Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File:                     97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier:          VkdBstCJMYXnoiW8ncJASMIZBCLjQbdTmvi5XSD+rYg=
Subject key identifier:   78:88:F7:9E:8C:20:5E:22:78:46:9E:42:22:79:33:66:21:5E:41:6B
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer:       /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial:       01A08E3204217A1C1A01A74FF093D61E5C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number:          0B1D
Signing time:             Fri 11 Sep 2026 02:00:37 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:37 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:37 +0000
Files and hashes:         1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: ZGaQLxznrW8t9VOviB4KoQBhxMaEdlKeGeYYGjsBeGA=)
                          2: EED8jCb4VbJslWOq8UPr8tNr3aA.roa (hash: yjwTF+aBKLvAeYWU6/tZkP3sQTuj3m2XXZAbp7NHWxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:32:04:21:7a:1c:1a:01:a7:4f:f0:93:d6:1e:5c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
        Validity
            Not Before: Sep 11 02:00:37 2026 GMT
            Not After : Sep 12 02:00:37 2026 GMT
        Subject: CN=7888f79e8c205e2278469e4222793366215e416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:f0:61:49:3a:bc:a2:2b:ee:77:6f:65:d3:
                    dd:fb:2c:c4:19:d0:39:ea:72:ea:4a:89:db:00:92:
                    e0:05:ae:12:17:4f:2f:12:29:1f:5b:4c:e9:7c:6b:
                    70:87:e2:86:f7:9f:5a:d4:c0:bf:d3:f9:cc:b1:d8:
                    a1:8a:68:36:9e:3c:28:d6:2f:2b:03:ef:9e:8c:66:
                    a8:31:af:bf:2c:b0:f8:1d:2a:e9:63:f4:44:5b:b6:
                    02:93:02:d7:b7:f9:6a:57:69:cf:db:27:c3:15:f9:
                    5c:87:2e:dd:c3:b3:2c:7d:0d:5a:1c:7c:8f:54:d7:
                    f3:af:e0:17:aa:81:d8:0d:95:59:2b:e3:2c:96:df:
                    eb:aa:60:fa:a1:1a:8b:af:e9:1d:52:c1:cd:b1:c9:
                    97:b3:b0:48:61:30:10:9f:8f:a1:e5:da:bf:1c:ba:
                    5a:be:15:5d:63:3a:a2:e6:db:a9:91:f2:2f:e8:84:
                    60:5a:e6:e6:0b:1c:cb:4b:ea:a7:cd:48:42:6f:a4:
                    43:f3:e0:14:01:6e:d5:3a:d1:46:3d:4c:44:f4:36:
                    e9:29:6e:00:22:0f:b4:00:e9:96:cc:23:4a:77:86:
                    17:32:14:11:0a:d6:bd:b1:0e:c2:b3:02:01:1d:6c:
                    98:39:bf:b6:8f:55:8f:3b:c8:2b:ff:31:20:5e:84:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:F7:9E:8C:20:5E:22:78:46:9E:42:22:79:33:66:21:5E:41:6B
            X509v3 Authority Key Identifier:
                keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:4c:1f:3b:fb:17:8c:cb:0b:f2:ed:9b:49:56:56:40:03:
         10:14:8e:40:84:aa:77:93:91:3f:e3:3e:4b:fc:0b:7e:52:e4:
         7f:89:13:8a:bf:5d:24:61:5b:9e:75:a3:f2:44:86:29:6d:c5:
         5f:5e:41:59:35:0d:a9:0a:05:47:de:79:4a:8b:e8:0c:68:78:
         c0:59:4a:8f:ef:28:64:27:d7:f2:d1:47:9d:e0:e7:03:5c:f6:
         b0:4a:b8:2b:e4:ab:59:51:9d:63:6c:ba:aa:a7:00:34:b7:7c:
         10:db:12:ae:18:72:53:f0:03:1d:41:dd:ac:42:ce:77:33:af:
         39:f5:bf:3f:27:d6:28:08:1a:9f:00:0e:87:90:73:1a:c1:f5:
         b5:0d:c5:7e:e0:ea:a9:53:bf:55:b0:b4:c7:9f:33:ab:c1:d9:
         2d:f4:ac:8c:1f:0d:ca:9b:28:c5:70:7e:d8:80:bb:a1:0e:fb:
         7e:0c:37:31:e4:22:87:a6:35:c5:f0:a7:57:63:86:00:d7:e5:
         3d:63:36:4c:17:bb:f8:66:70:de:b5:f7:6e:66:b1:79:fc:e8:
         89:12:b3:18:34:84:1d:64:fa:0b:a8:fc:49:32:0d:40:61:6b:
         66:bb:97:f4:80:ca:72:49:d5:3a:38:20:99:99:e3:94:cf:ea:
         e3:22:c6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:28 2026 by rpki-client