Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          rhqYSrtVhI0Usr533KaoGCLpUv70x+HgYjSMvrTM1+s=
Subject key identifier:   9B:38:7E:0C:A1:79:C7:0A:5D:4C:8A:87:2D:42:E6:C4:58:3D:ED:C6
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       01A0A9E0530BF437D35BA92928B88BD8A423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1A64
Signing time:             Wed 16 Sep 2026 11:00:45 +0000
Manifest this update:     Wed 16 Sep 2026 11:00:45 +0000
Manifest next update:     Thu 17 Sep 2026 11:00:45 +0000
Files and hashes:         1: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: fvAqUdCp19+cWz4O2AD0Xu75OMYUAXQx563o722pn4M=)
                          2: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
                          3: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
                          4: rQnQSbd7o9-OvIgKv8h__OmAsEY.roa (hash: ZDErkXEmgB/Etshg0U0eYbGFMJVBShvWYxaaJXM10Z4=)
                          5: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a9:e0:53:0b:f4:37:d3:5b:a9:29:28:b8:8b:d8:a4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Sep 16 11:00:45 2026 GMT
            Not After : Sep 17 11:00:45 2026 GMT
        Subject: CN=9b387e0ca179c70a5d4c8a872d42e6c4583dedc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:9d:70:a0:30:cd:57:45:0a:23:a3:98:94:
                    20:e4:9e:be:d4:e1:cb:f7:fc:5b:7f:6f:45:d4:e6:
                    91:72:90:75:23:ef:06:58:e4:8a:41:97:e8:64:d0:
                    0b:8b:1d:c3:ff:c9:33:f8:9a:da:ce:90:66:cc:9c:
                    96:1b:67:83:93:51:60:cf:57:a5:d8:27:30:72:25:
                    d9:d0:67:9a:25:6c:2a:d1:3f:b9:b6:1f:2f:0d:da:
                    e8:1e:ae:3d:d1:03:11:11:ef:9a:a7:4a:d3:e7:41:
                    03:4d:4f:67:18:65:ff:eb:7e:dc:3b:ca:2c:c4:0e:
                    d6:70:5b:fb:7d:dd:b2:3c:20:ef:ad:c3:a9:33:a0:
                    0b:0a:89:51:c9:07:dc:90:b1:f2:7f:53:ed:5b:2b:
                    c8:1f:32:e9:db:01:b8:50:6c:f5:dc:9d:49:2d:64:
                    79:84:38:88:c0:88:2e:29:59:fc:50:3d:e1:a1:c5:
                    67:96:e1:f3:8a:dd:bb:8a:cb:f8:59:be:64:76:1b:
                    b6:22:bc:61:ad:bb:b2:19:62:ea:8d:af:d2:53:8b:
                    7d:19:cd:aa:35:5a:80:65:ab:08:fe:dd:19:d0:b1:
                    2c:0e:ce:60:3a:c4:c7:5a:88:11:35:c4:b7:47:9a:
                    ce:23:93:34:ae:9f:a8:55:f6:6f:1d:01:ff:d6:88:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:7E:0C:A1:79:C7:0A:5D:4C:8A:87:2D:42:E6:C4:58:3D:ED:C6
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:1a:b3:1f:2d:e1:e3:1f:2a:d6:5f:78:0c:83:94:9e:8b:
         91:fa:b2:5c:a1:d8:bf:52:9d:62:5f:b4:8e:1a:6c:9a:84:36:
         49:08:42:84:49:8f:bf:8f:d5:72:2a:06:75:3c:e1:e4:13:98:
         c1:71:fa:57:41:77:27:74:a8:f5:13:76:7e:e4:de:da:ed:b3:
         37:3a:e2:40:9e:ce:55:14:24:8a:42:6c:71:bb:15:a9:7b:ed:
         f5:ea:ac:08:48:07:e3:55:33:57:89:58:d8:43:a9:9e:ce:8f:
         18:32:dc:6f:e5:bf:51:9e:45:cd:09:63:e0:c8:d2:81:13:47:
         ac:7e:9b:51:6a:fc:85:2d:09:e5:b9:7d:ef:fb:0f:36:8d:63:
         ff:bb:9c:ac:54:62:8d:3a:e3:62:bf:20:73:3f:ae:6b:8c:9c:
         2b:dc:da:65:4c:e9:13:55:4f:d5:d8:d1:56:00:df:9d:d9:81:
         5b:ed:3a:90:3a:db:53:73:13:87:18:9a:6f:36:96:d5:21:82:
         da:98:e1:1f:c0:6a:07:54:91:54:dc:a7:f8:36:49:9c:63:0b:
         65:04:8d:ca:19:89:f2:b3:d7:32:28:69:78:9b:3e:a2:45:68:
         70:51:6b:b3:e3:53:07:b8:bf:90:12:e4:3b:72:ef:c9:21:67:
         82:3b:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 16:02:26 2026 by rpki-client