Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File:                     nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier:          w2FjFM79WTJRM2AwK5k9/pae+ylL6ns4CdaTTCf5r34=
Subject key identifier:   F2:61:01:9E:67:6F:9F:69:E6:20:F6:5C:29:61:05:5F:92:92:EE:F7
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer:       /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial:       01A1DE02C342041CBDBA29D05D4EAEA46CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number:          0257
Signing time:             Sun 15 Nov 2026 07:01:25 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:25 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:25 +0000
Files and hashes:         1: 0ukpVUSxlWUjEn8_3Xhh5EdLxE4.asa (hash: j4wQB6gt1Z/UKS98HN0+WjuxJxJyXB/YyRal6d7AqSk=)
                          2: 1zwO-pRpLQjpKdc2fMnL99i_j-Y.roa (hash: SYfKKB6gtn0cNSUNi0rlTL24CWOzIm0TRFFugkUSGaY=)
                          3: ZGnoRW5cVvJJj2NLujSWP8-p4ME.roa (hash: SVrmw2kPu3uWDYtUFMQIl+Wr3E0Z77xS+MusJocEbUE=)
                          4: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: e9ROaN0uNu92OUivUNlJ+7B3vrZd8X7cj/J4gMttZX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:c3:42:04:1c:bd:ba:29:d0:5d:4e:ae:a4:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
        Validity
            Not Before: Nov 15 07:01:25 2026 GMT
            Not After : Nov 16 07:01:25 2026 GMT
        Subject: CN=f261019e676f9f69e620f65c2961055f9292eef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:30:88:4f:d2:96:1f:75:9a:77:fa:71:bf:
                    df:e1:3e:ef:be:87:6f:53:4c:b1:2e:53:a4:a9:e8:
                    ce:91:ed:90:66:e5:8e:4e:8b:6c:48:cd:4f:ef:4b:
                    cd:a9:77:ef:77:93:85:54:b7:1b:28:db:9e:99:fa:
                    d9:8c:3a:c8:ce:6e:cd:07:2e:17:81:23:03:66:d5:
                    b1:ca:d4:d3:88:3b:02:75:c9:a9:ea:9e:d4:03:26:
                    9c:1c:b7:9e:39:b9:6a:a6:7a:55:f9:d5:5c:3d:2c:
                    c6:53:b9:62:28:58:1b:c0:25:3a:4e:c0:cd:10:47:
                    d2:c1:3f:71:5d:b8:c6:fc:91:aa:2a:e4:e7:a9:86:
                    cb:f0:55:55:1e:25:c9:f7:3d:af:47:91:fb:d7:7a:
                    2b:73:30:a6:b5:89:5f:31:e6:ac:b5:fa:d4:3b:45:
                    b9:0b:45:38:e1:56:69:ef:42:81:e6:6a:00:c4:ed:
                    ed:5b:0d:e7:53:a1:2a:2e:2d:de:c5:fa:6a:20:3b:
                    f3:ff:11:24:4b:f9:a2:d5:8b:19:04:76:67:f8:41:
                    21:88:0d:6e:56:c6:7c:45:7b:ab:dd:a2:72:d5:da:
                    6c:c6:10:8c:4e:2a:4d:ad:66:d0:dd:c8:ba:0c:d9:
                    21:c1:92:d2:bb:eb:b3:a9:a9:c0:b0:42:9d:24:ca:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:01:9E:67:6F:9F:69:E6:20:F6:5C:29:61:05:5F:92:92:EE:F7
            X509v3 Authority Key Identifier:
                keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:cd:9b:d2:00:d3:91:e6:84:c0:b0:a4:82:54:93:88:67:
         ed:90:e7:c8:44:e8:d3:8d:55:3d:78:c1:5f:af:1a:57:66:63:
         88:44:86:7e:20:bd:e5:59:57:d3:78:6b:bb:a1:59:d9:d0:d3:
         b6:56:62:8f:f7:1b:e9:9a:58:a1:0f:71:29:98:c7:3c:9d:29:
         a8:21:61:09:04:a2:46:4b:cf:a9:67:99:00:d2:ce:d5:f2:45:
         27:d9:24:85:df:4c:63:45:5c:b9:c2:84:6c:4e:dc:84:a4:98:
         0a:b7:1f:48:19:2e:ae:16:06:b7:73:33:f9:6f:fe:66:b2:1a:
         ec:c8:e5:23:5e:08:e5:6c:0f:4b:7a:46:9d:52:c7:53:66:80:
         18:cb:6f:de:e6:5d:8c:36:24:3e:d1:91:1a:6c:44:bc:9e:e3:
         00:1e:fa:66:5d:78:5c:45:84:72:f7:08:6d:21:84:3b:b3:bf:
         da:28:8e:79:91:6d:a5:f0:db:6e:32:54:c0:16:70:64:d0:ab:
         97:3c:f1:32:df:50:5d:dc:80:2b:2d:83:44:ed:13:54:80:59:
         91:50:31:0d:fa:d9:65:f3:32:f1:ea:2a:17:95:ca:79:b3:e2:
         26:a7:49:4c:34:b1:ad:34:69:cb:18:41:e2:c4:e9:84:5b:26:
         30:00:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:40 2026 by rpki-client