Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          ExVvPAPUw91Xfl75R+DMCyNzPxhmotfNbCl8gPxy7FY=
Subject key identifier:   01:EB:C6:DA:F6:56:33:33:AB:FE:D3:B0:55:BB:E6:35:FA:0D:FD:D4
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       01A0D3833DBF5DCA0D7AABBD6B598ECE1E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          1A6D
Signing time:             Thu 24 Sep 2026 13:03:08 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:08 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:08 +0000
Files and hashes:         1: EqP-OwutSropMKZDpJsJICxaOQA.roa (hash: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: RhmIfTOP6MXQ9OJ06vGqyTDslgR8EuYdbNBURmvFaeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:3d:bf:5d:ca:0d:7a:ab:bd:6b:59:8e:ce:1e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Sep 24 13:03:08 2026 GMT
            Not After : Sep 25 13:03:08 2026 GMT
        Subject: CN=01ebc6daf6563333abfed3b055bbe635fa0dfdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:32:f1:94:6d:a7:b6:e6:49:40:2e:41:2d:
                    55:64:8e:d2:4a:49:1b:7c:c9:c2:ef:d5:1a:96:b5:
                    62:67:65:f0:6f:d7:95:3a:7b:a0:4e:7e:1d:96:bb:
                    95:87:43:5f:39:aa:e3:22:a0:99:35:76:58:63:5c:
                    59:36:23:6c:0e:af:32:e0:a2:aa:01:4a:96:c5:58:
                    fc:ef:db:9f:eb:05:4a:86:41:0c:ee:84:86:fd:42:
                    b9:fe:dc:53:31:70:5c:c8:9e:54:dc:0e:a6:41:38:
                    d7:3e:22:11:f7:a6:3b:b6:ad:0d:ca:d8:9c:80:e5:
                    f6:ad:b0:e5:ca:a9:be:98:6d:68:27:28:4a:05:b2:
                    0c:95:a1:da:ac:28:ee:03:71:4c:b3:ad:e0:20:7e:
                    4d:6f:fb:5e:f4:14:90:32:52:cf:a6:6d:12:9b:cf:
                    21:5c:58:b3:86:8f:8d:5f:87:33:c7:1c:5d:ff:8b:
                    88:af:58:b5:3b:25:03:a1:81:ce:6c:6b:97:a7:64:
                    f5:1f:d4:53:69:8b:de:b9:94:b2:27:93:9f:84:64:
                    7e:b0:fa:5d:e5:61:5e:66:d2:eb:fe:18:49:e8:d3:
                    be:78:d0:44:c6:cd:c7:0f:de:86:1b:c0:b6:e5:1e:
                    c6:96:3c:e0:b4:ca:41:5c:57:24:45:e9:5b:85:fb:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:C6:DA:F6:56:33:33:AB:FE:D3:B0:55:BB:E6:35:FA:0D:FD:D4
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:06:15:13:9a:aa:e5:ec:74:49:72:b6:c8:6f:d5:3f:86:
         00:5e:4e:48:8e:28:b6:92:c8:74:c7:91:e0:7c:05:5c:07:80:
         dc:43:20:f7:13:d9:d8:46:89:dc:bf:30:76:c8:2e:a8:86:26:
         f9:7b:a1:d3:1e:a2:45:a1:d9:9b:33:58:58:17:91:51:ac:21:
         f3:d3:0f:8b:28:e7:89:7f:57:ee:8a:13:76:66:7b:ed:ac:97:
         ae:5e:4c:f0:f9:b1:8d:65:c5:d3:89:ec:38:68:43:e0:8b:fa:
         4a:20:7b:0b:8c:69:d0:c1:1d:63:52:3b:7c:79:ff:28:5e:f9:
         e3:69:9a:cd:c0:c5:2f:2a:19:5d:7f:4f:94:d5:0d:32:4e:39:
         7c:78:17:4c:fc:3a:a0:4a:13:2c:03:0c:b8:e2:ba:ed:0d:c5:
         0e:89:6d:77:57:2f:f2:e9:ed:37:e1:5d:f7:ef:d6:ae:65:b7:
         d1:40:2c:f6:af:c2:91:87:55:d1:c8:9d:4d:aa:7d:21:a2:0e:
         dc:09:07:cb:83:83:b9:04:fe:13:0b:53:07:c1:e8:81:c7:d2:
         0d:bc:45:ff:a4:f9:0a:d1:d8:2c:d4:cb:50:93:11:9f:e6:36:
         17:65:b3:83:e7:3a:8b:14:b7:36:c0:b9:e7:8b:65:bf:c6:ba:
         67:5e:86:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgz2/XcoNequ9a1mOzh5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzYwZWQ4ODE0MThhMjE3ZThkZDNjMWZhNTIzZTI1NjVj
YWViOWIwHhcNMjYwOTI0MTMwMzA4WhcNMjYwOTI1MTMwMzA4WjAzMTEwLwYDVQQD
EygwMWViYzZkYWY2NTYzMzMzYWJmZWQzYjA1NWJiZTYzNWZhMGRmZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu8y8ZRtp7bmSUAuQS1VZI7SSkkb
fMnC79UalrViZ2Xwb9eVOnugTn4dlruVh0NfOarjIqCZNXZYY1xZNiNsDq8y4KKq
AUqWxVj879uf6wVKhkEM7oSG/UK5/txTMXBcyJ5U3A6mQTjXPiIR96Y7tq0Nytic
gOX2rbDlyqm+mG1oJyhKBbIMlaHarCjuA3FMs63gIH5Nb/te9BSQMlLPpm0Sm88h
XFizho+NX4czxxxd/4uIr1i1OyUDoYHObGuXp2T1H9RTaYveuZSyJ5OfhGR+sPpd
5WFeZtLr/hhJ6NO+eNBExs3HD96GG8C25R7GljzgtMpBXFckRelbhfvqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHrxtr2VjMzq/7TsFW75jX6Df3UMB8GA1UdIwQY
MBaAFJzGDtiBQYohfo3TwfpSPiVlyuubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2Ut
NGNhODQyYmFjZGE1LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2UtNGNhODQyYmFjZGE1
LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY8GFROa
quXsdElytshv1T+GAF5OSI4otpLIdMeR4HwFXAeA3EMg9xPZ2EaJ3L8wdsguqIYm
+Xuh0x6iRaHZmzNYWBeRUawh89MPiyjniX9X7ooTdmZ77ayXrl5M8PmxjWXF04ns
OGhD4Iv6SiB7C4xp0MEdY1I7fHn/KF7542mazcDFLyoZXX9PlNUNMk45fHgXTPw6
oEoTLAMMuOK67Q3FDoltd1cv8untN+Fd9+/WrmW30UAs9q/CkYdV0cidTap9IaIO
3AkHy4ODuQT+EwtTB8HogcfSDbxF/6T5CtHYLNTLUJMRn+Y2F2Wzg+c6ixS3NsC5
54tlv8a6Z16GlQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:59:03 2026 by rpki-client