Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          mlJ7p5YFnJA6HcnFpQldLmGmtoB+r0L3bM76BvMMK/8=
Subject key identifier:   DD:DC:7B:F1:3E:14:CB:CA:76:EA:D8:13:55:0D:9C:22:43:BD:50:F7
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       01A0D45D430D90B406AC8E4DB9CF359A5FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 17:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:16 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: 8328EidzYo6ct4fK8fmMTKV4oO3t/ElJw+N0XaG5xUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:43:0d:90:b4:06:ac:8e:4d:b9:cf:35:9a:5f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Sep 24 17:01:16 2026 GMT
            Not After : Sep 25 17:01:16 2026 GMT
        Subject: CN=dddc7bf13e14cbca76ead813550d9c2243bd50f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:78:df:28:92:88:da:e2:dc:0f:3d:ac:f7:
                    16:28:7b:d1:9c:7b:9e:da:cf:71:ca:66:63:6e:a8:
                    6c:53:a0:f4:8c:4c:c9:b2:b7:b9:08:b1:6d:f6:b7:
                    7c:8f:3f:3b:31:b2:8d:df:71:93:b1:41:0a:0f:57:
                    fb:2c:e8:67:aa:53:4c:dd:74:84:e2:3c:cd:5e:e3:
                    e9:c3:fa:47:f7:40:04:0f:a6:dc:c6:78:e2:72:1a:
                    00:01:25:c1:e0:93:2a:3f:89:27:ab:f9:32:76:4a:
                    9b:23:4b:41:ba:91:4c:1b:61:0a:c9:37:4e:1c:24:
                    a6:18:a9:74:81:82:2c:88:72:ea:61:5c:d2:7a:d2:
                    ea:5f:31:31:af:e8:d3:eb:67:4e:22:cc:fc:7a:f0:
                    a9:dc:d9:75:04:f0:d8:79:d4:f2:17:ee:71:d7:b4:
                    ed:1b:bb:22:bc:8a:10:c5:84:69:e6:2a:de:88:5e:
                    a8:40:67:36:6c:c9:e0:1c:d2:63:72:a1:6d:eb:01:
                    80:69:4c:f1:7d:4d:4a:ac:66:3f:d7:e7:eb:fd:55:
                    77:d0:9c:1a:cc:c4:49:97:2b:7a:40:82:14:85:08:
                    be:04:b3:de:58:ab:a9:6a:f4:91:5b:b6:3a:b1:35:
                    31:14:2f:d7:d0:7f:6c:75:5b:4b:ee:f2:b0:62:ea:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:7B:F1:3E:14:CB:CA:76:EA:D8:13:55:0D:9C:22:43:BD:50:F7
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:f6:32:c4:2e:1c:bd:95:98:cb:98:86:90:0d:0a:7c:35:02:
         b0:0b:21:d4:d3:79:5b:37:e4:69:55:11:18:ff:be:17:c4:48:
         82:5a:01:1f:81:35:4b:81:51:39:01:63:3b:6d:84:a6:dd:62:
         85:7a:6c:6d:75:a7:cd:df:da:09:5c:9c:21:ab:9d:b5:bc:89:
         0d:1a:72:e8:ef:f1:a4:57:dc:0c:37:19:da:dc:50:92:14:6c:
         8f:ca:b8:f8:9e:22:44:cc:ae:7d:35:2d:c6:f8:1b:66:71:74:
         28:dd:2e:23:e2:cc:4c:04:fe:82:6c:8e:c9:b0:63:36:31:3e:
         23:c3:f7:15:a7:37:97:d7:87:b1:7d:bb:42:d6:6a:35:56:64:
         02:48:9c:6a:12:d0:de:29:be:48:00:20:35:4d:fc:12:3e:0b:
         07:e1:c8:23:21:b1:95:a2:85:9f:a7:43:3c:59:d7:b9:02:18:
         22:80:64:84:ca:8e:a0:2d:36:da:21:f0:b0:28:b6:b2:79:01:
         05:c3:7a:2f:68:56:17:4b:cb:66:8c:8c:72:07:27:74:b0:35:
         27:6c:33:94:a5:49:17:34:6f:07:2f:f5:fa:51:1a:3a:de:56:
         0a:b8:86:98:a2:f3:41:24:ea:5b:7c:8a:d4:6a:b9:d2:5e:56:
         16:6f:06:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXUMNkLQGrI5Nuc81ml/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3
YmFiNjkwHhcNMjYwOTI0MTcwMTE2WhcNMjYwOTI1MTcwMTE2WjAzMTEwLwYDVQQD
EyhkZGRjN2JmMTNlMTRjYmNhNzZlYWQ4MTM1NTBkOWMyMjQzYmQ1MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSB43yiSiNri3A89rPcWKHvRnHue
2s9xymZjbqhsU6D0jEzJsre5CLFt9rd8jz87MbKN33GTsUEKD1f7LOhnqlNM3XSE
4jzNXuPpw/pH90AED6bcxnjichoAASXB4JMqP4knq/kydkqbI0tBupFMG2EKyTdO
HCSmGKl0gYIsiHLqYVzSetLqXzExr+jT62dOIsz8evCp3Nl1BPDYedTyF+5x17Tt
G7sivIoQxYRp5ireiF6oQGc2bMngHNJjcqFt6wGAaUzxfU1KrGY/1+fr/VV30Jwa
zMRJlyt6QIIUhQi+BLPeWKupavSRW7Y6sTUxFC/X0H9sdVtL7vKwYuoxXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3ce/E+FMvKdurYE1UNnCJDvVD3MB8GA1UdIwQY
MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt
ZTFlYTQxYzlhMmU2LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2
LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4PYyxC4c
vZWYy5iGkA0KfDUCsAsh1NN5WzfkaVURGP++F8RIgloBH4E1S4FROQFjO22Ept1i
hXpsbXWnzd/aCVycIaudtbyJDRpy6O/xpFfcDDcZ2txQkhRsj8q4+J4iRMyufTUt
xvgbZnF0KN0uI+LMTAT+gmyOybBjNjE+I8P3Fac3l9eHsX27QtZqNVZkAkicahLQ
3im+SAAgNU38Ej4LB+HIIyGxlaKFn6dDPFnXuQIYIoBkhMqOoC022iHwsCi2snkB
BcN6L2hWF0vLZoyMcgcndLA1J2wzlKVJFzRvBy/1+lEaOt5WCriGmKLzQSTqW3yK
1Gq50l5WFm8GSA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:29:36 2026 by rpki-client