Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
File:                     nPzO-NLBbCCuW42kMUJ3_sqt09c.mft (raw, json)
Hash identifier:          kF/ih2462B1RKgRbwMcXy0WXEkUGn8pkY9WwKnR52LQ=
Subject key identifier:   E8:7A:38:B2:B7:22:06:2C:69:45:50:4C:98:E0:2D:6E:6E:D7:3E:52
Authority key identifier: 9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
Certificate issuer:       /CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Certificate serial:       01A0E92DDF47CBC91430BF0C170E732C79F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
Manifest number:          F2
Signing time:             Mon 28 Sep 2026 18:01:32 +0000
Manifest this update:     Mon 28 Sep 2026 18:01:32 +0000
Manifest next update:     Tue 29 Sep 2026 18:01:32 +0000
Files and hashes:         1: 9ElPrQnWoTn8sRLIiiK0OuGy05M.asa (hash: 5FNlY4w7rZR/WY2wa0x9U6YyJcfB7mqd5DFEJPCk0Fs=)
                          2: Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa (hash: pRzYtPrxHUpphqlfa9Qt6Kb6BBtXf+wNplcVS3AuIH4=)
                          3: KWuG2ZTCHPsMCDpVyumu3paq_3Q.roa (hash: Jcw9eWUwDk9R7T5bYUQAFYJ3yFnH4VQvRTMQjlguOec=)
                          4: nPzO-NLBbCCuW42kMUJ3_sqt09c.crl (hash: 9BNiiSmLLdc+FHanU7Vdi/s5j4JRBNlNFQ1w10a+FUs=)
                          5: qUOFKPK1qlaPwhQhrZeDV6F0-6Y.asa (hash: NWGvZCsufEEYm6/vs1ysBxX8d7vsYpiYbg4dFk8rofg=)
                          6: sE8kyXjscgpYnewcBxZTJWXPDf0.roa (hash: lTXqCAiiTYsmosVsva8S8Wgwz9hTgbMaDnxDEk3gwSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:2d:df:47:cb:c9:14:30:bf:0c:17:0e:73:2c:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
        Validity
            Not Before: Sep 28 18:01:32 2026 GMT
            Not After : Sep 29 18:01:32 2026 GMT
        Subject: CN=e87a38b2b722062c6945504c98e02d6e6ed73e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:bd:be:f0:72:82:ac:60:fc:ad:c5:a3:10:
                    91:82:7f:3d:32:d7:39:04:af:55:e8:e9:37:bc:ee:
                    d1:e4:0d:a0:ad:c8:30:46:10:13:cd:ff:39:e5:0c:
                    2e:bc:2b:76:96:4e:69:b4:d3:5d:ae:6d:d7:02:3d:
                    35:fa:56:90:23:7e:c3:be:a0:b2:0c:66:ce:fb:64:
                    86:84:61:39:2d:fc:ba:9d:f0:e0:c9:f6:19:fb:a5:
                    4c:d8:18:18:17:24:22:bb:7e:59:86:56:73:0c:2d:
                    1f:73:42:86:24:c6:00:5d:57:c4:21:58:93:0c:ca:
                    06:af:15:36:ff:03:7e:d3:e8:00:59:49:4a:63:8e:
                    fd:37:e7:ef:e2:8c:0f:de:a6:44:8f:e3:de:13:45:
                    f1:ea:a1:23:f0:19:8d:fc:34:bc:6d:66:21:73:f6:
                    47:76:cf:19:54:79:bd:ef:96:ff:2f:88:68:07:9a:
                    91:cd:b0:4b:04:56:64:91:97:07:f7:71:3a:f1:14:
                    9f:a6:00:5b:bc:74:a9:8f:c1:2f:f5:22:d9:19:45:
                    8e:3d:da:52:2f:65:50:54:17:fb:04:ba:d0:0e:54:
                    3e:ce:ed:28:2d:a0:94:90:44:e7:8a:ea:8c:92:64:
                    14:e9:10:ce:95:30:aa:fd:ac:80:46:0a:9c:7e:73:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:38:B2:B7:22:06:2C:69:45:50:4C:98:E0:2D:6E:6E:D7:3E:52
            X509v3 Authority Key Identifier:
                keyid:9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:75:a6:86:bd:17:e2:ef:66:c2:bd:87:c8:d2:fe:fc:41:1f:
         b1:8d:93:11:11:8d:5d:f2:4c:d0:e2:d0:bb:1a:ed:aa:2b:ea:
         01:b0:dc:e2:09:46:9d:09:8c:86:ed:e0:87:84:6f:75:9d:e0:
         f7:93:33:c6:9d:22:37:a2:d8:1a:cc:0c:59:b6:ad:57:76:76:
         a8:c7:07:c2:fe:a4:70:c4:9d:d0:c8:a0:80:b4:59:8a:25:46:
         aa:77:a4:66:46:45:e4:e0:15:24:a6:4b:22:5b:84:36:14:08:
         fc:68:a1:7b:b1:69:05:09:8e:be:1a:2f:37:e8:b2:ad:54:84:
         56:63:40:b2:38:0b:86:2b:77:cc:18:01:e6:69:cc:5e:b0:ea:
         62:8b:90:51:1e:b1:09:60:6a:f6:50:4d:a4:55:6e:e0:02:d1:
         4f:93:bf:6b:e4:0c:86:fa:8b:f2:76:05:18:ce:e0:74:b3:33:
         c8:66:06:63:47:30:00:70:b1:29:0b:4b:c2:e7:60:67:57:70:
         5e:5a:95:8e:f6:8f:23:af:8a:b9:0f:cc:61:07:92:d6:b5:6a:
         9c:82:04:c6:55:8e:6e:9c:3f:ae:c9:a7:ba:6b:4c:06:e6:05:
         8b:6c:00:df:b6:b8:42:fd:2d:3a:b3:50:3c:c1:f2:2a:95:a0:
         ff:c9:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:17 2026 by rpki-client