Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
File:                     NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json)
Hash identifier:          1R5A7FT0ekEVYyNTufR4zySXd/KYjMwnsdk4KHm0kmw=
Subject key identifier:   8A:91:49:4F:1C:92:EE:C6:86:94:92:F2:C7:61:1B:C4:51:C2:5C:13
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Certificate issuer:       /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial:       01A0D917777BACFA600622C2C4CB21863364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
Manifest number:          0173
Signing time:             Fri 25 Sep 2026 15:03:08 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:08 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:08 +0000
Files and hashes:         1: 27nZxtjqrhsKmeNau6Mu8UTu9qg.roa (hash: GU3wDMHTiFASdAwvMqW0bfWi5rSGbCrCyQ5R6PuT9c4=)
                          2: 3hGblXZHkfF0d3EHYGbTWnSiNQA.roa (hash: QJIZI7te5M7LXWjeDg4x4g3m7iNaESqw8YCnOYlGo0M=)
                          3: 6Lv9xgBswnbY_FNskzfEcq59C1A.roa (hash: CzGHB25B2Y3HWvTLL1QHf1CCzXJg+G/vhxr8ewgTUwI=)
                          4: J8Nu292jWRKPjq7q0neCyO9_j2A.roa (hash: s5eBVw7COyG6QNqTi8sSQVL4i8mVKcCaq0WtADvLryU=)
                          5: KYIOb7iz6nFpO-VncG2SvHnAuoA.roa (hash: 23ReOjB4kGN1q/sNfdaF2PaXOtnQc0L4ZtZOtPEv92k=)
                          6: Mim9CmMQR3ozLGCE-Tgf11KxorA.roa (hash: dOIzZQ99FYcO+06vOL0/z+/bioujv1F4xxKsnMDaHCA=)
                          7: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: xHMEZTI6/MBv1v+a/ra0g3m0Yw0VrmItGDAcBZ9Qxw0=)
                          8: QSu8RTBS_GeHC7vNPlkN8FoxyTA.roa (hash: HcKvfKMp+RjVDwb3JERnNNpq1J/LEdftWRuUkuEkLrQ=)
                          9: R003eJ685xL4vI7Rx7erEgImXsE.roa (hash: Kn+zWzH0TeYwPc5g0P4isWFRbz2/1fuiQuV46eT09Fw=)
                          10: RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa (hash: ds+euKfxTfF7hND8wtNeMyTwF3e0No2ssJQRbr3zP5Y=)
                          11: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (hash: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=)
                          12: Ud21UgAkszMTN1VkhwH7y54HQls.roa (hash: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=)
                          13: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (hash: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=)
                          14: d4OSwoXQlpA_V2IlmsumrCVG0eA.roa (hash: GrvCqW7XhLqAfO+TfzgF+JV4za+LPwgcaVQvzgfpvP0=)
                          15: e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa (hash: kqkj5A92+iThaqjqDCNYYmFmC0iddYkUAgisdKJ0pF4=)
                          16: h0HXUbU7K9M7vsEH0MTzY9tBW24.roa (hash: KinjtYYkU6EBuqBQ4h9VrRMUF1Ql7tgkKGymIZ7XUvg=)
                          17: jRdAeFmN0KBRFg-nGD-IJy-4ZJg.roa (hash: nQMC3hCRmQ4D1KBdRyKzmttIb877jjd5D7xgwAT2WdI=)
                          18: mof6xABa_nGqS79lZW3MEn80zPI.roa (hash: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=)
                          19: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=)
                          20: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (hash: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=)
                          21: yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa (hash: tIwicRRSMx21IewgpFZvBk4WqVp51kxIDCo1e8mwH2Y=)
                          22: y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa (hash: iKfJV06hDO3bUGR/X++44B2zKvdsDsdX0WIZV7QDd4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:77:7b:ac:fa:60:06:22:c2:c4:cb:21:86:33:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367160181739568e578e1b5f57976a60398062e6
        Validity
            Not Before: Sep 25 15:03:08 2026 GMT
            Not After : Sep 26 15:03:08 2026 GMT
        Subject: CN=8a91494f1c92eec6869492f2c7611bc451c25c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:db:f8:63:7d:72:46:0b:bd:50:3b:69:5d:
                    59:85:51:e2:6d:00:67:b7:ae:2d:66:dc:49:66:49:
                    7c:27:ea:59:14:83:88:d2:58:5e:71:e9:96:c2:d8:
                    3a:9b:04:d5:44:e1:12:81:db:af:ef:e6:e7:38:fe:
                    28:75:8b:2d:41:12:c0:16:ae:86:a5:0b:d6:c3:20:
                    3a:79:45:95:cd:36:07:4b:a1:1e:f0:fb:bd:1c:02:
                    31:38:4f:40:e5:ef:aa:0a:41:01:44:f0:aa:99:a0:
                    48:07:97:41:80:54:b9:8a:bd:8b:21:c1:11:13:0b:
                    35:cd:5a:9b:d2:6c:d4:4a:a6:9d:1a:61:47:0e:36:
                    93:64:76:02:ba:ff:24:04:ee:23:43:98:5b:7c:5e:
                    59:a2:33:ec:9d:31:77:89:26:17:e4:cd:fe:01:a4:
                    19:ce:67:5d:a3:99:12:70:fc:a7:75:99:49:c9:a3:
                    fa:7a:34:58:dc:8c:14:13:34:c6:23:e6:6f:f2:c6:
                    1e:5e:34:d4:30:a3:a4:28:51:dd:e7:d1:0d:07:82:
                    1e:2c:ca:43:f7:38:a2:dd:a1:1c:d9:8c:bd:78:24:
                    f5:52:a9:fc:29:8c:c4:a6:88:a8:f7:64:ca:55:85:
                    f3:82:35:f6:41:a3:ba:12:3e:b2:c6:49:dc:72:4a:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:91:49:4F:1C:92:EE:C6:86:94:92:F2:C7:61:1B:C4:51:C2:5C:13
            X509v3 Authority Key Identifier:
                keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:97:50:ff:42:d5:be:72:64:35:4b:7a:cc:33:30:d4:84:e5:
         89:7e:63:55:18:44:c5:65:f4:d2:54:05:fc:19:7f:86:97:0a:
         af:1e:71:a0:78:3c:c4:cf:0a:11:3c:db:e7:c4:e3:e0:8f:8c:
         c7:67:c3:56:c7:ec:47:75:a0:a0:eb:a2:cc:ba:8b:d8:97:a5:
         89:13:5f:12:d1:b2:b2:59:9d:7b:0e:46:93:65:0d:18:e4:1b:
         46:86:78:84:d7:85:53:9f:24:87:ab:58:55:a6:dd:3f:7f:2b:
         1f:f4:46:d5:c1:ba:39:8d:85:6b:10:c9:a5:e3:6d:b1:85:df:
         db:4b:98:ca:c4:eb:b3:fc:47:81:6a:46:23:fe:e3:f0:55:46:
         6c:53:96:59:c6:cf:c3:f9:99:e7:96:ae:ce:0b:ad:a4:0f:19:
         b0:a7:69:1e:56:7d:d6:fc:27:c7:6a:dc:ff:a2:3b:35:3e:50:
         87:4a:67:bd:18:51:9b:e1:2a:7c:87:f3:78:ca:93:a3:0d:ee:
         68:1f:25:c6:bf:97:d7:7b:1d:62:93:93:e4:df:3c:ed:7c:4f:
         f1:b8:eb:86:ef:ce:29:f2:09:a3:5d:5b:ad:60:00:67:51:c5:
         d7:37:38:22:e4:77:71:76:3c:82:d5:ee:82:39:97:53:85:df:
         d7:9d:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:06:28 2026 by rpki-client