Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File:                     nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier:          zsupNKAVj4QtWlh1GuAD40U2DMJA996qdfQ20WxUiNc=
Subject key identifier:   24:6F:50:F4:11:C9:FD:5E:A9:05:0C:DD:6E:5F:B5:B0:DD:84:A9:F9
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer:       /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial:       01A130D86A3CA876C4CCABF3EF2EBA1EE74E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number:          0C65
Signing time:             Mon 12 Oct 2026 16:00:51 +0000
Manifest this update:     Mon 12 Oct 2026 16:00:51 +0000
Manifest next update:     Tue 13 Oct 2026 16:00:51 +0000
Files and hashes:         1: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: ssdZrmKWbAklf3rn5JODRZ3yk1FZ30jhltAlCNIHOJM=)
                          2: njOWzyw6BPbysiyLRcVX59-q4hc.roa (hash: vhZ8qAXL4RUIeajsso+zjNGjDXDgCoWsrZSWesPHRWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:6a:3c:a8:76:c4:cc:ab:f3:ef:2e:ba:1e:e7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
        Validity
            Not Before: Oct 12 16:00:51 2026 GMT
            Not After : Oct 13 16:00:51 2026 GMT
        Subject: CN=246f50f411c9fd5ea9050cdd6e5fb5b0dd84a9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:5b:1d:61:6e:42:8a:e9:f2:27:38:ea:42:
                    49:33:e7:34:b5:e6:ba:23:14:25:f1:8d:84:6f:94:
                    be:b8:92:5b:51:c7:1e:28:91:24:ce:3c:7c:84:6e:
                    2d:e2:df:9e:8d:23:c3:d7:e5:77:59:3e:08:e6:f1:
                    85:3e:16:70:4b:bf:51:75:93:5b:57:f7:18:90:07:
                    bd:c0:26:68:79:f8:e9:c3:66:66:5b:5b:74:f7:ac:
                    ed:ba:d4:0e:13:13:53:bf:46:a6:10:82:17:86:91:
                    d5:99:8c:37:b0:70:9f:f4:e8:c3:9e:29:f2:55:2b:
                    51:3b:9b:a5:6d:44:47:40:65:5d:d0:4e:50:02:03:
                    18:9a:0a:10:ad:bb:27:1d:65:0d:3c:38:12:92:4c:
                    ca:69:22:50:0d:7b:2c:5a:67:39:0e:bb:c7:1c:b5:
                    2b:35:19:40:e7:d0:f6:91:f5:59:57:00:e9:f0:f9:
                    72:23:8e:81:83:1a:be:1d:b5:73:f8:d5:d7:d6:30:
                    de:41:f8:52:92:18:e4:08:37:62:0d:d4:b7:f8:d2:
                    b1:1b:7c:b6:2f:ea:41:86:ae:48:e8:01:57:6d:f7:
                    c3:6f:65:4e:c1:16:1e:a4:fe:55:a6:aa:ac:5a:cb:
                    76:60:78:30:25:de:d6:0f:8a:88:e6:c1:27:7c:69:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:50:F4:11:C9:FD:5E:A9:05:0C:DD:6E:5F:B5:B0:DD:84:A9:F9
            X509v3 Authority Key Identifier:
                keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:9b:0c:2d:21:34:0e:3d:a9:0a:d6:72:51:ba:23:23:1c:
         eb:14:dd:42:8f:27:d9:2f:ad:22:36:22:da:f8:72:c3:3c:c0:
         cd:c3:c7:5b:2c:70:b9:76:d7:c6:43:65:f7:dc:6b:60:b4:d6:
         e3:e3:f9:ab:ea:8b:bf:10:c6:61:98:79:86:96:82:69:97:a6:
         3f:9e:a0:91:34:1d:d0:d0:0d:35:fc:68:44:68:17:4d:09:dc:
         1d:ac:85:1d:d3:ca:5f:fe:ce:98:39:d4:29:c8:03:66:2b:bc:
         9c:a9:70:2c:66:33:3f:3b:58:5a:3a:50:02:d4:6a:38:fc:5a:
         5e:20:a9:58:4f:8c:1e:5b:f3:6b:60:50:b9:9b:d9:a0:ee:1a:
         09:a6:3c:0d:03:cd:6f:e8:4b:c0:7d:80:fd:ed:b7:8f:d3:9c:
         5d:4b:d7:40:fe:0d:43:4d:e2:0a:7d:9d:24:cc:80:28:28:28:
         d1:2a:4d:39:81:f3:37:9e:6e:d4:aa:b3:ba:2c:30:9e:9e:db:
         c5:08:53:58:26:f5:d5:83:5f:ad:46:ae:71:af:eb:bd:c7:7a:
         7c:f0:ae:31:c9:93:bf:fc:06:0e:f2:ba:21:79:04:44:de:0b:
         a8:e4:89:3a:f3:30:57:fb:62:4a:ce:03:8c:2a:22:2e:6e:aa:
         94:f9:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:41:58 2026 by rpki-client