Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          EZIbZjcyC71M/uSODv9iGIk7UcQHBhQFNy+tNiFaBdM=
Subject key identifier:   83:AC:31:C3:0A:F3:8A:02:D6:12:ED:BD:9F:DE:D5:71:E2:07:2B:FF
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       01A12C8DC9E1F32967C5A280AC46C85948A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          1053
Signing time:             Sun 11 Oct 2026 20:00:52 +0000
Manifest this update:     Sun 11 Oct 2026 20:00:52 +0000
Manifest next update:     Mon 12 Oct 2026 20:00:52 +0000
Files and hashes:         1: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (hash: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=)
                          2: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (hash: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ=)
                          3: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (hash: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=)
                          4: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: cPfacC/6y/XyVPNUnNnSAL9FiGfrZsFA7VD3lrzXvTU=)
                          5: piHfYItCMRZJoIEsDJ__Qf2pGaA.roa (hash: RezZZPRB2YkkE5M8DiOZbDxcJLsNR31nGSqMJCGciug=)
                          6: rkgYpLaSooeAeaPc6HeDMNwsGSE.roa (hash: dwK5xzYUrSSoaqAtejdAj3gsVAadyZPLwc0zD6SmFNo=)
                          7: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (hash: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:8d:c9:e1:f3:29:67:c5:a2:80:ac:46:c8:59:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Oct 11 20:00:52 2026 GMT
            Not After : Oct 12 20:00:52 2026 GMT
        Subject: CN=83ac31c30af38a02d612edbd9fded571e2072bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:c3:47:6d:b7:83:a6:dc:4a:34:2a:9e:25:
                    fa:0d:bb:aa:45:22:b5:95:2e:cb:7a:c7:56:ed:11:
                    5f:5d:15:00:e8:a0:26:c9:e2:94:cd:9e:fc:51:ba:
                    ff:e8:ce:24:ca:36:bf:99:30:8d:a1:14:4d:9e:19:
                    2b:1c:d8:ad:e9:60:7a:cb:f0:22:8f:e7:bd:20:cd:
                    7e:11:a1:ca:93:13:2e:fa:7a:13:e6:02:76:4d:78:
                    fe:0f:3f:bf:15:e9:18:ae:b8:ff:d9:b3:85:95:a1:
                    0d:66:a3:79:a7:24:ba:f8:c6:39:70:b9:9c:e5:6f:
                    c3:65:07:86:a5:73:59:2a:31:69:54:1c:c7:fe:bb:
                    d8:82:bf:32:01:19:d4:7a:9d:d2:fd:8a:7c:3b:ae:
                    3e:d6:f1:0f:af:95:cc:83:9a:5f:da:e9:3f:98:84:
                    a3:05:94:27:33:f7:00:cd:03:fb:42:18:f4:dd:83:
                    d8:ff:f8:d7:8c:2a:c6:92:6e:79:92:27:e3:f7:bb:
                    f8:be:2f:41:5b:6c:a2:65:01:d6:7a:bd:43:70:70:
                    87:d4:7b:17:ca:4d:ce:d4:91:d6:08:8e:b5:8e:4a:
                    56:44:c4:dc:32:79:d2:77:59:9c:55:84:f7:41:66:
                    d2:b2:01:0d:d6:17:54:1b:bb:3d:75:78:f3:20:28:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:31:C3:0A:F3:8A:02:D6:12:ED:BD:9F:DE:D5:71:E2:07:2B:FF
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:32:5d:62:46:f9:b2:c1:3c:7f:20:0d:ef:ec:8d:e0:78:
         c7:73:bb:48:a1:23:a7:8c:e2:0c:a5:2a:e7:ec:e9:c3:30:58:
         7c:e4:73:c7:06:fd:22:9e:e1:6a:50:6c:5b:1d:9d:37:9b:31:
         00:88:16:7e:03:11:64:c9:80:43:7a:99:46:49:43:de:31:f2:
         b2:97:a8:37:15:b0:9d:26:e6:cf:96:56:7b:7c:6f:e4:35:9b:
         e6:d2:ee:79:28:e3:b0:97:d0:1b:1a:d2:7f:0e:45:d1:0c:94:
         40:87:05:28:f2:a0:fc:a1:20:76:fd:c8:d8:99:57:50:86:76:
         79:eb:54:d5:a8:c3:d3:e9:14:07:a0:29:0c:3e:1d:f4:f5:b7:
         c8:f3:0f:e6:b4:8d:42:ab:0e:97:bc:0d:26:37:18:17:4c:e4:
         74:07:0b:6e:fd:e7:73:b7:24:c9:4a:01:35:27:b2:b4:a2:09:
         d7:3c:75:8d:ea:e7:49:6b:03:7c:67:11:90:20:cf:b0:b5:7e:
         7d:1d:f4:6e:62:27:d1:34:e9:ee:4c:79:6a:d5:ba:29:e4:21:
         d8:a4:7d:c7:18:de:9f:2a:74:39:c7:df:09:fb:0b:a2:69:cf:
         8d:50:f9:7c:c9:e4:44:35:77:66:14:5d:d4:58:ac:75:e9:db:
         6b:77:e9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:13 2026 by rpki-client