Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File:                     0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier:          mefkpkT8wcJvNbRGe0S4uu/mGQisOJltUAAq5p6IIZY=
Subject key identifier:   51:27:4E:EA:18:A6:31:A5:3B:DF:A0:0B:1E:1C:72:D5:2C:A0:6A:78
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer:       /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial:       01A0CEFF9A0230F86FE8C888920066E3839B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 16:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:52 +0000
Files and hashes:         1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: B7M7EWZJqJ+ciQQtyk9CtZy8j8GwhOP59rKXLP11HcI=)
                          2: VIaUBNL6WlewF92VFkKdJgnVoGY.roa (hash: BUyipvdgIG16YQ2huh7/x7j/eCf65uRrmNCB96nUmSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:9a:02:30:f8:6f:e8:c8:88:92:00:66:e3:83:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
        Validity
            Not Before: Sep 23 16:00:52 2026 GMT
            Not After : Sep 24 16:00:52 2026 GMT
        Subject: CN=51274eea18a631a53bdfa00b1e1c72d52ca06a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:3a:44:f0:99:05:b5:aa:60:4f:b8:c7:b3:
                    5b:b4:dc:aa:e1:ed:e3:a4:ad:6d:dd:cc:44:2b:ec:
                    d9:7c:49:69:47:6e:13:68:00:6d:49:38:1d:06:1f:
                    8e:8d:6c:51:a7:96:a6:f3:9d:19:b0:5a:71:4c:ad:
                    e0:77:af:01:fa:ff:19:31:9a:3a:ad:ae:dc:da:ea:
                    a1:5f:13:cf:ed:24:7c:cb:ef:a0:10:01:e0:44:09:
                    43:a4:3b:a6:2e:c4:fc:32:3c:ab:d6:4c:80:d4:4c:
                    e5:bb:95:0c:bc:f9:dc:17:70:e9:5b:bf:2c:77:00:
                    d9:c3:48:b7:96:8c:29:34:d4:22:e2:17:ea:8b:d7:
                    55:79:fc:56:7f:0e:59:71:1e:ec:87:fa:b3:dc:29:
                    62:72:f9:e0:1c:fe:9d:55:ba:6c:e9:e9:d0:c9:9c:
                    bc:f9:5b:2b:23:e8:e8:d2:f4:7a:e0:d5:27:bc:a2:
                    87:b6:a2:d8:98:8d:28:dd:9d:3c:94:c1:e4:63:07:
                    0f:7c:6d:03:9a:4f:68:2a:d6:43:00:8a:37:38:be:
                    ff:7c:7c:6b:e9:6e:eb:18:c4:07:7d:5e:0b:3b:07:
                    d9:8e:79:40:f1:21:08:86:78:d8:ae:98:69:0e:dd:
                    a5:89:36:fd:d4:70:b3:f4:b9:4b:d0:f1:9d:21:3e:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:4E:EA:18:A6:31:A5:3B:DF:A0:0B:1E:1C:72:D5:2C:A0:6A:78
            X509v3 Authority Key Identifier:
                keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:25:d0:aa:79:a2:bd:7f:fd:0b:83:bb:67:1d:63:87:fa:92:
         38:43:1a:96:f0:16:a7:9a:53:b1:f3:47:9c:07:7d:48:fa:66:
         5b:b2:a2:b4:5a:eb:1b:48:56:bd:a8:1e:59:95:76:4c:cc:19:
         bc:11:7b:a4:79:8a:06:0e:fb:38:76:26:75:14:92:9c:81:2d:
         c7:f9:98:8d:b7:67:c3:d5:fd:7a:24:85:ae:ed:19:5e:fd:a4:
         68:19:d2:7f:4c:34:0c:0e:73:45:3c:bf:93:f0:10:04:25:ab:
         0b:33:6f:06:c9:3a:3b:53:31:6a:7d:f8:42:c2:d8:eb:c4:19:
         b5:87:57:32:c6:0c:81:78:6e:7c:39:d6:5a:65:a9:a0:74:f9:
         c8:98:7b:a6:60:b1:bf:2a:15:c9:17:c2:04:76:14:a9:c7:89:
         19:93:55:32:9e:e1:32:e6:c7:59:ab:5c:b0:6e:05:1e:8b:9d:
         61:67:eb:0b:3d:df:65:9b:03:e7:1d:5f:8b:d6:2f:54:fb:4c:
         e8:a3:e4:00:a5:d7:65:ad:d1:01:f4:d5:26:aa:31:0b:dc:a6:
         ad:4b:46:0c:eb:2b:63:24:bb:b9:4b:3a:c1:b4:c0:d7:9a:55:
         45:9d:af:62:50:cc:ab:0b:68:2d:47:17:db:4b:3d:73:f8:f5:
         48:a7:a3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/5oCMPhv6MiIkgBm44ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjYwOTIzMTYwMDUyWhcNMjYwOTI0MTYwMDUyWjAzMTEwLwYDVQQD
Eyg1MTI3NGVlYTE4YTYzMWE1M2JkZmEwMGIxZTFjNzJkNTJjYTA2YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M46RPCZBbWqYE+4x7NbtNyq4e3j
pK1t3cxEK+zZfElpR24TaABtSTgdBh+OjWxRp5am850ZsFpxTK3gd68B+v8ZMZo6
ra7c2uqhXxPP7SR8y++gEAHgRAlDpDumLsT8Mjyr1kyA1Ezlu5UMvPncF3DpW78s
dwDZw0i3lowpNNQi4hfqi9dVefxWfw5ZcR7sh/qz3ClicvngHP6dVbps6enQyZy8
+VsrI+jo0vR64NUnvKKHtqLYmI0o3Z08lMHkYwcPfG0Dmk9oKtZDAIo3OL7/fHxr
6W7rGMQHfV4LOwfZjnlA8SEIhnjYrphpDt2liTb91HCz9LlL0PGdIT54WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEnTuoYpjGlO9+gCx4cctUsoGp4MB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCXQqnmi
vX/9C4O7Zx1jh/qSOEMalvAWp5pTsfNHnAd9SPpmW7KitFrrG0hWvageWZV2TMwZ
vBF7pHmKBg77OHYmdRSSnIEtx/mYjbdnw9X9eiSFru0ZXv2kaBnSf0w0DA5zRTy/
k/AQBCWrCzNvBsk6O1Mxan34QsLY68QZtYdXMsYMgXhufDnWWmWpoHT5yJh7pmCx
vyoVyRfCBHYUqceJGZNVMp7hMubHWatcsG4FHoudYWfrCz3fZZsD5x1fi9YvVPtM
6KPkAKXXZa3RAfTVJqoxC9ymrUtGDOsrYyS7uUs6wbTA15pVRZ2vYlDMqwtoLUcX
20s9c/j1SKejWQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:17 2026 by rpki-client