Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
File:                     NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json)
Hash identifier:          qLWQC6/m39b7ELE5auStGeV/Pt+AOPMM7IDs1f2SipQ=
Subject key identifier:   09:FC:AD:A5:B6:0F:B2:1B:41:5D:BD:2A:B9:C5:F2:65:03:B4:2C:3B
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Certificate issuer:       /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial:       01A0C7466B6E13C6CF81272D915361DFD3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
Manifest number:          0169
Signing time:             Tue 22 Sep 2026 04:01:15 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:15 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:15 +0000
Files and hashes:         1: 27nZxtjqrhsKmeNau6Mu8UTu9qg.roa (hash: GU3wDMHTiFASdAwvMqW0bfWi5rSGbCrCyQ5R6PuT9c4=)
                          2: 3hGblXZHkfF0d3EHYGbTWnSiNQA.roa (hash: QJIZI7te5M7LXWjeDg4x4g3m7iNaESqw8YCnOYlGo0M=)
                          3: 6Lv9xgBswnbY_FNskzfEcq59C1A.roa (hash: CzGHB25B2Y3HWvTLL1QHf1CCzXJg+G/vhxr8ewgTUwI=)
                          4: J8Nu292jWRKPjq7q0neCyO9_j2A.roa (hash: s5eBVw7COyG6QNqTi8sSQVL4i8mVKcCaq0WtADvLryU=)
                          5: KYIOb7iz6nFpO-VncG2SvHnAuoA.roa (hash: 23ReOjB4kGN1q/sNfdaF2PaXOtnQc0L4ZtZOtPEv92k=)
                          6: Mim9CmMQR3ozLGCE-Tgf11KxorA.roa (hash: dOIzZQ99FYcO+06vOL0/z+/bioujv1F4xxKsnMDaHCA=)
                          7: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: rzIOlDcRr2soCXVTQo0d+tD4pCoqkt3Tpc2kd9gGu2A=)
                          8: QSu8RTBS_GeHC7vNPlkN8FoxyTA.roa (hash: HcKvfKMp+RjVDwb3JERnNNpq1J/LEdftWRuUkuEkLrQ=)
                          9: R003eJ685xL4vI7Rx7erEgImXsE.roa (hash: Kn+zWzH0TeYwPc5g0P4isWFRbz2/1fuiQuV46eT09Fw=)
                          10: RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa (hash: ds+euKfxTfF7hND8wtNeMyTwF3e0No2ssJQRbr3zP5Y=)
                          11: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (hash: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=)
                          12: Ud21UgAkszMTN1VkhwH7y54HQls.roa (hash: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=)
                          13: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (hash: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=)
                          14: e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa (hash: kqkj5A92+iThaqjqDCNYYmFmC0iddYkUAgisdKJ0pF4=)
                          15: h0HXUbU7K9M7vsEH0MTzY9tBW24.roa (hash: KinjtYYkU6EBuqBQ4h9VrRMUF1Ql7tgkKGymIZ7XUvg=)
                          16: jRdAeFmN0KBRFg-nGD-IJy-4ZJg.roa (hash: nQMC3hCRmQ4D1KBdRyKzmttIb877jjd5D7xgwAT2WdI=)
                          17: mof6xABa_nGqS79lZW3MEn80zPI.roa (hash: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=)
                          18: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=)
                          19: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (hash: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=)
                          20: yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa (hash: tIwicRRSMx21IewgpFZvBk4WqVp51kxIDCo1e8mwH2Y=)
                          21: y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa (hash: iKfJV06hDO3bUGR/X++44B2zKvdsDsdX0WIZV7QDd4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:6b:6e:13:c6:cf:81:27:2d:91:53:61:df:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367160181739568e578e1b5f57976a60398062e6
        Validity
            Not Before: Sep 22 04:01:15 2026 GMT
            Not After : Sep 23 04:01:15 2026 GMT
        Subject: CN=09fcada5b60fb21b415dbd2ab9c5f26503b42c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:ac:02:61:67:ad:c3:f8:95:f8:01:ba:b4:
                    96:76:0e:73:29:1b:32:c3:8e:13:ab:22:74:ea:89:
                    ac:d8:a0:69:f5:50:bf:a4:4a:3a:5a:49:71:14:85:
                    94:8f:03:0a:39:67:3f:86:fc:78:96:b0:ef:c3:ad:
                    e5:b2:a0:d5:25:cc:30:5d:95:88:3a:2c:af:dc:6d:
                    10:2d:2d:8e:11:80:28:fa:3e:14:39:60:cc:1c:ac:
                    28:d7:18:0c:10:af:b0:fb:19:66:4a:42:d6:82:b0:
                    2b:68:6a:de:47:0a:d6:fd:2a:24:65:3b:99:fe:8a:
                    63:51:df:d1:ac:84:f3:40:b5:96:d8:cb:3c:9b:a6:
                    2a:63:92:0d:37:f0:7c:fb:7e:f0:50:f5:a8:80:d0:
                    a8:4d:c3:7a:38:47:30:68:14:0c:46:f7:89:9c:53:
                    d5:39:e2:c5:88:1a:ea:20:9d:f5:79:fd:95:14:ba:
                    d7:e8:d5:66:73:8f:3a:05:d6:ae:9d:c5:bf:e8:5e:
                    77:1d:77:77:88:a1:50:90:f6:10:98:b4:00:8e:fa:
                    f7:4b:29:96:89:af:5a:47:26:8e:28:5c:6e:50:28:
                    0d:1e:01:2d:a5:82:c9:db:92:17:e8:b6:28:42:7c:
                    11:e2:b9:62:c2:65:3e:bf:85:cf:ee:09:71:1b:b9:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:AD:A5:B6:0F:B2:1B:41:5D:BD:2A:B9:C5:F2:65:03:B4:2C:3B
            X509v3 Authority Key Identifier:
                keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:de:ba:d0:dd:3a:83:f3:cb:30:5b:69:4c:4d:bb:29:8f:e5:
         4c:11:8c:62:91:e0:58:09:3e:27:63:03:27:aa:5c:17:b0:29:
         22:36:70:34:26:0d:57:f2:57:ae:6f:d2:35:68:a9:2f:78:2e:
         60:87:f4:51:7d:54:6a:86:b7:57:85:aa:3e:ae:ab:99:06:db:
         8c:9e:e9:ad:af:78:14:41:45:f7:6d:0c:ff:1b:16:22:2a:c1:
         36:92:cd:7a:f1:e6:05:53:8f:00:95:16:ee:e0:a3:65:3a:c7:
         9e:de:73:b2:b3:06:3b:70:4f:56:e0:4e:02:f8:07:2a:98:2f:
         35:5a:70:ce:fc:8e:80:9a:79:bc:55:83:cc:c3:09:58:81:4a:
         41:51:15:28:00:f2:df:a2:16:ec:b0:1d:e2:bb:d8:19:2f:ff:
         cd:84:df:de:bc:db:2a:af:23:41:5a:2a:12:88:b9:a5:7c:a8:
         29:84:65:a2:92:3a:be:c5:43:ee:c9:2d:ed:89:a5:fa:fc:d0:
         4c:7c:45:83:3f:ad:14:14:eb:58:8f:b1:6e:22:bf:9f:60:28:
         4c:5a:bb:a9:8c:7b:1b:27:62:41:6b:3a:48:16:0e:7d:93:b2:
         48:ab:4c:c6:e4:d2:3f:80:34:56:b9:4c:d9:12:3a:00:56:1b:
         88:9a:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:58:12 2026 by rpki-client