Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File:                     t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier:          qkP7tqOXuTWGbnVj5y/CD3NTqAOoO0f0DR7z9q8TkiI=
Subject key identifier:   DC:F3:40:0A:EF:23:99:32:61:5A:91:D9:4A:1B:CC:F4:82:6C:9C:57
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer:       /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial:       01A104372CFA055CA3EF6217FB6ACCE8C1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number:          0270
Signing time:             Sun 04 Oct 2026 00:01:27 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:27 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:27 +0000
Files and hashes:         1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
                          2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: txLm2U6oHM6TBrnwFy8nPDubGvcOdY4IJAXUAgxvVLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:37:2c:fa:05:5c:a3:ef:62:17:fb:6a:cc:e8:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
        Validity
            Not Before: Oct  4 00:01:27 2026 GMT
            Not After : Oct  5 00:01:27 2026 GMT
        Subject: CN=dcf3400aef239932615a91d94a1bccf4826c9c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:29:94:c8:ca:6b:ed:45:9f:36:e9:fd:74:
                    13:ba:1b:aa:8c:cf:c4:2d:c7:29:38:43:44:86:64:
                    2c:ab:ea:52:7c:d9:2e:92:66:c5:95:8c:c4:5f:d8:
                    6e:88:70:62:2b:53:95:d6:49:ab:e8:bb:98:34:0a:
                    88:9f:6d:58:c2:c4:d6:e8:5d:03:a9:e3:b4:7a:10:
                    d7:8f:94:84:ff:2b:43:88:4f:e8:e6:1e:6d:de:d6:
                    e2:8e:5a:e8:79:c5:e0:89:e3:2f:dc:8d:14:4a:a0:
                    28:4f:0f:b3:b7:36:f4:1e:3e:1d:d8:26:50:60:0b:
                    ef:e7:e8:b1:ab:f8:c7:fc:c7:ec:f0:ce:6c:3f:fe:
                    0d:fe:b9:60:3f:ec:47:3e:96:aa:27:15:1f:77:2a:
                    3a:c8:7d:e1:e2:0c:9e:a5:fa:8b:5b:35:78:2a:48:
                    70:b5:ee:fe:bc:39:0c:da:b6:16:14:8c:75:0e:03:
                    f0:61:62:a1:3c:e0:24:29:d7:ac:3c:3b:ca:34:d3:
                    50:16:9f:a3:ad:ac:fd:e4:63:a0:7f:04:a6:88:9c:
                    3e:d3:8c:3f:db:26:47:d7:70:27:19:0c:f3:4e:eb:
                    4b:08:f5:4e:56:29:7a:91:e7:1c:59:3f:cd:58:47:
                    30:7a:69:2e:67:a6:68:a8:ac:47:d4:c2:e9:44:cc:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:40:0A:EF:23:99:32:61:5A:91:D9:4A:1B:CC:F4:82:6C:9C:57
            X509v3 Authority Key Identifier:
                keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:a6:6f:68:57:27:bd:d3:25:ff:8a:12:61:57:43:e9:12:
         4a:e6:a9:ef:2e:80:11:ac:4b:af:77:a0:c0:9b:43:f9:fd:10:
         31:5a:73:62:da:cb:37:8b:a8:84:ed:66:e0:9f:0b:16:5e:09:
         ab:2b:d6:6f:bc:1d:58:c7:f8:6c:82:87:7c:5e:78:7f:df:22:
         a4:3b:d9:29:de:04:9d:6d:b1:12:f9:1c:64:fe:e5:5c:54:69:
         3d:5e:b7:f0:99:91:f9:a6:d8:cb:a6:99:4e:0f:08:49:49:ee:
         28:0a:19:b8:67:37:e3:bd:fc:4f:88:f4:f3:d3:7f:d7:14:a9:
         2e:fb:40:9e:31:ce:39:a4:a1:0d:76:17:0b:f3:91:b4:3b:ff:
         36:4f:64:5a:30:40:ba:30:90:d9:8e:c3:cd:16:f2:0e:6f:5e:
         2a:fd:79:32:dd:f4:e5:f8:11:23:d8:b3:ca:e0:9d:3c:2c:84:
         eb:65:f5:74:e6:38:81:d3:97:23:1c:a4:9f:b2:8d:43:fd:af:
         60:ad:49:8e:11:91:ac:3d:b7:15:f8:be:fd:71:cd:47:a6:f9:
         c2:0a:b0:5a:71:61:8f:12:e7:a4:1d:8b:57:6d:7a:20:e1:ad:
         f7:36:da:0f:b8:88:09:f0:d4:55:09:63:42:9b:45:60:4b:5d:
         74:d8:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:37:41 2026 by rpki-client