Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File:                     nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier:          SVuv+kX6uwP0dMNdfogiRX2S4ko6J73TDUst50LvrxM=
Subject key identifier:   86:87:5D:65:AD:D4:B4:8F:2A:7B:BD:47:0A:EF:B1:03:80:4B:47:69
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer:       /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial:       019FF9B60E2CAC072B1C1E76CE6F700EA10F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number:          1301
Signing time:             Thu 13 Aug 2026 06:01:25 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:25 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:25 +0000
Files and hashes:         1: 9g6pOYHufxn_OQfDKkRqzS5XeEk.roa (hash: wDN1atJFquIXsTNAwjLE+5ZKVEXzShSPCEpqiDwXD30=)
                          2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: U1NlACSnVhVtAJgN6NiSnwSuPkaU9Q72xZFhy32Xhog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:0e:2c:ac:07:2b:1c:1e:76:ce:6f:70:0e:a1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
        Validity
            Not Before: Aug 13 06:01:25 2026 GMT
            Not After : Aug 14 06:01:25 2026 GMT
        Subject: CN=86875d65add4b48f2a7bbd470aefb103804b4769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:70:4e:94:b7:39:37:b3:46:f3:8a:33:81:
                    11:6e:8b:96:89:ab:fd:4b:72:eb:cf:e3:97:7b:d0:
                    d3:29:e6:0b:32:03:1c:1b:f0:1a:8d:c5:ea:0f:0e:
                    ea:42:56:6c:dd:26:ca:4b:93:23:97:c4:a6:60:01:
                    13:3e:13:bc:b4:36:3b:67:28:67:fc:7e:27:e7:eb:
                    18:65:45:f6:14:87:c7:a1:8f:ad:b1:d5:32:02:78:
                    54:06:4b:b4:30:58:17:77:49:b5:2d:45:f3:c5:88:
                    03:0c:7a:c8:ae:ed:a6:b9:87:41:d6:d1:86:85:ed:
                    7b:e2:68:9a:0d:75:c3:a7:98:ab:fc:88:75:ee:9d:
                    9e:5f:6e:2e:a3:77:ba:21:e5:ed:dd:ef:8e:d5:2f:
                    4e:c1:91:4e:c3:89:17:50:07:1e:78:0a:9c:09:6d:
                    a0:d6:c6:22:d6:97:f3:26:f4:dd:56:14:80:25:3d:
                    f8:d7:1f:5b:74:38:17:3f:bc:9e:a9:5c:43:c2:2d:
                    e0:33:a9:07:f0:24:a5:0d:12:56:d5:bf:4e:11:17:
                    4e:bf:54:dc:7d:16:c7:ea:fe:3e:8c:79:79:26:a3:
                    b7:eb:2a:1c:95:2e:68:de:fd:47:05:f8:c9:fa:8d:
                    4d:0f:79:b6:45:87:77:a9:ad:a0:b0:15:bc:78:95:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:5D:65:AD:D4:B4:8F:2A:7B:BD:47:0A:EF:B1:03:80:4B:47:69
            X509v3 Authority Key Identifier:
                keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:3e:18:db:c9:c6:4c:61:2e:4e:ac:b4:13:0c:1d:ad:b4:
         94:b5:15:b9:5b:5f:9b:95:70:0b:ec:45:e7:54:43:11:1b:4e:
         59:75:26:43:b4:fa:a5:54:56:24:00:56:e1:4c:a5:69:56:0d:
         26:89:6c:46:97:fd:d5:3d:7e:58:c6:c2:9a:fb:04:5a:52:1b:
         29:e6:ee:97:2f:97:f3:11:f1:80:43:37:d9:b6:ae:a7:ba:ca:
         0e:7d:8f:27:08:18:bf:f8:bf:9e:fa:79:ea:f1:ce:45:96:ea:
         9d:56:91:bf:59:01:18:ea:c0:4d:37:25:f6:71:26:8b:f3:f6:
         66:b7:8c:69:ec:3d:e3:f9:30:4c:99:f1:30:32:66:09:dd:53:
         9e:c1:d5:3f:3c:e2:f8:17:ea:fd:04:4f:8f:9a:60:d6:75:02:
         06:a0:af:6d:5c:b7:da:e4:94:38:7c:c0:ca:e5:6b:ba:4f:18:
         6f:95:47:6c:64:d2:4a:1b:f8:c2:e5:3b:9b:0f:01:29:bc:4a:
         cc:f8:35:15:a2:40:bb:56:4c:ab:73:66:7c:f6:11:9c:4b:87:
         f0:9e:e6:97:0b:eb:e9:40:8e:f1:8f:e1:87:0c:b8:a9:f9:f8:
         fa:3f:29:b9:88:9d:90:48:a5:6d:ef:dc:a7:04:c2:6c:b2:4e:
         95:98:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:51:40 2026 by rpki-client