Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          l66qXaLvhJ4Vj4+oZK5AU4YKSeorjkT6lIadaPX836M=
Subject key identifier:   6E:61:AC:46:EC:35:E0:1E:80:AC:18:8E:45:55:80:90:CC:81:00:75
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       01A0B199BC59AC21FB944E0EB07DB674AA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0C17
Signing time:             Thu 17 Sep 2026 23:00:37 +0000
Manifest this update:     Thu 17 Sep 2026 23:00:37 +0000
Manifest next update:     Fri 18 Sep 2026 23:00:37 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: gI/CbPMderlSgM2YP7II6FnpS07D4HNNaKicn1Bn1lU=)
                          2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b1:99:bc:59:ac:21:fb:94:4e:0e:b0:7d:b6:74:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Sep 17 23:00:37 2026 GMT
            Not After : Sep 18 23:00:37 2026 GMT
        Subject: CN=6e61ac46ec35e01e80ac188e45558090cc810075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:79:76:e4:03:50:3b:95:20:93:4a:db:99:
                    9a:d8:da:c9:26:64:e0:4e:80:4d:5c:76:6f:29:dc:
                    af:f1:56:82:06:91:14:3a:1b:ba:c4:fb:47:36:5b:
                    68:fa:bb:b9:e7:50:08:eb:19:92:ad:0c:d7:7a:bb:
                    e4:79:e9:1d:74:bc:40:3f:28:6a:dc:77:90:e6:a8:
                    31:f8:35:87:38:4c:23:1f:84:f6:3b:5d:6e:e9:ab:
                    d4:b2:d5:68:8b:af:88:96:4a:af:65:9c:18:16:7a:
                    1a:26:9e:e1:5d:87:1b:24:d7:bb:ed:e9:95:61:84:
                    ea:a7:6b:97:63:22:1b:a6:3d:4c:e6:ca:1d:29:63:
                    10:f3:3e:ec:5e:8c:71:28:1b:50:80:46:32:04:ab:
                    c4:e6:f7:20:ed:07:85:fa:d3:59:62:01:05:4d:ab:
                    ae:c6:aa:f4:10:f4:b1:b9:9c:95:ae:bf:1c:40:6c:
                    80:3e:44:18:45:d1:43:1a:d0:f2:07:82:39:3c:6e:
                    aa:18:fe:12:f4:16:68:d8:f9:9b:b7:91:53:f5:be:
                    8a:38:ca:51:0f:80:5b:16:ab:8d:fc:76:3e:7d:30:
                    96:ee:1b:5c:0c:68:34:11:2c:a3:94:71:23:4d:8f:
                    96:14:99:aa:a4:ed:68:ef:00:0a:c0:b1:c4:88:81:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:AC:46:EC:35:E0:1E:80:AC:18:8E:45:55:80:90:CC:81:00:75
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a6:7d:4d:64:1f:a4:9d:b4:7c:66:db:dd:3d:8d:ab:e7:98:
         e4:57:4e:c3:af:12:d8:8c:03:bd:77:40:8a:2e:ff:76:4c:37:
         01:be:4d:75:b1:3a:da:1a:13:e2:99:d1:da:f2:e6:82:71:82:
         38:71:53:1d:77:05:25:ff:c3:33:9b:e5:8e:10:0e:a5:b9:4b:
         29:7a:ae:0a:8b:dd:d3:16:9e:59:1f:e9:b1:e8:fb:57:42:10:
         4c:30:10:1b:1d:6b:76:23:75:d2:28:86:92:5d:19:37:94:e6:
         95:14:4a:08:53:1a:85:8b:34:4e:7e:47:84:f4:e4:c0:25:79:
         ba:d2:95:0e:3b:07:e8:45:fb:b3:8e:03:6b:1b:85:bb:e0:21:
         7c:b5:32:6a:65:35:ca:40:cc:35:f3:b9:67:d6:4e:c3:66:2a:
         76:d5:aa:c0:da:e2:94:83:ad:d8:ed:18:9e:c0:09:3c:1c:70:
         e8:77:21:25:89:09:46:f6:8a:af:63:16:32:6f:f7:04:b9:47:
         60:16:e9:72:df:f4:29:3f:ce:e9:62:f8:17:e7:47:c5:25:7e:
         d3:bb:77:1d:38:94:d2:2f:3b:2d:26:6e:4a:98:ce:b0:5d:2d:
         54:3e:aa:d1:29:01:83:3d:21:ab:85:14:29:4b:13:2c:33:cd:
         bb:04:49:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCxmbxZrCH7lE4OsH22dKpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjYwOTE3MjMwMDM3WhcNMjYwOTE4MjMwMDM3WjAzMTEwLwYDVQQD
Eyg2ZTYxYWM0NmVjMzVlMDFlODBhYzE4OGU0NTU1ODA5MGNjODEwMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ55duQDUDuVIJNK25ma2NrJJmTg
ToBNXHZvKdyv8VaCBpEUOhu6xPtHNlto+ru551AI6xmSrQzXervkeekddLxAPyhq
3HeQ5qgx+DWHOEwjH4T2O11u6avUstVoi6+IlkqvZZwYFnoaJp7hXYcbJNe77emV
YYTqp2uXYyIbpj1M5sodKWMQ8z7sXoxxKBtQgEYyBKvE5vcg7QeF+tNZYgEFTauu
xqr0EPSxuZyVrr8cQGyAPkQYRdFDGtDyB4I5PG6qGP4S9BZo2Pmbt5FT9b6KOMpR
D4BbFquN/HY+fTCW7htcDGg0ESyjlHEjTY+WFJmqpO1o7wAKwLHEiIF7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5hrEbsNeAegKwYjkVVgJDMgQB1MB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaZ9TWQf
pJ20fGbb3T2Nq+eY5FdOw68S2IwDvXdAii7/dkw3Ab5NdbE62hoT4pnR2vLmgnGC
OHFTHXcFJf/DM5vljhAOpblLKXquCovd0xaeWR/psej7V0IQTDAQGx1rdiN10iiG
kl0ZN5TmlRRKCFMahYs0Tn5HhPTkwCV5utKVDjsH6EX7s44DaxuFu+AhfLUyamU1
ykDMNfO5Z9ZOw2YqdtWqwNrilIOt2O0YnsAJPBxw6HchJYkJRvaKr2MWMm/3BLlH
YBbpct/0KT/O6WL4F+dHxSV+07t3HTiU0i87LSZuSpjOsF0tVD6q0SkBgz0hq4UU
KUsTLDPNuwRJxA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 02:28:41 2026 by rpki-client