Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File:                     NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier:          7ILU17tG1II1YilderJexAfSqFPe+lGaCCjbqo+HC74=
Subject key identifier:   E6:77:5E:54:E5:A7:00:09:EB:8D:E2:E7:D6:96:BF:DF:9E:6B:B6:05
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer:       /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial:       01A0D7966059CB7858553DAEA4563C0FEA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number:          07E5
Signing time:             Fri 25 Sep 2026 08:02:31 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:31 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:31 +0000
Files and hashes:         1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
                          2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: s2yiXNsxmOyq9qtG+pVagIzBna4OM3jRvIEg/c2kgv8=)
                          3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
                          4: cWvOdIg2noCYJK67b7smFIMMw4g.roa (hash: jiBllTk0LDqmGqzBfF6DX67GW5ceJzuLTPIl+rqWXac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:60:59:cb:78:58:55:3d:ae:a4:56:3c:0f:ea:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
        Validity
            Not Before: Sep 25 08:02:31 2026 GMT
            Not After : Sep 26 08:02:31 2026 GMT
        Subject: CN=e6775e54e5a70009eb8de2e7d696bfdf9e6bb605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:71:ae:2d:14:85:ce:21:ef:ab:5e:70:a3:
                    26:3e:2b:7e:d7:e6:c4:6a:ee:ee:f0:7a:ce:0d:10:
                    4f:fb:56:1f:3b:70:51:45:af:94:4d:9a:73:86:84:
                    64:42:e2:07:4d:7a:6c:36:cb:ae:6b:f4:71:b4:43:
                    24:c2:e2:bc:05:95:54:07:00:ad:c9:35:9c:95:6a:
                    44:c3:05:42:a7:87:08:8b:57:55:55:db:5d:fa:05:
                    9c:1d:e7:0c:b6:03:3e:7b:bd:99:47:d0:d7:34:ea:
                    58:72:95:c8:aa:f2:1c:d8:86:2d:f9:9a:af:5a:c9:
                    45:ce:4e:d0:84:33:5d:5d:bd:76:d3:bc:2a:81:4a:
                    66:f9:5a:f2:27:a7:b9:6e:6a:a2:7b:09:ad:65:db:
                    be:10:b7:06:b9:90:8a:f7:45:a6:68:bd:c3:e6:e7:
                    49:98:b5:3c:df:8c:d1:6e:99:4e:6b:93:6e:01:94:
                    71:5d:7f:d4:dc:ed:31:1a:a2:46:2f:c9:ff:e5:2d:
                    e1:cf:90:5a:1a:0e:02:73:66:b2:84:f7:41:7e:53:
                    27:f9:54:72:dd:54:35:8b:c6:b2:e4:05:2a:44:10:
                    e2:91:6b:80:58:ed:1b:67:12:9d:4b:07:97:af:bb:
                    eb:ae:d5:ad:72:c1:e3:f2:16:ab:3a:11:0a:c3:3d:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:5E:54:E5:A7:00:09:EB:8D:E2:E7:D6:96:BF:DF:9E:6B:B6:05
            X509v3 Authority Key Identifier:
                keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:74:d5:92:cf:92:ad:a9:44:3f:12:cd:87:2f:13:5b:e2:9c:
         fb:a4:23:05:66:91:d6:26:8f:2b:d0:2a:01:96:96:35:c3:1f:
         77:1c:8b:03:7f:d0:09:ee:5d:ca:84:2f:03:be:a4:ac:5c:5c:
         02:3b:e2:a0:27:a3:41:58:08:fb:3d:2a:0b:5c:bd:12:77:13:
         00:eb:7c:8c:2d:bf:1b:25:ee:b4:83:72:08:e5:66:9f:7d:38:
         8a:41:c6:bd:d7:86:f9:de:b7:93:db:56:9a:5a:f7:ef:b2:d7:
         a5:5f:5d:18:3e:29:13:28:23:d2:bc:49:09:d9:58:a7:e8:d9:
         8f:7d:95:ff:9c:1d:ff:96:1c:07:0d:22:93:67:74:51:93:4c:
         e7:12:24:a9:26:1e:fc:69:9d:80:1a:65:f1:d7:79:b9:c3:6d:
         fc:63:09:1a:d4:35:28:7a:d9:04:bd:c2:d6:6d:d8:11:56:8c:
         65:ca:cf:17:4b:bd:ad:4f:21:b2:0a:a9:27:64:b9:1d:a6:c6:
         63:6a:8a:20:9d:9d:a0:54:51:88:24:90:68:e9:cd:5b:0d:b6:
         48:00:4f:b0:8f:47:fb:8f:0b:ae:f8:98:08:f0:d3:42:40:ab:
         e4:fb:58:2a:88:4c:de:14:69:cc:08:2b:d8:33:2c:2e:97:3d:
         c0:e4:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:24:50 2026 by rpki-client