                    88:e9:49:31:92:78:30:30:63:5f:e1:fb:8b:94:44:
                    79:66:be:bb:8f:2c:94:08:52:ef:7e:61:26:97:eb:
                    cd:cf:3c:fd:f9:f7:6a:a3:b3:8c:1b:07:40:be:ae:
                    61:06:4b:0c:9d:d1:5b:6c:0f:94:30:44:de:fc:42:
                    5d:85:ce:5f:69:e7:a7:35:49:fe:ff:18:06:64:2e:
                    62:2d:5a:d7:77:e3:30:d2:12:23:5c:49:c5:38:c3:
                    3e:31:8b:da:4b:eb:fa:ad:60:70:65:2c:d8:0b:56:
                    a6:6f:e7:d7:cd:c4:a6:90:57:cd:3a:f1:60:85:16:
                    46:ce:83:97:be:af:e2:84:42:e6:3f:ef:44:8d:ba:
                    d5:23:59:34:ea:fb:0a:68:d0:6b:c5:bf:ab:81:8f:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C5:99:61:D9:30:97:EA:EF:CA:05:2D:97:4C:1B:C7:89:85:9B:B3
            X509v3 Authority Key Identifier:
                keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:25:b9:81:ff:5f:17:ea:ad:96:3f:7d:a5:51:33:d3:c7:
         48:ec:fa:f7:80:c5:2a:ec:b0:44:59:be:58:17:69:56:83:df:
         52:77:77:9d:c7:3d:5a:81:b2:2c:87:09:10:a7:aa:41:5f:d1:
         3e:38:4b:c2:cf:e0:17:4b:37:1b:67:d0:dc:fc:36:3a:46:ac:
         cc:ff:51:22:85:68:e6:ab:6f:50:a0:05:cc:2a:d8:d4:ab:ca:
         5a:df:63:6b:6d:a4:52:26:cf:6d:0e:3d:65:66:cf:82:2f:b4:
         b7:15:34:cb:5f:91:bf:2f:a5:39:71:c7:f3:dd:42:2b:18:11:
         0e:4c:48:80:28:90:d5:f3:77:62:32:92:54:3b:ff:73:40:ec:
         46:76:39:ca:af:60:cf:d3:2c:9b:36:06:e0:93:d8:0a:50:bd:
         ec:ac:ad:35:4e:2e:62:ad:de:81:a8:04:ec:fb:45:18:42:f0:
         e8:19:14:6e:94:12:eb:99:56:70:e3:7b:3b:6e:03:ef:c9:24:
         df:41:71:8c:a6:a2:4f:98:54:13:4c:d5:3a:4b:76:f8:3c:26:
         25:cb:bc:00:6e:66:97:da:a2:32:b4:82:d5:a8:35:e5:4c:b2:
         5c:66:4c:39:90:c0:a9:72:5a:8c:fa:6e:54:55:eb:62:f3:9c:
         01:75:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:49 2026 by rpki-client