Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
File:                     nPzO-NLBbCCuW42kMUJ3_sqt09c.mft (raw, json)
Hash identifier:          OTRl1YAsgGxB1N/Nszv800WjO+61Nf8VDuv8lGfL7Ko=
Subject key identifier:   86:7B:6A:87:63:BA:F8:6E:AD:F8:8F:67:01:96:A1:8C:DA:79:9E:FE
Authority key identifier: 9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
Certificate issuer:       /CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Certificate serial:       01A0C858DF4078187C0B9639B70E3D177E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:01:02 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:02 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:02 +0000
Files and hashes:         1: 9ElPrQnWoTn8sRLIiiK0OuGy05M.asa (hash: 5FNlY4w7rZR/WY2wa0x9U6YyJcfB7mqd5DFEJPCk0Fs=)
                          2: Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa (hash: pRzYtPrxHUpphqlfa9Qt6Kb6BBtXf+wNplcVS3AuIH4=)
                          3: KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa (hash: Jcw9eWUwDk9R7T5bYUQAFYJ3yFnH4VQvRTMQjlguOec=)
                          4: nPzO-NLBbCCuW42kMUJ3_sqt09c.crl (hash: PpFkwSBIqIbHrzE0+2tF8GKkd17ZhGEv8I9Ktcj3r/o=)
                          5: qUOFKPK1qlaPwhQhrZeDV6F0-6Y.asa (hash: NWGvZCsufEEYm6/vs1ysBxX8d7vsYpiYbg4dFk8rofg=)
                          6: sE8kyXjscgpYnewcBxZTJWXPDf0.roa (hash: lTXqCAiiTYsmosVsva8S8Wgwz9hTgbMaDnxDEk3gwSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:df:40:78:18:7c:0b:96:39:b7:0e:3d:17:7e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
        Validity
            Not Before: Sep 22 09:01:02 2026 GMT
            Not After : Sep 23 09:01:02 2026 GMT
        Subject: CN=867b6a8763baf86eadf88f670196a18cda799efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:c7:c3:dc:4b:bb:a2:10:a5:39:d2:c1:fa:
                    7b:d7:f3:ce:82:18:e7:73:96:14:cb:ad:7a:ad:9b:
                    6b:b7:06:aa:b1:02:30:cb:48:a1:7b:bc:ab:f7:4f:
                    e9:c1:51:47:84:e0:2b:7f:cb:a1:47:47:cb:af:ea:
                    c7:a0:3d:70:b1:d4:1a:46:0c:36:68:b6:91:a0:5f:
                    24:c8:de:77:cc:ee:12:5b:b7:15:8e:1e:59:f0:bc:
                    d6:b1:06:cc:20:2e:80:ce:f6:62:ee:34:89:c5:ed:
                    6c:dc:22:16:7e:9e:c0:b4:2b:35:e5:ac:b1:f2:c9:
                    e9:5a:10:f4:ae:e5:01:72:e0:cc:5a:f5:28:5a:6b:
                    cf:ef:62:fa:53:f6:f4:75:a4:d5:e9:c1:aa:b8:01:
                    fb:d3:12:7e:9d:8a:f6:59:2b:f0:ea:5d:06:b4:ea:
                    41:f1:05:54:a2:67:1b:af:d5:b5:a7:58:cf:ab:3e:
                    9a:26:a2:63:69:62:a5:f8:24:df:eb:df:c1:a2:04:
                    12:f3:d7:13:60:6b:38:a0:a6:b4:b4:96:81:e8:58:
                    b6:ce:fc:2a:d2:76:13:57:6d:bf:2f:f2:d5:85:49:
                    e8:6a:7d:5f:00:e6:08:00:fd:19:7a:60:97:f3:bc:
                    03:fe:93:08:10:29:ed:c6:6f:a9:6e:66:7d:ea:ad:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:6A:87:63:BA:F8:6E:AD:F8:8F:67:01:96:A1:8C:DA:79:9E:FE
            X509v3 Authority Key Identifier:
                keyid:9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:3b:68:8b:bb:cf:74:ee:ab:2e:a5:2a:3b:70:88:5d:b9:c9:
         c4:4e:13:88:67:b8:c7:15:ac:09:93:00:1a:11:d6:34:ae:d3:
         63:76:06:fa:e1:9b:5e:38:71:dc:aa:b4:1d:74:5f:12:03:03:
         b7:e5:a6:23:88:d2:16:08:07:b8:23:a8:3e:f6:16:eb:3e:a0:
         c1:43:6e:60:e8:16:b8:b7:de:6d:bd:76:7c:d2:9f:4d:59:3a:
         7f:67:05:47:87:ea:c1:91:b0:e1:d5:07:55:9e:82:ba:02:bc:
         75:14:66:74:f0:19:f9:46:d0:0b:1e:3d:85:68:2d:7a:04:5f:
         ea:a1:41:9e:08:dd:bc:01:7d:01:7e:3c:84:45:90:28:2e:4a:
         8c:3e:fb:a4:ba:4a:8c:20:77:51:6e:09:74:ad:8a:68:2e:38:
         53:f2:83:21:42:20:9a:ce:21:5b:8a:34:ce:df:a5:61:5d:72:
         35:55:48:ae:26:21:18:5e:06:c6:a8:2c:c9:78:06:25:1b:d9:
         ba:73:92:9b:da:ee:00:2d:4b:2a:e6:b1:30:bc:4e:a0:c2:e5:
         81:8c:fd:94:52:b7:90:8e:30:ba:e9:97:da:a4:7a:6f:1d:4d:
         f2:ad:c9:06:59:df:3a:d6:37:bb:3e:97:75:42:77:c0:7a:be:
         4c:69:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:42:06 2026 by rpki-client