Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File:                     NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier:          bgoUyXqBb6mJ675Rt9rUQ5HUQ5lYSkB8uBjeqiKZE4c=
Subject key identifier:   40:5B:C9:12:5B:20:BD:32:26:44:F6:66:12:2B:A7:96:FF:FC:48:47
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer:       /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial:       01A0CFA42A0DE2FE28AC48673A515CF1E4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number:          177B
Signing time:             Wed 23 Sep 2026 19:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:37 +0000
Files and hashes:         1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: wNQgwbcEXBv6cXCArxNDIUo1ALfZwcllqWK30KgO0Dk=)
                          2: crNlSSD3_o_rjDJ4ivFBA9DmxII.roa (hash: i+4Sbb5mbplP6hBN7BRF7gYb3D64RivwGrpfd57ymKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:2a:0d:e2:fe:28:ac:48:67:3a:51:5c:f1:e4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
        Validity
            Not Before: Sep 23 19:00:37 2026 GMT
            Not After : Sep 24 19:00:37 2026 GMT
        Subject: CN=405bc9125b20bd322644f666122ba796fffc4847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:8a:1c:bd:94:23:2d:81:6c:b0:0e:23:0c:
                    27:b2:b4:68:d6:22:9f:1b:ed:ee:c8:91:5a:fe:d1:
                    ed:b1:ab:42:28:2f:13:48:1f:4d:38:4c:ea:43:02:
                    d8:f4:bf:56:e4:0f:e6:b6:55:1e:47:14:b1:6e:0c:
                    3c:e5:bf:26:78:64:b0:77:06:93:23:96:ff:88:fd:
                    c4:05:20:1b:6a:b3:dc:ff:43:44:64:af:ed:ff:3a:
                    a5:0a:a7:38:8d:5f:1c:b8:b5:3a:22:f2:eb:f3:39:
                    23:86:b9:4e:e6:f9:4f:f6:a7:b6:4d:23:49:f7:29:
                    2f:ab:8a:94:eb:fc:44:77:9a:06:ac:72:6e:fc:19:
                    e2:ae:a7:19:5e:ab:07:1b:2b:36:17:02:30:44:a1:
                    34:e0:ec:73:a7:c4:39:c8:82:05:22:82:bd:e4:98:
                    38:8d:ed:9b:56:4b:02:75:70:64:ed:62:35:05:8b:
                    b3:61:f2:01:39:f6:51:92:3d:b1:72:eb:2f:a1:e4:
                    19:d3:6e:25:ba:2e:a3:9d:f4:f1:27:81:a0:8e:da:
                    59:78:8d:2a:cc:16:86:f2:6f:20:b4:c3:f9:fa:10:
                    35:5b:11:f3:98:ee:87:7c:c6:0b:a0:e2:83:5d:0f:
                    d0:0c:e9:e4:67:92:ea:f6:21:17:07:04:aa:3b:01:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:C9:12:5B:20:BD:32:26:44:F6:66:12:2B:A7:96:FF:FC:48:47
            X509v3 Authority Key Identifier:
                keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:9c:77:8a:2e:e8:29:06:ef:8c:3f:be:99:2d:0f:ae:b7:
         f1:98:75:a1:10:bd:3b:eb:c0:8f:67:24:46:70:48:ac:75:a7:
         98:d2:38:20:fe:70:11:51:17:80:8c:e0:26:7c:74:f7:60:9d:
         c3:a8:f0:79:0f:d9:95:95:68:3d:b2:e5:bb:d5:33:bc:d3:e0:
         61:fe:a1:5c:d3:1b:f1:db:33:58:fb:07:d3:5b:78:74:54:48:
         2f:a6:2f:e6:29:27:6b:eb:bb:3b:93:45:9a:2d:d3:8b:3f:69:
         a7:b3:8a:b4:8d:11:00:04:28:94:97:c7:2b:13:e2:01:e6:09:
         ea:ab:fd:04:47:f2:2f:c8:6e:cb:ac:69:d5:86:60:53:e7:a8:
         a9:40:82:6a:5a:a9:58:94:48:af:4f:16:b3:27:d1:89:14:f3:
         b2:a0:2e:36:79:9e:cf:1e:0e:d7:14:c1:24:3a:ba:6a:82:80:
         b4:cb:1b:a5:7c:ec:99:83:40:86:cb:91:fd:bc:94:6a:ea:cb:
         3d:f4:d0:b8:ef:c2:84:cb:b5:52:93:50:c0:f8:9a:85:40:2c:
         70:ac:41:e9:4f:46:ca:4c:ee:b1:97:ae:bd:ec:84:bb:b6:e7:
         dc:a9:8a:f6:a4:a0:1a:65:42:61:41:a7:0a:fe:1d:bc:84:89:
         fe:41:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:43:37 2026 by rpki-client