Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          BfiEveFN5rq6+Jw7JZUvIDR2LeT8OqIWzHopJvibT3w=
Subject key identifier:   61:B8:41:D1:EE:CF:A3:72:81:82:0A:9F:D3:12:16:D1:FC:A9:38:92
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       01A0DA292EEEA742BCBA7D643CE06F1C3CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          1A77
Signing time:             Fri 25 Sep 2026 20:02:07 +0000
Manifest this update:     Fri 25 Sep 2026 20:02:07 +0000
Manifest next update:     Sat 26 Sep 2026 20:02:07 +0000
Files and hashes:         1: E8tqgGls_idrTZuBqV9BquCiz3o.roa (hash: vdVKiL0mPT/WkeBXx2QcT7V9CByZB8/0+IekjVyDQ9g=)
                          2: QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa (hash: kp1CwaLzqr/s/iouj0Yw+AzVZxO6+NVySzklWCo6UCs=)
                          3: d71q5qv3VSjpx1CS3WscUppwd64.roa (hash: OevqVjTCs3/wWZ1yMZ43nseB2OKhmzpE8ZCb8GW131s=)
                          4: dltfgErKAVJhiBmKINA17o0-QCo.roa (hash: h63lR9XrHkLU6v+ibOR56TO6e1KLvDhOUG9IZ5RNy9k=)
                          5: hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa (hash: BBMPveKRndrvVUm7Cra4ibGzFpyOil4iXtzIOV4kIxg=)
                          6: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: zHDd0nsnjaAEJuE6LeXuybWTd02lFFCY4Nydgdsxb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:29:2e:ee:a7:42:bc:ba:7d:64:3c:e0:6f:1c:3c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Sep 25 20:02:07 2026 GMT
            Not After : Sep 26 20:02:07 2026 GMT
        Subject: CN=61b841d1eecfa37281820a9fd31216d1fca93892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:5c:68:66:5f:3e:94:13:f9:3f:88:43:87:
                    16:c3:ca:92:db:4e:be:e0:4c:4a:a9:4d:44:1e:31:
                    5a:a3:c0:3a:04:63:6d:49:0b:3e:11:1d:71:02:d1:
                    fc:f6:95:06:78:9c:e6:a1:29:e4:4e:5e:1e:8f:a1:
                    d1:54:9d:39:c5:7a:94:b2:c3:ef:24:46:6c:22:f8:
                    92:bb:49:91:32:ea:73:dd:8b:84:c5:a9:c7:55:08:
                    1d:da:bd:f2:ec:82:f0:e5:44:c5:f4:ad:4f:41:73:
                    fc:f3:8c:d6:0d:61:f4:c9:b7:78:88:ca:8d:e0:16:
                    b7:47:f1:77:82:ac:2d:c0:7f:47:b1:91:db:5c:e1:
                    4b:a1:44:a3:9f:e1:80:90:08:28:1f:6c:04:11:a4:
                    8e:0b:0c:74:1a:1e:42:65:d3:42:9c:ec:b5:2c:1e:
                    a1:c4:03:5c:20:ee:98:a7:ab:25:41:24:49:2e:da:
                    5e:45:e8:a2:37:97:fd:a5:06:54:f9:4f:7c:5e:41:
                    9e:fb:5d:ee:45:1b:c5:5c:8f:97:2b:5b:e8:2a:f1:
                    69:ae:39:29:47:ed:bd:41:4b:c3:77:11:70:70:da:
                    56:91:1e:6f:0e:fc:63:69:10:b3:76:3a:42:82:f2:
                    3f:d7:81:aa:bd:b5:91:8d:f2:45:d2:e3:d7:68:44:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:41:D1:EE:CF:A3:72:81:82:0A:9F:D3:12:16:D1:FC:A9:38:92
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:32:6f:cd:bc:79:f9:26:e5:5a:db:fe:d3:b9:59:e0:07:83:
         70:4d:92:a8:f8:94:24:be:ac:4e:ff:4d:7c:ea:92:d0:d7:de:
         bd:9e:ba:33:c0:3f:f8:6a:9c:67:ff:b5:4a:b3:5a:2a:9f:b9:
         63:4a:7b:22:0a:7a:76:60:c9:e3:c3:93:7f:47:89:42:80:b3:
         d0:77:6e:7c:ce:e7:17:0c:f1:74:1d:07:5a:f9:84:f5:1b:b4:
         70:22:58:d4:f8:31:f3:d1:4c:3a:00:91:34:ab:c9:79:79:55:
         3b:94:0e:1a:b0:c9:9a:2f:c2:50:04:b0:8f:97:f7:25:d9:db:
         5b:2a:20:d0:d2:15:3d:3b:d7:50:9f:4d:7b:a3:49:18:bb:23:
         24:df:7d:a4:19:58:dd:fb:06:11:c2:96:2e:0b:b3:84:5c:92:
         38:ea:6e:c7:e3:03:6b:b3:ab:34:67:b7:3e:43:cb:98:45:f5:
         3d:62:82:a9:82:15:5d:8b:55:5d:c5:9a:68:85:b2:76:bf:99:
         b5:26:a1:44:41:5b:03:92:55:13:87:ea:89:70:71:88:61:ae:
         f1:20:b3:d2:b3:9a:b6:e1:2a:7a:14:91:86:7e:5b:2b:e4:d6:
         4b:c3:13:4e:d5:38:f0:af:05:75:8b:00:bb:3c:d9:80:a0:1b:
         5e:c2:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:31 2026 by rpki-client