Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          m7hxi22M+7MYAr7lvWJClx71iNxfWxgGgKKeX9hGTvA=
Subject key identifier:   A3:43:E1:96:85:68:F5:15:69:39:4D:01:2C:6C:4E:EF:85:AF:D3:7C
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       01A0DDCEC60D8EA3BA3F9C5E7DB1DC5AAB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          15A3
Signing time:             Sat 26 Sep 2026 13:01:50 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:50 +0000
Files and hashes:         1: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (hash: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE=)
                          2: 6HVpZjDJK-JDd4JLU8A4rcuFHLs.roa (hash: kIuNG7jafmgHvYNR9Juw4bgFLOduPI1o7DgjWmXFliU=)
                          3: 9KvmlPKsY8w8aZTFNLv0zg38axY.roa (hash: E6UjIGV/KuRgFN4UQnHUeYYcpZAFdXo3JairE/1g8kE=)
                          4: CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa (hash: hbMTywJkxAoG5vlp7Fd9e3h3SO2hZD0EHWgX/IJxhMw=)
                          5: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (hash: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8=)
                          6: J5ItodHrRCheXviqPMZtDDHgoRU.roa (hash: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg=)
                          7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: 2e/icO7borVCEzFmq1Nqx0mpt5Gu5jhY9t1rsSvrNdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:c6:0d:8e:a3:ba:3f:9c:5e:7d:b1:dc:5a:ab:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Sep 26 13:01:50 2026 GMT
            Not After : Sep 27 13:01:50 2026 GMT
        Subject: CN=a343e1968568f51569394d012c6c4eef85afd37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:dc:99:c1:ee:32:62:e5:ad:70:e5:14:ed:
                    90:0a:25:16:84:f1:5a:dd:99:da:9e:26:0b:fb:ed:
                    0a:fb:0d:14:22:03:5b:38:05:67:63:a4:d9:6d:b7:
                    49:12:bd:70:e5:c8:17:b2:3f:30:43:9c:b1:19:16:
                    9f:0f:6f:fa:43:83:b2:7c:3f:66:9b:76:4a:0c:2e:
                    99:1a:e9:41:52:99:9e:a3:ad:7c:a6:e3:29:e7:d3:
                    17:ab:6f:3a:11:25:3a:86:01:82:66:4a:af:8c:21:
                    b5:4d:ec:64:ed:73:b5:8c:fa:29:f7:b0:31:7d:bc:
                    02:ba:9b:60:f4:84:b6:d2:3a:13:13:d7:ac:10:7f:
                    d3:fb:fe:81:61:dc:ff:45:8a:f2:22:1d:4a:4e:90:
                    a7:0f:a0:2a:27:e4:cf:a8:0f:c0:c7:6c:df:3b:a0:
                    cd:31:7f:b2:34:51:af:7f:45:11:7f:42:aa:49:55:
                    5f:d6:35:6b:a8:4b:ec:00:ca:dc:cb:e2:ef:03:4a:
                    8a:16:76:f7:e6:ff:9a:32:79:98:a0:a8:6d:f3:aa:
                    45:67:17:72:6e:f6:30:ee:87:c7:29:a6:f7:99:48:
                    01:44:d7:b5:7e:76:84:20:28:9f:b5:db:c6:0c:9d:
                    8b:0a:ae:4d:7f:0e:c7:aa:3f:81:15:a1:a4:11:80:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:43:E1:96:85:68:F5:15:69:39:4D:01:2C:6C:4E:EF:85:AF:D3:7C
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:fc:9e:a1:a0:df:40:36:dc:bc:19:9e:a6:9c:3f:c6:44:
         53:29:f6:ac:d9:7d:7f:a3:17:0d:bc:b5:aa:ff:cc:02:a8:22:
         f5:73:5e:af:50:4f:ba:a1:ba:4b:a5:15:f3:0b:4a:c6:85:8e:
         8d:c9:5e:7f:33:9c:8a:e2:1d:78:c4:9c:ce:41:4c:a0:8b:f0:
         38:ce:52:97:83:e3:ae:ff:1d:50:ca:1b:1d:3e:58:ff:82:17:
         07:85:07:c0:ac:6b:82:d9:f9:8e:40:86:a1:53:91:07:f4:bd:
         3b:d4:64:74:f6:c9:82:33:85:4d:a6:84:76:25:31:26:7d:d0:
         f7:9e:6b:b7:fe:8b:57:6b:92:6f:17:ad:a7:39:68:1b:81:06:
         18:28:2f:71:0e:b3:6b:b5:d7:31:0d:08:6a:ad:a2:fe:ab:2a:
         81:85:d2:cc:fd:e6:47:65:d2:63:58:b5:55:12:30:c4:34:71:
         13:3c:3c:1e:09:40:85:2a:37:4f:e0:9e:64:92:f9:92:52:02:
         89:6b:6f:51:32:62:c1:2e:94:09:50:65:a0:0d:eb:af:0d:25:
         f3:d4:70:c8:55:7e:eb:ea:f3:d8:79:89:4a:9a:84:3f:d3:41:
         40:3e:9b:06:ed:ef:35:71:3b:80:61:70:7f:c1:e2:6f:49:78:
         7b:4b:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:33:30 2026 by rpki-client