Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          R9DbAxZrpTAt+BEojC9zgcuzRTfRt5BA4k9WF/F1J6g=
Subject key identifier:   40:E1:F7:5E:83:E4:BF:A2:EF:4F:41:F9:6A:1D:92:81:D7:81:B2:A0
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       01A0DA96F919AC0C2986B64A1A62CCF89D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          0F71
Signing time:             Fri 25 Sep 2026 22:02:02 +0000
Manifest this update:     Fri 25 Sep 2026 22:02:02 +0000
Manifest next update:     Sat 26 Sep 2026 22:02:02 +0000
Files and hashes:         1: lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa (hash: IX8Zv7qUtgpAAei5zm/E62pQBDNZVJrE1Mk34lY2Lrc=)
                          2: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: MKCdT05RtT3XNV2RUhtAKBJroUnSIh3kF/Xowga1CcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:f9:19:ac:0c:29:86:b6:4a:1a:62:cc:f8:9d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Sep 25 22:02:02 2026 GMT
            Not After : Sep 26 22:02:02 2026 GMT
        Subject: CN=40e1f75e83e4bfa2ef4f41f96a1d9281d781b2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:59:1c:0a:5e:be:4e:1b:2d:3c:2c:85:b2:
                    1c:32:af:d6:c3:c8:ec:fa:31:a8:70:01:1c:6f:89:
                    9d:d4:fc:3d:d3:d5:92:22:48:d3:79:7b:4f:94:52:
                    d4:d9:1f:b6:da:45:9c:dc:13:82:12:68:9f:be:08:
                    ed:07:22:cb:08:43:1f:03:81:e4:86:20:29:ea:97:
                    ce:0c:b5:3b:9d:fe:27:8b:12:90:cf:16:4e:6a:2a:
                    55:11:80:11:fc:7c:89:12:00:2d:7a:b2:53:1f:90:
                    9c:74:d7:ad:73:aa:83:13:69:1c:81:57:07:b6:5f:
                    7e:47:5d:da:d3:e6:1d:04:a3:78:9f:18:3c:9a:48:
                    8f:8f:b0:22:6f:53:2c:91:f7:d3:cb:10:82:17:ab:
                    82:77:25:14:c8:a0:29:43:d3:30:55:2e:b1:f3:6a:
                    27:d3:de:d0:f4:cc:d9:61:e5:e8:cd:6a:a1:60:86:
                    26:93:17:40:c6:2d:76:27:6d:ba:1d:eb:04:42:fa:
                    42:a2:51:85:12:21:43:29:44:17:6b:8a:c9:af:57:
                    65:95:df:19:98:f1:67:c6:9f:62:dc:f8:70:87:28:
                    88:be:3b:e6:30:09:41:2a:e7:f8:6f:43:37:d5:e5:
                    87:87:c1:9e:e3:4f:cb:11:d4:a9:c8:ac:f4:64:6d:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E1:F7:5E:83:E4:BF:A2:EF:4F:41:F9:6A:1D:92:81:D7:81:B2:A0
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:92:63:1f:62:50:25:4b:4c:24:ab:11:5f:49:3a:ca:bf:cf:
         d9:f3:68:ed:84:c0:23:70:3d:75:3b:d6:01:c7:fc:cf:a0:2d:
         e2:d5:aa:5d:cc:c2:bf:1a:6f:a4:cc:59:61:55:04:60:b8:21:
         d9:0f:25:c9:82:bc:8b:47:7f:28:f5:1e:ff:7d:50:aa:d2:bb:
         a2:1a:e9:79:59:b2:65:86:41:53:90:47:db:ef:eb:4f:fb:85:
         b2:43:0e:79:e3:73:d9:44:3e:2e:e1:db:61:40:3b:91:dc:8b:
         df:dc:7f:3d:8c:ff:f3:73:79:af:f3:b1:15:c2:0e:af:44:0f:
         a0:98:29:81:8c:44:11:1b:32:ec:14:6f:3f:df:45:08:eb:1a:
         6c:1e:f0:8e:63:dd:5f:9f:02:5c:5a:bb:90:03:67:3f:2e:d0:
         cf:eb:e5:cb:3b:51:aa:9d:9c:e4:70:94:0f:ba:ec:01:67:fa:
         24:51:8e:f1:41:91:98:fa:02:51:2f:06:50:38:af:ac:c9:31:
         f7:b3:b0:ae:98:9e:0b:81:9f:30:db:93:05:5f:2c:c4:52:39:
         6e:3b:65:67:94:b2:6a:69:15:8e:3a:85:88:1e:61:5e:1b:f8:
         9f:c9:d1:0b:bd:0c:86:5d:96:c1:b0:32:5b:22:59:42:87:f0:
         23:80:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:44 2026 by rpki-client