Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          cu882+iSrVmN02+p0lYfntttFiVxxUdeCYNh7uiIKRA=
Subject key identifier:   08:34:33:37:CE:79:05:B8:8F:AD:E0:79:FE:EA:F5:4F:62:AA:7F:1D
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       01A0D56F9B7DB8514B1116EBE4751766875F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1A7C
Signing time:             Thu 24 Sep 2026 22:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 22:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 22:00:56 +0000
Files and hashes:         1: NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa (hash: 60B8Z6NMx31io1/yt+mCoe3AOI225aq1Qj6yflpDE9M=)
                          2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: qyAYL+Zih9D9WxTUDdqvE01XqjkK6New3FWMXsJMLo0=)
                          3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
                          4: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
                          5: x62fdnQHTG86kc8QeNrs-Fg3oVE.roa (hash: Q5HR/EB53DA3xDXZeryGNxJzH4ahXtlYt7caGd1WQn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:9b:7d:b8:51:4b:11:16:eb:e4:75:17:66:87:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Sep 24 22:00:56 2026 GMT
            Not After : Sep 25 22:00:56 2026 GMT
        Subject: CN=08343337ce7905b88fade079feeaf54f62aa7f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:cc:e6:c4:07:b0:50:34:19:89:d1:04:8f:
                    0f:e0:c9:33:61:38:9b:45:82:77:61:5a:6a:33:78:
                    6d:ed:2d:70:0d:8f:e7:fa:ad:c7:5d:c8:ca:8e:f2:
                    5f:3e:31:c8:37:54:c5:3e:01:21:e9:c5:6a:3a:cb:
                    24:cb:ef:21:97:4d:65:d8:eb:d3:0e:4c:96:4b:12:
                    dc:92:8f:a3:ac:91:71:87:e8:69:ee:60:07:be:47:
                    95:d2:b5:e4:84:34:37:b9:8a:65:b2:35:47:3f:49:
                    43:1b:5d:f5:4b:14:a0:dc:8d:46:a1:90:7a:79:3b:
                    f2:ea:01:1f:c8:75:89:0c:88:19:d6:fc:bb:33:88:
                    59:a5:94:9a:5c:b9:57:ef:31:38:82:bc:0e:10:cc:
                    b9:cd:5a:c7:92:44:c5:5f:74:12:54:db:1c:87:4d:
                    a6:26:e3:fe:45:43:62:cd:e4:a3:52:22:6f:33:44:
                    65:5a:3d:24:fb:aa:2a:30:f1:a1:3f:6d:4c:b5:7f:
                    f3:f1:5b:a0:01:f8:aa:2c:74:a2:4f:dc:c0:76:81:
                    fb:74:e7:b6:6f:17:6b:53:9b:f6:f1:95:a5:73:fb:
                    46:2c:0e:b5:e2:85:89:30:8f:38:f1:40:dc:cc:2a:
                    3c:d8:44:e2:fa:64:a6:93:27:cf:75:e9:4a:c5:5b:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:33:37:CE:79:05:B8:8F:AD:E0:79:FE:EA:F5:4F:62:AA:7F:1D
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:46:d6:b6:f5:8a:03:ec:e9:2d:65:11:ad:63:5d:1a:f9:
         37:c2:d1:ba:ee:cc:de:9a:60:e9:19:a0:de:29:21:29:85:23:
         66:8c:45:ec:47:6f:b6:b6:c7:06:2f:57:c5:04:85:3e:a1:7c:
         09:38:80:6d:42:27:8d:f5:87:86:47:c5:ad:95:96:03:3c:ae:
         b1:0b:4a:fd:ad:96:3c:24:14:a2:b3:4f:c0:b5:bd:1f:7f:ca:
         da:16:31:b1:48:2e:d2:8d:1f:33:64:7c:ee:23:24:42:4f:7a:
         0b:c9:94:50:10:4f:eb:a3:d6:10:62:aa:1c:eb:dc:e4:20:35:
         de:53:d8:c3:19:6f:40:53:50:70:95:85:81:83:e4:47:4d:f5:
         56:6a:b3:72:30:c8:39:f0:11:8b:05:2d:fe:9c:2a:4c:95:ce:
         5e:d0:a3:ec:b0:c2:00:ee:ab:a0:b8:9e:3c:a6:f7:71:be:7d:
         ad:c1:81:5f:db:2c:f5:f5:eb:a5:fd:00:a3:79:c8:49:2c:ac:
         54:2d:f7:83:c6:2a:5c:21:78:6d:18:e7:2d:b3:b9:40:bf:ca:
         d4:c2:a4:50:eb:4e:73:57:a1:5d:1f:3c:66:fd:c2:9b:82:f6:
         c9:57:a3:e6:ea:84:94:c1:b5:4a:0c:9c:5f:2f:67:5c:c3:f0:
         a0:da:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:42 2026 by rpki-client