Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
File:                     nRsJrQnDR1asNA3Y6hSRqMf8toc.mft (raw, json)
Hash identifier:          0+b1FyMJo8Dm4BecU20tjBduERUf0OgK+O/apxk6gBo=
Subject key identifier:   76:34:2C:9C:E2:E6:41:94:75:F8:74:C3:C9:3A:AE:CF:78:7A:F0:B9
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Certificate issuer:       /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial:       01A15D0C5C550ED4446B8335378173A694C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
Manifest number:          012E
Signing time:             Wed 21 Oct 2026 06:00:53 +0000
Manifest this update:     Wed 21 Oct 2026 06:00:53 +0000
Manifest next update:     Thu 22 Oct 2026 06:00:53 +0000
Files and hashes:         1: nRsJrQnDR1asNA3Y6hSRqMf8toc.crl (hash: wSmEzPapx96a50N70Lr28ot9AXxMIJQPaHKWmkAwkEs=)
                          2: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (hash: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:0c:5c:55:0e:d4:44:6b:83:35:37:81:73:a6:94:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
        Validity
            Not Before: Oct 21 06:00:53 2026 GMT
            Not After : Oct 22 06:00:53 2026 GMT
        Subject: CN=76342c9ce2e6419475f874c3c93aaecf787af0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:c9:04:e2:bc:f0:42:47:a3:c7:c8:9f:2b:
                    80:76:03:7b:89:14:ea:79:b7:14:3a:d3:71:48:77:
                    24:15:70:05:42:24:ee:d4:81:a2:96:7a:cc:bc:77:
                    5e:34:9f:0f:c4:29:8b:9e:12:a2:8d:08:5d:35:8e:
                    e1:d9:00:31:f6:1f:da:b7:df:9a:38:90:d7:1c:5e:
                    af:1f:27:0e:88:e3:81:a9:cd:0f:e6:7d:ad:0f:8e:
                    2c:8e:7f:0a:22:af:82:c0:d8:9f:32:ab:e4:e7:a8:
                    3f:25:43:b4:3b:cc:a4:44:84:cd:61:99:29:bf:46:
                    f5:3a:01:77:92:9f:01:47:7c:82:5b:f5:03:01:12:
                    4c:05:06:d8:77:a9:17:85:33:ae:88:af:75:9c:a9:
                    bf:cb:e4:77:2f:e1:2c:bc:b4:96:a4:82:83:bd:27:
                    0b:09:34:54:b5:d9:16:01:99:9d:6f:cc:28:7b:c8:
                    f3:3a:b9:9e:7a:60:5c:cd:2c:95:29:e6:5f:e6:b5:
                    60:ee:ca:dc:8d:5c:ba:24:14:40:fb:8c:2a:d4:60:
                    53:77:26:11:56:59:54:59:07:e1:c4:34:f3:be:30:
                    a5:be:9a:9c:27:0b:7a:9c:1e:21:24:67:d9:78:d4:
                    d2:26:6a:48:8d:86:ed:4a:19:84:43:18:3c:a0:10:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:2C:9C:E2:E6:41:94:75:F8:74:C3:C9:3A:AE:CF:78:7A:F0:B9
            X509v3 Authority Key Identifier:
                keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:e4:68:40:32:d2:9b:1a:e3:f3:f0:69:e3:f2:a8:f4:bd:
         6c:5c:59:e9:30:3a:31:53:c3:f7:68:2d:42:2d:6c:64:3b:0f:
         b7:13:d6:cd:40:d4:2a:4d:ab:5a:cc:93:1d:d7:02:11:ff:1b:
         a0:b0:a0:9a:c0:0d:4e:92:e2:98:87:88:44:02:2a:7b:31:9d:
         41:40:83:29:f1:85:1a:81:24:c6:43:c0:69:29:2d:9b:56:4f:
         8f:96:d6:dc:60:a3:bb:a8:4e:dd:ed:bf:67:b2:04:c4:b0:94:
         aa:de:e4:4e:34:69:72:66:37:87:e0:b6:43:f6:3d:11:6d:74:
         07:4f:c1:5d:44:6c:85:99:5d:aa:b1:eb:8b:5a:24:39:1d:fb:
         be:0b:32:80:d7:ea:eb:bc:3c:b4:30:c2:3a:b1:5e:ef:dd:c8:
         de:e0:00:ce:15:0c:14:9d:a5:9d:15:e0:43:0b:c6:c5:4e:88:
         cc:7c:3a:e3:98:dd:03:53:3e:e3:23:80:db:8a:92:19:a4:97:
         95:ef:28:ad:2f:a7:a5:07:8b:46:e8:fc:09:da:08:e3:a2:63:
         6c:4b:3f:ea:77:f1:b6:98:40:55:bc:33:cc:cd:5d:ad:b8:19:
         c1:23:a4:e6:8d:b2:9d:b4:e7:38:c5:a3:5e:67:35:b9:31:78:
         99:f7:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:16:22 2026 by rpki-client