Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
File:                     nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft (raw, json)
Hash identifier:          0xwOdyIUrlKtxScoC56Hpa6HDbHRwqBvJ6lphpS5ncM=
Subject key identifier:   50:9F:2A:C4:70:1C:B8:5E:64:19:5A:D3:B0:D5:25:03:DB:9E:AA:F5
Authority key identifier: 9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
Certificate issuer:       /CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Certificate serial:       01A08B9F3FF93F75A71905262E2719333322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
Manifest number:          B6
Signing time:             Thu 10 Sep 2026 14:01:04 +0000
Manifest this update:     Thu 10 Sep 2026 14:01:04 +0000
Manifest next update:     Fri 11 Sep 2026 14:01:04 +0000
Files and hashes:         1: L0tuCjuCLhjPSF5HtdtxLxQpvLk.roa (hash: 9nbYmoJhoa2yk/1ARwX2HbvkSwOAKvIa7oZoUwwmhUA=)
                          2: nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl (hash: BH7M5MhVlWT0Q2qpkZUrkulmp96eyuaqhYgrEorNbvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:3f:f9:3f:75:a7:19:05:26:2e:27:19:33:33:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
        Validity
            Not Before: Sep 10 14:01:04 2026 GMT
            Not After : Sep 11 14:01:04 2026 GMT
        Subject: CN=509f2ac4701cb85e64195ad3b0d52503db9eaaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:9a:d9:60:d0:b4:d6:5f:4c:e3:dc:81:3f:
                    86:3e:ae:6c:a2:d2:c7:8e:d9:5a:c3:23:3b:f0:47:
                    b0:83:6a:9f:cd:a9:71:c6:76:f0:f3:c7:78:9f:70:
                    f3:01:e6:bc:e6:ba:6c:0c:a6:2b:42:d2:3a:80:22:
                    d6:95:47:8b:9c:1a:60:5d:4f:50:b2:d2:4c:27:5b:
                    4a:5e:8a:da:c2:3f:c2:46:2a:8e:5b:ee:5e:1c:8a:
                    f1:3d:22:77:d9:c4:00:e5:9b:6f:e7:79:b8:01:20:
                    62:7e:ac:5e:f3:71:dd:ec:46:2f:9e:75:1c:c8:a1:
                    af:d4:a0:c9:bf:b9:fb:bc:6c:3e:99:49:83:ce:0f:
                    73:6b:f8:29:cd:99:6a:91:51:61:7b:f3:4c:e7:21:
                    0c:eb:e1:e6:f2:e1:f5:1a:92:f6:34:80:b7:de:da:
                    f4:1e:aa:77:a9:d0:52:d6:96:a6:41:1e:fe:2d:5d:
                    9e:17:d9:f0:9e:2e:7e:96:bc:1c:9d:5b:a4:d8:3a:
                    e0:88:12:51:8c:42:09:24:e6:3e:50:f3:16:a8:99:
                    a9:34:14:c3:af:0f:de:b8:d0:e5:f5:53:72:30:8b:
                    63:f6:4b:4d:38:3e:c8:db:3b:86:86:34:2d:8f:dd:
                    3e:36:6d:fd:97:0b:2f:70:f5:cc:1b:8a:1c:82:73:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:2A:C4:70:1C:B8:5E:64:19:5A:D3:B0:D5:25:03:DB:9E:AA:F5
            X509v3 Authority Key Identifier:
                keyid:9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:a1:1d:59:43:cc:4c:b5:43:b4:54:54:02:0c:42:a5:b4:
         48:76:1d:23:b8:0b:2c:5a:06:91:18:16:5a:ec:e0:2f:34:8f:
         13:88:4b:00:5f:b4:de:54:92:8f:03:06:4c:83:e4:d4:c8:be:
         e9:a1:13:33:0b:98:48:bf:b4:24:7d:78:42:e3:7d:e1:df:a9:
         c7:1f:c7:c7:10:f8:7c:c7:40:5c:48:4f:e2:69:0f:13:e1:03:
         b3:50:05:61:2c:5a:58:59:a2:ef:02:99:45:24:d8:21:a0:3b:
         de:42:b5:7f:39:c4:6c:c3:6c:fa:22:13:da:ab:80:83:8c:bf:
         69:9d:c4:3d:71:c1:c3:3b:0f:8c:43:52:8e:66:fc:73:e9:91:
         c0:42:e0:11:f7:53:f8:77:e2:61:b4:05:b8:98:a9:9e:c8:59:
         b5:51:fa:d6:f7:06:b0:ce:5d:72:a1:6a:67:e1:39:64:2e:c6:
         cd:91:81:b6:e4:0b:fd:04:3e:71:85:4d:8a:b0:69:1f:fd:3f:
         0d:ff:04:13:d0:e1:ef:fd:15:37:20:ab:ca:70:39:cc:5c:c9:
         44:aa:f8:c6:aa:e8:de:52:8c:c9:59:d5:14:df:ad:94:ab:99:
         20:b7:ab:36:81:cf:bc:bc:cd:93:e9:af:81:6f:31:5e:14:1a:
         ac:e1:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:05:59 2026 by rpki-client