Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          A/St/KvpZkSx/377/rmtzdO10rvrtWpQxu96n8iNoqI=
Subject key identifier:   74:46:1B:38:52:26:71:7F:05:90:43:27:0B:CA:0E:4F:61:9A:34:76
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       01A0C6D7E4739F81CEC7755F82FDDD68CD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 02:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:32 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: bp9t3WgPNE5IX3XEO7zxo0NZQEbgl3lMBru/pu9lqcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:e4:73:9f:81:ce:c7:75:5f:82:fd:dd:68:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Sep 22 02:00:32 2026 GMT
            Not After : Sep 23 02:00:32 2026 GMT
        Subject: CN=74461b385226717f059043270bca0e4f619a3476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:19:67:27:56:bf:18:ce:9c:fb:4e:02:f0:
                    19:21:9c:c7:bc:db:97:e7:6c:a6:f1:68:e0:57:14:
                    f7:c0:9e:ea:0a:2f:8b:ad:f0:25:20:1e:0b:42:53:
                    d2:a3:55:f5:5f:4f:a2:65:e6:28:5d:3c:f0:84:4d:
                    e4:c3:55:4b:7f:db:d7:da:12:d3:fd:e8:d9:c6:89:
                    5e:02:45:2a:ba:d2:bf:a7:db:31:bd:f4:42:b0:c6:
                    5c:81:62:25:a1:38:2d:1c:8b:9e:7f:72:37:77:9c:
                    b5:a5:12:b5:c9:72:fd:ba:d8:c1:a6:6d:7a:0d:70:
                    9f:40:5b:5d:7d:15:58:15:20:b3:29:fd:22:7a:7c:
                    6b:c3:06:f1:d2:b8:6e:56:08:5f:26:cf:eb:f5:28:
                    80:9f:47:96:b6:c1:08:5e:88:57:01:c7:66:fb:29:
                    06:f6:24:be:c5:d3:d5:3d:c5:d4:61:c6:ba:4a:fa:
                    8c:ef:c9:f8:21:5f:2a:b8:c4:49:f6:db:8b:b8:24:
                    58:67:ad:d5:46:1a:bc:19:51:35:b5:bc:e8:f9:61:
                    ae:1d:b7:0e:44:82:84:18:63:fb:96:82:57:7f:ee:
                    ee:7d:0e:14:94:f2:b9:50:9a:8d:6c:89:6a:19:6d:
                    cf:2a:1c:85:b7:ad:ec:68:86:37:91:5c:1a:a7:79:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:46:1B:38:52:26:71:7F:05:90:43:27:0B:CA:0E:4F:61:9A:34:76
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:3b:28:0c:55:0f:12:1f:4a:41:83:bb:c0:40:f1:a7:ee:d1:
         97:cb:e0:f2:ea:1b:50:79:0f:e8:43:3a:d2:95:3d:b2:e9:19:
         91:95:e8:75:80:41:35:c6:82:05:3a:f0:e1:c3:93:1d:ec:c6:
         b6:e7:42:21:c2:5b:a0:ed:66:3d:f8:d9:66:d6:8a:d3:6f:d3:
         4e:30:55:83:85:79:f0:2a:98:2e:07:15:5f:45:91:d6:c8:e6:
         3c:3e:49:b0:f2:06:6e:c7:99:f7:9d:dc:31:92:a0:d4:47:7c:
         06:be:0a:02:95:30:82:a9:52:e3:42:97:86:ea:6a:1a:63:d4:
         4b:cd:05:3c:1f:fe:67:4a:a2:8a:0f:77:ea:dd:79:c3:29:df:
         2b:ad:9d:8c:73:d2:eb:31:a4:de:8e:2d:73:86:c9:2f:ae:4c:
         2a:40:79:71:2a:52:34:6f:60:dd:fc:94:f0:37:7d:7f:ba:fc:
         2a:80:26:4b:3a:a3:1b:b8:d1:e8:fa:58:14:52:ac:6a:55:ab:
         5d:01:f3:15:25:bf:a1:c6:b6:00:b1:93:ee:9f:7e:91:c5:a0:
         e8:65:05:00:e5:c5:4d:cc:84:e6:5b:61:9e:c0:98:e5:ba:40:
         db:3f:4b:81:04:2e:62:3e:73:a3:bc:34:44:b2:17:ad:5d:fd:
         9e:b7:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:31 2026 by rpki-client