Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File:                     nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier:          MRgNUztzl6dwbCZaEq2P6Wm4l1Iv3yxulq+BF8KllIQ=
Subject key identifier:   21:7C:DD:A8:A7:6B:8D:21:B3:F9:B2:CF:1F:30:61:CC:B6:E0:A1:2E
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer:       /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial:       01A0CBFE557769F2EB8F62E83E393D23AD1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number:          065F
Signing time:             Wed 23 Sep 2026 02:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:37 +0000
Files and hashes:         1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: oAFAo7gumG2a82V1gM9heNk5A9lLHOCKK7sQ1oPc4xg=)
                          2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:55:77:69:f2:eb:8f:62:e8:3e:39:3d:23:ad:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
        Validity
            Not Before: Sep 23 02:00:37 2026 GMT
            Not After : Sep 24 02:00:37 2026 GMT
        Subject: CN=217cdda8a76b8d21b3f9b2cf1f3061ccb6e0a12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:dd:72:37:17:45:15:17:69:7c:d0:5c:34:
                    87:d2:38:9f:e8:cf:24:72:5e:01:74:81:14:69:34:
                    19:f3:31:84:e3:52:9f:c4:3d:37:cf:f3:0d:aa:3d:
                    71:2f:09:48:22:09:b6:cd:f5:ed:e7:7b:cc:06:32:
                    35:d6:c1:da:03:94:7a:78:42:ed:57:3f:2d:28:c8:
                    da:50:0f:b6:a1:7c:0f:06:b5:a3:87:b8:e3:22:35:
                    1c:ab:8b:48:9e:6d:f0:3c:2e:6c:9e:a1:e8:d8:20:
                    3d:5c:23:31:ba:53:4d:ff:1d:59:90:af:17:7c:f6:
                    8b:28:22:8d:7e:24:56:ad:4c:76:41:8e:60:68:06:
                    16:f8:75:b2:f2:12:2a:3e:27:92:7c:d6:0c:10:2a:
                    b4:5f:d9:89:44:67:56:ea:e1:c2:98:8a:ee:ef:15:
                    e1:fc:e5:ac:04:4a:5d:d5:47:42:22:98:e9:5c:4f:
                    a8:c5:79:1e:db:f6:09:c0:91:3a:77:96:47:3f:1d:
                    d6:87:af:ae:0a:ca:8b:35:27:7d:32:f2:7a:c1:ba:
                    60:61:f8:a9:76:15:27:90:1d:0a:72:81:88:98:fa:
                    c8:a3:49:d6:1b:b7:dc:e6:35:18:c2:57:65:39:33:
                    2c:f5:89:e4:c7:f2:4f:8d:e7:f5:b3:5e:f8:a8:35:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:DD:A8:A7:6B:8D:21:B3:F9:B2:CF:1F:30:61:CC:B6:E0:A1:2E
            X509v3 Authority Key Identifier:
                keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:97:10:75:1e:a8:c8:36:a4:1e:a2:ff:4c:81:6c:e8:c7:
         22:60:a6:db:a8:6b:11:11:f8:30:47:87:63:0c:37:41:04:f8:
         01:ac:f5:5d:0f:11:ee:7f:bd:22:77:af:ee:fa:79:ce:01:00:
         06:39:3d:9e:ad:d6:69:40:15:75:d7:f1:2d:c6:78:42:45:d4:
         1e:a9:b6:9f:38:6c:bf:cb:29:ec:a0:11:1e:d6:c7:db:67:37:
         1e:29:be:98:39:3a:b5:9a:90:2a:be:f9:40:a0:1a:36:aa:2c:
         55:95:eb:46:ae:5b:5a:22:7b:4f:42:54:5b:c1:cd:4a:08:d5:
         13:57:e7:85:37:92:2b:17:12:f1:37:1f:57:96:44:f2:66:00:
         15:38:d4:0a:56:ef:9f:43:7f:c8:01:a6:36:76:b3:a5:4e:ec:
         54:d2:bc:f5:85:6a:62:2e:d0:6e:91:d1:80:6e:88:b5:b6:93:
         64:d0:21:83:82:2d:3f:aa:49:5a:98:8b:ab:dc:46:dc:a6:fa:
         ca:26:f0:52:bb:22:1b:98:9f:2a:e9:5d:18:ff:7c:63:5b:4d:
         a1:83:f4:05:ce:76:e1:1a:ce:ab:b5:ce:67:65:8d:62:f2:7b:
         98:f6:42:63:12:03:95:8f:fa:9b:c3:28:05:c7:98:57:d1:3b:
         76:07:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:40:54 2026 by rpki-client