Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          DvUZMOzm9zgJKc7O70xgAOBMOHuBAlRInVIbB8XVVpg=
Subject key identifier:   D9:6F:FC:2D:9B:9B:9C:87:65:7C:CA:7F:1F:34:86:C9:B0:87:E2:B9
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       01A0D8DED8C28332FA876E06FCEBFED43F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 14:01:18 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:18 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:18 +0000
Files and hashes:         1: GNmDEXAk_Y2HliZsrfR_YJwZxS4.roa (hash: q5k9K7OPxEr/ETIohhVcMQ1Er7f/1cnP4+q2GfC1RtE=)
                          2: ZbE102VRAczBwFbNm6WP3CfOeC0.roa (hash: rVoFQaYjG4H+zjgihkyFbOYOQwXJLuimbNMp54cfD9I=)
                          3: dteUtIVkvsySV_CjqNsNxObZOfQ.asa (hash: niDPdZHwy/VWYjuSwWSwjjYHKrxlQAl3ZNw3cbCQYuE=)
                          4: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (hash: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek=)
                          5: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: jmGdYwZ4OX7Py7Qt5F2W3VfatJIylyEh6D8CT6HVKz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:d8:c2:83:32:fa:87:6e:06:fc:eb:fe:d4:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Sep 25 14:01:18 2026 GMT
            Not After : Sep 26 14:01:18 2026 GMT
        Subject: CN=d96ffc2d9b9b9c87657cca7f1f3486c9b087e2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:66:b8:73:94:3d:49:f7:20:66:04:a3:91:
                    05:a3:17:2a:c3:0b:60:33:e6:ed:26:26:11:c6:10:
                    6b:52:bc:99:d9:f3:5b:4d:68:33:92:9e:04:6e:ec:
                    5a:d0:8e:02:9f:2d:fc:7e:cc:30:b2:f1:89:58:42:
                    5d:b6:c8:3d:d1:93:dc:a6:ee:8d:ac:fe:8c:09:0c:
                    62:2c:43:2c:9a:aa:ba:cd:8c:72:81:95:2a:5a:b6:
                    2f:2c:9e:4a:b1:2c:05:2f:e6:aa:af:c0:ac:c1:fd:
                    f9:f8:98:0c:ec:dd:93:09:cd:25:aa:45:07:7f:6d:
                    de:d4:ae:b0:13:52:db:ff:0e:96:00:d0:6f:58:40:
                    64:41:e2:9a:13:e0:7e:ee:65:77:4f:a9:31:14:78:
                    f8:fb:54:66:75:3a:4c:94:d3:fa:4c:a0:a9:e7:82:
                    81:ac:d7:b7:1b:12:7d:b3:2b:f1:b7:e5:63:22:fb:
                    53:74:ae:7f:b6:b0:6d:bc:7f:dc:1d:0e:c7:b5:a3:
                    60:47:79:ff:d1:84:88:db:47:fc:0a:0e:aa:56:0d:
                    9f:bf:14:86:ae:d8:38:9c:a4:2a:70:79:0d:e9:f7:
                    2c:46:91:6f:f2:f9:4b:2c:78:40:a2:31:11:6d:22:
                    10:ae:14:a8:d1:8f:55:54:21:19:7e:a1:ae:c5:f0:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:FC:2D:9B:9B:9C:87:65:7C:CA:7F:1F:34:86:C9:B0:87:E2:B9
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:25:6b:eb:f5:11:fe:3b:7a:9c:a3:8f:28:31:e7:50:ad:
         7e:39:9b:37:7a:5c:70:69:b9:e6:ea:dd:37:9f:5a:41:7f:e7:
         5f:dd:2b:83:f2:03:9f:d5:2d:32:f2:c1:41:4d:e2:72:35:af:
         2b:55:4e:b4:22:1a:50:7e:32:c4:ef:a8:1a:c7:2b:62:fb:f5:
         f1:ee:05:dc:70:fa:aa:39:89:03:bb:ca:23:9f:38:1f:af:1a:
         28:50:e0:99:f0:85:a8:fd:ea:46:81:3f:d1:bc:da:dc:f2:17:
         bc:e3:f6:3c:a8:2a:41:b3:52:1a:a3:97:ff:59:ee:02:4e:48:
         fa:0c:cd:04:67:3c:38:72:ff:25:26:60:5e:ab:9f:3e:3a:62:
         77:f8:9c:eb:f7:55:92:e4:78:66:76:33:d0:b5:fa:de:dd:f1:
         61:ce:cc:34:cf:ec:6e:38:7a:ac:ac:4f:72:3e:83:8f:0d:f6:
         45:ab:91:00:5c:70:47:60:2f:4a:0e:0e:24:da:05:f8:78:d6:
         85:b9:aa:72:7f:72:02:66:e9:60:bc:03:aa:a8:a4:ae:ca:78:
         a9:b2:e9:9f:45:75:a7:ba:d0:4a:29:96:5c:0d:cb:3f:bd:ff:
         a9:03:16:01:bd:ea:c4:fa:59:ab:97:70:89:5f:45:6f:1d:de:
         a5:2f:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:15:07 2026 by rpki-client