Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          ss83glf8jH52zhOqPaSfd2PO+HM4V0wPL9aKnDm3AuA=
Subject key identifier:   F9:92:07:65:39:5C:6E:A6:CF:10:D9:B3:FD:E1:48:B5:10:AC:7B:E8
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       01A08A8C790702058A38B0BB9231BC326F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          0740
Signing time:             Thu 10 Sep 2026 09:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 09:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 09:00:56 +0000
Files and hashes:         1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
                          2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: xSCDQJ7eI++1Z4q6shvGOvKSs+5gV4SKxMbYxKK0egc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:79:07:02:05:8a:38:b0:bb:92:31:bc:32:6f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: Sep 10 09:00:56 2026 GMT
            Not After : Sep 11 09:00:56 2026 GMT
        Subject: CN=f9920765395c6ea6cf10d9b3fde148b510ac7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:ea:2d:3f:85:03:c1:b0:67:f7:9d:98:b0:
                    0c:93:ac:c4:a9:de:b1:12:68:4b:3c:a3:20:30:e6:
                    af:61:64:7a:57:4e:50:d3:30:1d:f6:b9:b0:f2:d4:
                    20:b0:0c:a2:05:67:d3:c1:0f:53:97:9c:86:85:b5:
                    99:da:e8:f7:02:b9:c2:03:0e:da:f1:e9:97:d9:72:
                    21:7d:6c:5e:e5:74:1b:8b:96:40:c1:08:3a:07:cf:
                    27:33:16:4e:f8:61:52:ea:6c:45:d9:21:37:c5:01:
                    c2:4a:dd:fe:d3:4d:fe:33:60:a6:53:3e:5f:9c:f7:
                    6b:f3:47:6e:87:2b:4c:42:0f:4d:98:39:96:ce:9b:
                    62:9b:00:ac:7a:ea:c8:58:55:49:42:03:d9:c3:50:
                    3e:87:80:56:ed:28:c2:47:81:b5:cf:14:64:6d:d8:
                    99:07:e6:23:38:b3:e1:64:03:38:1e:fe:48:5f:2e:
                    12:83:52:0a:52:ae:1e:43:7b:90:da:f5:af:05:ac:
                    30:e5:17:a2:33:c4:c3:e0:f5:04:f3:7f:26:68:fa:
                    43:72:4a:6d:c8:1e:49:19:92:94:68:66:4f:f1:01:
                    d2:27:5f:c2:e0:4b:35:06:e7:f6:a7:14:3d:77:97:
                    2b:dd:e2:9a:83:a4:32:6e:bd:32:23:90:e0:bb:31:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:92:07:65:39:5C:6E:A6:CF:10:D9:B3:FD:E1:48:B5:10:AC:7B:E8
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:79:82:31:cf:be:3e:48:80:5c:28:c5:96:e4:6c:27:86:
         0c:32:3c:9a:76:bc:06:72:c8:c9:b2:18:f3:3c:52:14:c9:b8:
         19:9c:c4:7b:e6:f2:3e:98:5e:7f:97:db:67:92:f6:9d:58:2a:
         e9:d2:30:ca:30:e0:ed:fc:61:0b:dc:62:66:64:e8:50:e9:84:
         e1:dc:cc:fa:7d:b4:3a:91:38:c3:e9:92:b9:99:73:ca:09:23:
         59:6c:a9:a1:22:46:07:20:2e:6c:29:ad:0c:a2:27:e8:38:aa:
         ac:09:b1:f8:6a:44:38:41:86:88:d2:2b:3c:1a:fc:0a:af:d6:
         aa:5a:35:49:c9:7e:07:49:91:cf:99:8a:39:49:cd:92:a6:33:
         bc:84:e1:eb:6f:7f:02:62:ab:02:86:4f:d0:14:19:25:df:23:
         d2:2c:d6:5b:a8:66:fc:c1:95:39:0b:54:d5:78:b7:4a:72:38:
         c2:e1:8e:a9:53:5c:0c:0f:a4:b4:be:8e:52:f3:93:67:de:5d:
         f9:a5:c8:b3:b2:0d:6a:23:dd:ed:21:c3:cf:79:e5:77:74:4b:
         98:c2:a6:10:19:82:2a:4c:58:89:38:cd:2e:3b:e8:39:fa:52:
         45:19:34:0c:ea:af:db:e8:ad:e1:67:72:71:a6:b5:e4:e0:17:
         91:a9:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:22 2026 by rpki-client