Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
File:                     nq6sEAdE1f1pSjlRQgPxZWfowxc.mft (raw, json)
Hash identifier:          LmBCjaaJLurXqG2HyuGjsgOHaBs/ew0p3nhKHn5+0uE=
Subject key identifier:   77:F7:75:E0:3E:31:C7:88:A4:12:B5:EA:4B:54:1B:89:39:C0:FF:1F
Authority key identifier: 9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17
Certificate issuer:       /CN=9eaeac100744d5fd694a39514203f16567e8c317
Certificate serial:       01A0D7CC620DEDB12495C877497035086093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 09:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:30 +0000
Files and hashes:         1: nq6sEAdE1f1pSjlRQgPxZWfowxc.crl (hash: +zd9O13ahMhATk1f4HKaEIlJJ/CFn/gFXzvAwHeGrMg=)
                          2: s9EWiU39iYMNrFtqvNq3BJrO4kk.roa (hash: o8TXQ6W+cJhZM+9AeN/X1v6EizJQvO7ynYTfhk5CPpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:62:0d:ed:b1:24:95:c8:77:49:70:35:08:60:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eaeac100744d5fd694a39514203f16567e8c317
        Validity
            Not Before: Sep 25 09:01:30 2026 GMT
            Not After : Sep 26 09:01:30 2026 GMT
        Subject: CN=77f775e03e31c788a412b5ea4b541b8939c0ff1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:09:68:dd:c1:e3:d2:61:9b:af:e4:c5:5e:
                    cf:e2:69:2a:fe:1e:53:51:7c:08:05:72:70:f5:16:
                    ee:54:d6:19:9e:2e:e8:92:02:2c:4d:47:20:a4:21:
                    14:de:79:5c:18:23:5d:c4:cc:bb:bb:06:7f:9e:e3:
                    d9:67:5c:4e:1e:a8:4d:4c:72:1e:eb:8a:de:89:c4:
                    2b:83:be:03:88:73:04:77:8e:11:cd:cb:f2:24:b7:
                    f4:e9:97:dc:29:2f:df:92:35:24:b5:28:45:b1:4d:
                    ff:29:8c:42:e5:22:a5:3c:d4:8b:19:ad:48:ff:66:
                    29:65:b6:bd:96:23:4b:8a:f1:0f:26:cd:5e:ba:c8:
                    56:61:c9:59:41:3f:bb:69:74:51:cc:fb:30:9e:b6:
                    1b:83:3d:ae:67:f3:20:b6:34:ff:34:f2:ac:4a:2e:
                    1b:a6:13:db:c6:6b:be:3c:c2:82:af:75:5a:6b:32:
                    5c:31:ff:21:68:42:de:b8:57:33:24:0a:d6:90:08:
                    e1:e9:68:6e:b5:02:1a:af:b7:ab:50:f1:d1:9d:76:
                    1b:71:b9:4d:7e:9a:8d:7f:ed:e0:99:d7:39:18:3f:
                    33:53:01:a3:97:f9:a7:9d:f0:f7:15:f8:83:26:b0:
                    aa:5f:b4:b0:2e:b8:09:23:eb:ae:3e:b3:2f:4a:4f:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:75:E0:3E:31:C7:88:A4:12:B5:EA:4B:54:1B:89:39:C0:FF:1F
            X509v3 Authority Key Identifier:
                keyid:9E:AE:AC:10:07:44:D5:FD:69:4A:39:51:42:03:F1:65:67:E8:C3:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nq6sEAdE1f1pSjlRQgPxZWfowxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/nq6sEAdE1f1pSjlRQgPxZWfowxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:18:1b:62:98:25:8d:a6:80:d9:19:52:ee:c4:50:44:cf:68:
         3c:16:38:a7:4f:82:9a:11:ba:af:55:9d:d2:8f:1f:2c:be:b7:
         24:5c:cc:44:c5:5e:43:e1:12:e6:bd:2c:8a:28:c2:59:44:b8:
         a6:c4:78:c1:16:f1:84:0d:db:a0:5c:10:e6:87:21:25:f0:6b:
         14:6e:3b:df:a9:4a:f8:8a:22:31:10:04:a7:3b:6b:70:29:a5:
         8a:50:78:b3:40:9b:de:76:e1:b4:47:b9:5e:45:68:1e:a1:83:
         b0:a2:43:d9:f2:93:fa:84:0f:1c:48:64:8d:5d:35:64:83:b5:
         c0:a8:2c:8b:9e:3f:97:1f:57:eb:a9:62:4e:f0:0a:8c:cc:9b:
         77:68:cf:20:fb:13:39:26:bb:41:37:18:0d:4f:b7:66:07:a8:
         80:14:e7:b9:dc:12:d2:af:85:fe:a1:9f:22:35:bc:84:11:bf:
         7d:e4:4a:b4:6f:b5:43:1b:0d:73:f5:17:6f:e7:94:6d:64:b3:
         0c:a7:19:9d:a0:0d:bc:86:da:45:5e:0e:db:69:a1:eb:bc:83:
         79:d7:10:8c:81:2c:c4:df:15:19:ee:54:01:ee:7b:60:cd:e8:
         69:30:53:77:5d:6a:8e:ea:fd:13:c2:c9:82:df:75:1b:bb:a1:
         3e:28:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:12:25 2026 by rpki-client