Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File:                     nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier:          2xwEXP6vjTEqUmAMUT2WQaCr8UadAGU3+MnS+vR3yHQ=
Subject key identifier:   CC:54:15:A6:8A:5C:26:68:DC:C7:E1:1D:C9:2D:64:6F:2A:BD:2F:99
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       01A1A970FCF767E86904C9F8C470541396E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number:          0302
Signing time:             Thu 05 Nov 2026 02:01:56 +0000
Manifest this update:     Thu 05 Nov 2026 02:01:56 +0000
Manifest next update:     Fri 06 Nov 2026 02:01:56 +0000
Files and hashes:         1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
                          2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
                          3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
                          4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
                          5: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (hash: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=)
                          6: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
                          7: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
                          8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: 1UnQsNzd5kz7Eh9hRw+YhTmdbUNbIFB9/nh3VlPJyAs=)
                          9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:70:fc:f7:67:e8:69:04:c9:f8:c4:70:54:13:96:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: Nov  5 02:01:56 2026 GMT
            Not After : Nov  6 02:01:56 2026 GMT
        Subject: CN=cc5415a68a5c2668dcc7e11dc92d646f2abd2f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:0a:2c:30:7d:58:44:b8:9b:42:b3:0e:7a:
                    0a:c8:05:b3:48:14:00:cf:84:88:47:c6:c3:17:f3:
                    28:e9:80:e5:bd:25:56:ef:45:e2:15:81:a2:30:5b:
                    39:73:38:b5:fc:af:3f:14:44:05:f9:aa:58:19:a9:
                    a4:fb:fe:db:34:57:ee:28:bb:b8:40:3b:c4:a7:ed:
                    4b:00:fa:55:c0:51:2f:ec:25:4e:ae:c2:85:05:ed:
                    88:51:70:aa:17:f8:c1:15:d9:2a:98:f0:04:0a:e5:
                    5a:0a:b0:72:de:18:a7:84:5a:0c:39:e3:83:79:8a:
                    70:e9:7b:bc:c9:f9:20:42:93:50:cc:4d:2d:bf:09:
                    34:4b:5b:1c:f7:73:e9:69:01:83:56:be:bd:6c:db:
                    10:d6:35:b2:de:75:a6:ea:da:2f:0f:91:19:6e:5f:
                    09:86:2c:a2:a6:ca:3b:68:3d:9d:47:6b:cb:ab:9e:
                    ae:c7:f8:3b:ff:31:97:f7:ec:76:8a:df:59:37:d0:
                    ba:ff:8e:63:4c:a2:f1:57:12:83:c8:17:b4:5d:19:
                    07:71:6b:16:0d:f6:70:97:5a:98:21:c9:3a:58:66:
                    f2:c4:52:c6:f5:a1:a8:16:cd:39:7e:92:f1:d5:b0:
                    25:7d:be:1f:8b:10:02:0d:95:6f:42:f6:54:91:3c:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:15:A6:8A:5C:26:68:DC:C7:E1:1D:C9:2D:64:6F:2A:BD:2F:99
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:13:7f:8f:f8:03:89:8e:9a:4d:19:ca:47:f7:7d:55:29:b4:
         30:20:06:fb:85:ac:35:61:95:44:19:90:d3:b5:07:bd:ba:66:
         8b:f7:83:73:90:8a:88:b9:de:bd:9a:36:61:a8:39:e3:28:f3:
         0d:f7:2c:e6:d2:16:2d:03:4f:e6:26:51:88:90:88:30:1f:58:
         7f:1f:78:a2:33:b2:6d:c0:5d:9a:7b:f9:85:68:cc:1a:32:6e:
         18:ef:b2:6c:b9:c5:79:b5:64:8f:d9:69:88:71:f8:99:c5:02:
         80:ce:9e:1d:6a:c7:00:e8:6d:54:b3:bf:5d:cf:2b:fb:3f:72:
         47:5c:da:5e:08:43:8b:bd:5f:76:0e:38:5e:bb:60:a1:b8:38:
         ec:72:29:22:a4:6c:d9:2b:4e:a4:2e:71:86:51:08:cc:7d:50:
         fb:25:62:ce:1d:f3:49:2b:ef:b6:25:15:92:5a:29:ea:3b:0f:
         d1:50:9a:1f:48:74:fd:00:aa:1d:1f:53:58:bd:ae:ff:36:b5:
         aa:75:6b:48:48:fc:68:d7:70:48:49:a1:46:14:82:82:f0:6d:
         b0:ff:77:45:95:ca:ba:56:e2:40:07:30:e7:b6:43:aa:1b:85:
         07:69:f7:97:c6:c3:ca:07:39:ee:b2:a2:fd:90:4e:0c:aa:1b:
         9a:dc:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:15 2026 by rpki-client