Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          ty3GFd0RgcHGvQqm021in0D8mfQE0KooVyOZudc3yvM=
Subject key identifier:   B0:66:8E:D6:18:A0:BF:40:98:87:B9:5D:3B:F4:C0:1D:41:6A:F4:FD
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       01A11A19947E79F65C8077C9F0E5FD4ADCC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          0A3D
Signing time:             Thu 08 Oct 2026 06:00:46 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:46 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:46 +0000
Files and hashes:         1: Ai8Bugd7lzzruNa57KT-lV3wYm8.asa (hash: BwsAqkJnuFBXHrVkW12Nt079T8kms4s4hbMPa9Sf/0I=)
                          2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: ZtUJpfqT3ob7pkrDWW+9mIoFzXBuxtpvDZjrX8myA7g=)
                          3: ZCvgjfcdUvB5emDgJUqlCNrfN4U.roa (hash: 9CWeQ56fOiBQ0iE9QR8Rty2enOxfpS87kCa0J2lyyi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:94:7e:79:f6:5c:80:77:c9:f0:e5:fd:4a:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: Oct  8 06:00:46 2026 GMT
            Not After : Oct  9 06:00:46 2026 GMT
        Subject: CN=b0668ed618a0bf409887b95d3bf4c01d416af4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:b0:ab:f0:0e:28:a4:1f:d9:a3:d3:f6:bb:
                    47:69:ea:7d:7f:d8:9c:40:d1:24:a0:b8:99:63:58:
                    34:32:6e:e7:03:4e:8f:99:e8:c3:09:05:f5:5f:e9:
                    b1:c2:b3:6a:f3:c6:0c:ab:3b:b0:7b:2b:17:1e:17:
                    7d:e9:33:87:b2:9d:64:15:bd:e5:df:c1:0f:34:c7:
                    8a:11:3f:fb:41:0b:9f:89:d8:d9:50:b3:7e:6d:c2:
                    e4:33:19:cf:ec:dc:12:cd:33:f9:15:f6:26:1a:77:
                    e9:c5:de:b6:b1:5f:a3:c2:dd:fb:31:a4:3a:03:cf:
                    9a:b0:b2:a3:af:bc:12:9f:f2:b5:3a:c7:19:01:f9:
                    74:07:04:09:eb:f6:98:27:d4:6e:14:f6:21:ec:3f:
                    ca:b9:c5:33:8e:24:c6:61:b1:52:8b:3b:11:e7:8e:
                    97:17:92:2b:8a:26:4a:f7:3a:55:ae:85:03:ae:63:
                    7e:59:22:e4:b9:cf:e2:e1:9d:9e:d3:cc:6a:b8:3c:
                    14:86:8d:ed:40:b0:62:79:ab:3c:8a:a4:35:32:12:
                    ac:5c:58:02:c8:f4:d6:83:30:5d:a3:2d:05:d0:c2:
                    8a:98:02:9e:c8:e1:eb:33:54:6d:ae:5e:36:a8:19:
                    c7:8e:6c:f4:48:e4:57:0a:2f:98:43:4a:3c:42:8d:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:8E:D6:18:A0:BF:40:98:87:B9:5D:3B:F4:C0:1D:41:6A:F4:FD
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:06:b9:82:e5:72:db:fd:7a:f2:d1:5d:fc:21:35:60:b5:
         f6:9a:a3:77:d2:14:50:20:83:5c:36:d1:75:13:ea:63:80:12:
         0d:62:bc:c5:10:5c:52:ac:3a:15:36:e7:90:cd:08:91:d9:5f:
         7f:f0:4c:47:d6:18:2a:ad:b8:87:3c:b1:a0:80:25:06:a3:f6:
         55:21:5e:e0:67:fa:e2:0e:10:ad:06:f1:dd:4c:93:b8:7f:dc:
         03:b9:44:8e:46:72:6d:bb:83:c4:5a:69:66:eb:27:27:65:38:
         d3:06:9a:9c:21:ad:33:58:15:de:d2:a5:57:c2:0b:40:83:c7:
         54:d6:f8:17:4c:8a:d1:db:c3:3e:1e:95:88:33:a0:90:94:ef:
         83:29:72:8c:75:d0:e2:fb:db:75:1d:1b:3d:f1:fb:f7:78:66:
         7e:c6:13:ac:6a:c1:d6:5a:af:12:06:2e:29:40:48:ed:72:e0:
         1e:0e:64:97:9d:23:87:5b:8b:8f:23:90:92:92:6e:79:0f:91:
         1f:b6:fe:19:39:3e:48:be:6c:a4:5c:80:68:73:e4:70:00:c7:
         2f:64:2f:b6:3f:8c:4e:1b:32:26:6b:32:fd:eb:37:bb:ef:8c:
         27:6e:d8:c8:a8:67:25:53:41:56:27:33:8d:a4:56:77:4a:48:
         9e:a7:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:54:19 2026 by rpki-client