Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          hdUMU5T72lt3d6uHPPqXkkMY62D3tj9OlW8NW9+MNDU=
Subject key identifier:   99:76:BE:51:D9:14:14:D9:C6:2F:3D:C8:EF:6F:20:49:33:EF:1B:A4
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01A18BD3079DAB8C65A496600811D190DCE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          1ACC
Signing time:             Fri 30 Oct 2026 08:00:25 +0000
Manifest this update:     Fri 30 Oct 2026 08:00:25 +0000
Manifest next update:     Sat 31 Oct 2026 08:00:25 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: kpop8WtW+Rz/yryPatUnWYxGgc6wKA/2VdTeKcaxYRg=)
                          2: ahNLR_0oS-0t1YKVBOVdbZiSYPY.roa (hash: fNNDUa3v8ykCEP/CD6DhZGRwmawCEdvB1zOAi4jYge0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d3:07:9d:ab:8c:65:a4:96:60:08:11:d1:90:dc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Oct 30 08:00:25 2026 GMT
            Not After : Oct 31 08:00:25 2026 GMT
        Subject: CN=9976be51d91414d9c62f3dc8ef6f204933ef1ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:76:22:7d:b3:dd:c0:b9:31:2f:70:f7:75:
                    ed:3b:90:26:8f:8c:11:d4:a9:a1:3f:41:f7:a8:11:
                    61:11:e4:0e:89:9b:c5:2d:f5:a7:62:18:3c:2c:c2:
                    93:cf:d8:6d:d0:b6:ef:b0:34:b3:96:df:4e:d1:7b:
                    a3:70:53:7a:fc:80:6c:90:8a:1e:7c:5b:bd:6f:f0:
                    56:6e:22:57:bb:f4:2e:20:67:49:0d:a3:29:df:04:
                    ea:3b:10:dd:76:7b:0a:94:4a:71:06:f5:0b:81:d9:
                    a5:f4:f3:78:f9:df:bc:6e:54:29:d1:4f:fd:a3:a3:
                    92:21:58:d1:2e:5e:50:32:fc:9b:5b:e9:2d:ca:f9:
                    ed:5c:8c:5b:3f:17:94:75:e3:83:58:fd:16:8d:06:
                    7c:cd:f2:4c:c1:ed:2d:dd:5c:5f:76:48:80:d0:37:
                    08:4d:c4:cc:a8:4e:f7:6d:0b:f7:5a:7f:9e:ef:a8:
                    22:73:8c:87:34:96:d6:c5:4c:26:50:77:23:fe:26:
                    8c:50:22:4c:6d:d4:53:eb:3f:22:6a:05:6c:4d:1f:
                    ea:4d:34:7f:b0:b6:c2:9e:2f:90:5f:ee:25:ec:23:
                    1f:57:57:31:9c:65:45:48:c9:13:f5:0d:fd:f2:65:
                    ce:bf:e5:8e:7d:c0:1d:03:86:dc:ee:13:15:fa:e9:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:BE:51:D9:14:14:D9:C6:2F:3D:C8:EF:6F:20:49:33:EF:1B:A4
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:4e:10:40:e5:1f:3e:ba:0e:ff:21:a9:a7:b2:1e:84:57:
         e9:22:a5:76:97:5b:27:63:57:f2:9b:c2:3b:7a:15:94:ba:37:
         3e:87:4e:84:19:e7:5a:cb:2f:c5:2e:06:8e:e9:99:40:8e:ce:
         1e:cc:86:46:f4:1a:79:a1:19:ba:0d:a4:23:f1:b1:50:10:a3:
         31:c1:36:f3:8c:f7:cc:67:a9:31:5d:b1:01:db:1c:3b:a5:f9:
         76:0a:47:d6:ff:2d:33:27:af:e0:e5:19:6e:8d:5a:3b:83:f0:
         9c:96:a5:3b:9c:fa:99:56:c6:8a:92:d1:d8:d2:a5:9a:bb:92:
         c7:54:e5:27:1e:71:f7:17:31:4c:52:d5:ae:97:cd:d8:8b:4a:
         72:fa:9d:46:4a:37:00:cc:10:a6:3f:61:f7:06:18:d8:4a:8e:
         fa:21:d9:fc:c3:ba:ba:63:f5:3d:68:0b:38:80:7d:52:c6:07:
         13:f4:d4:71:d1:a9:35:d9:dd:0c:71:4c:03:76:0d:70:9d:d8:
         76:ed:65:3c:d9:0c:7a:80:64:31:5e:fd:16:e0:02:d4:2a:4d:
         8e:24:0f:8e:2d:db:68:0e:f2:41:ad:39:d7:9f:93:f2:ec:4a:
         6c:59:f0:e4:1e:37:35:c5:2c:25:23:60:54:51:6c:f3:c6:da:
         14:0d:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:19:23 2026 by rpki-client