Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File:                     NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier:          8zOoxWeXXqlGijVkpXHwm8EIwbl/1jZvjoD+a1xKkyg=
Subject key identifier:   A8:99:B5:E9:18:57:6F:65:02:63:BD:02:98:C5:48:2E:C6:76:F2:84
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer:       /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial:       01A0DB7222903C4F65E5370F4146F81EFCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number:          076B
Signing time:             Sat 26 Sep 2026 02:01:25 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:25 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:25 +0000
Files and hashes:         1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
                          2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: t6MiadMkNAxKtKaUyQvA9ybstrXtOPS+7oIODS64rgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:22:90:3c:4f:65:e5:37:0f:41:46:f8:1e:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
        Validity
            Not Before: Sep 26 02:01:25 2026 GMT
            Not After : Sep 27 02:01:25 2026 GMT
        Subject: CN=a899b5e918576f650263bd0298c5482ec676f284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:5a:0e:24:fa:aa:9b:d2:13:6d:2e:ef:cf:
                    2e:e7:53:23:8f:09:67:78:e5:09:81:aa:8f:89:b8:
                    af:e4:84:53:45:ca:66:e4:cd:90:a5:fb:44:bf:ae:
                    57:11:18:4e:27:cd:2c:8b:c5:f8:1b:bf:05:ae:fb:
                    8e:4f:8c:1c:61:c6:9b:73:8c:4b:5a:1f:af:cf:04:
                    58:b1:45:44:8e:ba:60:52:96:fd:01:09:a4:34:03:
                    ea:bd:d8:9b:02:b4:bf:45:c8:99:38:25:eb:42:fa:
                    69:95:64:57:f1:5e:a3:86:9d:1e:6d:75:d8:54:ab:
                    98:1e:f1:4d:b8:2e:a0:dc:d9:15:f5:70:3c:8e:93:
                    3d:e2:3d:ef:22:14:4d:ad:0b:2e:71:04:c6:8e:08:
                    b6:48:ea:eb:f4:81:9a:ae:3c:1c:4e:52:75:99:e6:
                    7b:21:0a:f0:79:48:54:17:ff:61:c0:5b:27:88:5d:
                    f3:de:3e:27:96:bf:5a:1c:57:00:8f:af:a6:db:79:
                    f5:3c:27:0e:31:c1:59:8a:a1:44:3f:7d:43:27:2c:
                    32:93:33:20:f6:28:1b:c4:f4:41:c7:9b:ee:08:13:
                    99:6f:9a:78:62:1f:fb:55:3c:d2:a1:94:42:36:dc:
                    85:77:c5:7e:ca:45:21:44:c7:41:a0:0d:d8:92:e3:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:B5:E9:18:57:6F:65:02:63:BD:02:98:C5:48:2E:C6:76:F2:84
            X509v3 Authority Key Identifier:
                keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:82:1b:f2:6e:76:b7:2f:be:fd:e4:48:cf:5d:fa:91:f5:
         1a:3b:99:04:d7:fc:5f:cd:d1:35:28:8f:55:5e:e7:0c:80:fd:
         bd:29:cf:2b:3f:3d:74:b8:c7:10:2a:64:1d:68:d9:13:5f:89:
         5d:c7:58:66:23:48:6e:3d:74:b8:a5:b3:84:a0:62:ed:94:61:
         e2:aa:d7:12:4c:4f:53:cc:c1:10:ab:ae:f3:9c:b3:40:bf:61:
         2f:3a:a3:56:83:92:45:b4:35:7a:51:1f:29:f5:92:7b:4b:52:
         64:39:54:83:35:42:a3:d1:7f:9f:6e:59:d2:34:30:4c:4e:4a:
         40:05:43:51:fc:fc:5e:62:e6:ec:6c:e8:9d:be:41:23:7c:35:
         e4:22:e1:b1:01:95:8f:f0:81:4e:42:12:36:50:37:91:dd:73:
         2e:e4:c0:93:73:b0:72:85:88:46:ed:27:32:86:ae:b7:9a:ac:
         06:e8:11:a6:74:dc:0c:01:30:76:0c:41:b2:6b:07:a1:a6:40:
         01:b0:60:6a:ba:35:a8:d6:20:9c:49:76:59:8f:1d:22:51:09:
         f5:f6:3a:70:64:0a:1d:52:f5:b9:4a:a7:41:34:39:d1:29:e0:
         db:36:34:51:0a:25:70:5c:8b:4e:79:57:b7:9f:af:cb:95:ca:
         eb:a2:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:58:54 2026 by rpki-client