Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          XWkIISdI0jpxwyd/eJhhgpE29thmTInIl4cYfe0gbHA=
Subject key identifier:   94:4C:7F:0C:85:92:5E:88:B9:CF:1E:DF:36:4C:5A:E0:2F:93:7E:A3
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       01A0CFA405CBC1A393C8DEF79CEBD8966ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 19:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:28 +0000
Files and hashes:         1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: qszf+JoOEO39ljge1JfFNUMbPd2UFbDafdK9KujK+7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:05:cb:c1:a3:93:c8:de:f7:9c:eb:d8:96:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Sep 23 19:00:28 2026 GMT
            Not After : Sep 24 19:00:28 2026 GMT
        Subject: CN=944c7f0c85925e88b9cf1edf364c5ae02f937ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:25:ce:e5:7c:16:b1:86:5e:d9:ee:bd:8b:
                    a4:0d:77:cb:a8:d4:bc:ef:86:71:d5:66:bb:3d:b8:
                    c3:2a:fc:7c:41:d5:eb:2b:cc:1b:e2:c5:77:09:f0:
                    5f:f1:19:40:03:33:cd:e6:78:25:27:20:20:f5:d9:
                    18:4c:7c:bf:55:d7:61:a7:dd:83:03:c0:bf:14:fb:
                    6f:36:af:30:bd:6f:02:16:37:4d:54:3c:19:41:a5:
                    ff:78:a7:2f:47:63:57:74:04:a8:66:a0:6b:c2:3b:
                    8c:9a:72:bd:ca:72:b6:b4:5f:9e:93:c9:56:1f:a9:
                    39:17:49:f6:d1:34:80:0d:4d:3e:ba:b3:2c:1a:62:
                    63:33:cc:f4:00:2d:10:46:f0:81:37:bb:40:be:69:
                    ce:80:90:8f:6d:31:33:f5:f0:97:75:e5:2f:8c:d5:
                    c3:a2:32:5a:2a:f4:3f:3e:95:44:61:7b:e3:a1:cd:
                    10:a7:06:b0:40:4d:22:1f:e4:18:37:8b:06:8c:e6:
                    fa:1a:78:bf:34:1f:04:93:db:f1:07:06:72:ab:e2:
                    cc:b1:b3:59:ef:d1:0a:6d:42:96:d1:ad:85:9a:29:
                    51:29:6d:18:54:28:1c:1d:b4:f9:49:67:3f:9a:51:
                    48:f7:cd:f0:d1:75:92:a3:53:8f:06:77:10:11:70:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4C:7F:0C:85:92:5E:88:B9:CF:1E:DF:36:4C:5A:E0:2F:93:7E:A3
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:60:23:c8:b5:b7:9c:09:6f:d9:93:af:a5:7c:19:16:d8:
         05:45:d7:21:ad:92:a3:d8:37:4f:62:4f:cc:59:9a:23:78:ee:
         a7:c9:59:73:94:05:64:b3:10:78:55:16:91:9b:b2:05:76:c9:
         3d:93:96:19:14:57:2d:00:0a:b2:95:7b:55:a6:32:53:7a:6a:
         a9:48:15:79:37:57:38:59:d9:a9:29:9b:85:98:6d:2a:ac:1c:
         c3:78:57:f0:2e:3c:61:06:e9:1f:81:b0:a1:0a:b9:61:55:a7:
         cc:54:c2:9a:15:33:eb:25:10:1a:17:9f:52:ec:b8:91:9a:ba:
         40:48:75:a3:06:5f:81:aa:a4:d7:38:5b:bc:24:b2:85:55:85:
         a5:09:ed:f2:3a:4d:d5:b4:0b:ba:72:e6:25:a5:c1:60:7d:35:
         4a:d4:4d:5b:50:94:2e:a8:ff:11:70:d5:04:6a:6a:a1:4f:1f:
         3a:4c:de:21:fd:8f:f7:36:c2:f6:83:37:fc:16:95:bf:47:e3:
         45:4b:aa:20:a8:49:ae:28:f9:a8:a9:72:b5:7f:72:19:d5:de:
         7d:c8:c8:56:ad:57:88:6b:86:62:76:0b:dd:f1:03:4e:ff:e2:
         d4:96:4e:d1:fa:81:3f:03:22:ec:42:de:ed:be:41:9e:58:3f:
         4b:bd:bd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:18:44 2026 by rpki-client