Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File:                     nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier:          5wYuW9Un7qoZ+nA/EDaHcns1cO8bJi90+Mzj8rma/8I=
Subject key identifier:   6E:23:FC:D9:19:20:68:93:49:EB:0A:DA:0A:58:8F:70:86:38:A9:4D
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer:       /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial:       01A0DC4E18C97A1685D28572FF8AB08C0782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number:          0712
Signing time:             Sat 26 Sep 2026 06:01:40 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:40 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:40 +0000
Files and hashes:         1: Hzt1hVee4qju57F3Ar863410Av8.roa (hash: +JMJGIKgMrfRmhRpBwBa7vxoZXnFjBkP0QWjFV0kYl0=)
                          2: V3K9KWekNpWdzBCyOPh9WJ-1dOA.roa (hash: RfmxQYOLMhqB3WkiPFFlvfTDE7h8LswiSenU1NHDqIc=)
                          3: lJvFDE3LUXzUhHwCRhXuMp7CqVY.roa (hash: kQXwpFmZAnTAO5oTo9csBX2DJ7XbZewEGS4Nmz1+oEI=)
                          4: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: PT/6P3O2khD3pvv+cUzctdzCP4H95ydnzFSLLgQ9TCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4e:18:c9:7a:16:85:d2:85:72:ff:8a:b0:8c:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
        Validity
            Not Before: Sep 26 06:01:40 2026 GMT
            Not After : Sep 27 06:01:40 2026 GMT
        Subject: CN=6e23fcd91920689349eb0ada0a588f708638a94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:d3:12:29:08:5b:c1:19:80:b0:46:c6:dc:
                    be:f2:4a:5b:f7:ca:f4:4c:71:9a:36:c8:8b:29:94:
                    f0:de:84:9b:ea:41:2b:85:92:98:d4:5c:db:88:c2:
                    55:69:6b:03:c7:ab:3e:42:e6:04:6f:07:20:e1:cb:
                    f5:a9:03:0d:b5:84:7e:f6:31:48:31:4d:63:a4:af:
                    dc:01:09:37:79:45:45:6f:cc:8a:1f:3a:fc:29:55:
                    cc:0a:67:9a:26:b6:0c:07:0e:67:e6:eb:b8:b8:48:
                    81:9a:fe:32:2c:63:80:f7:f4:33:1e:97:e7:21:fd:
                    26:b0:b9:a7:08:d8:4f:54:3b:46:31:75:28:d6:28:
                    51:a2:f1:10:27:12:f1:cb:3d:64:4c:3b:1e:45:8e:
                    51:a0:3a:5d:ce:d3:6b:a2:46:75:40:fb:3a:09:55:
                    36:3b:12:76:b4:57:ab:73:0b:1d:63:e4:7a:d4:90:
                    f1:6b:b1:9c:24:38:a8:78:9d:34:bd:73:a6:22:a3:
                    bf:c6:34:e0:44:10:1a:ac:e8:d2:3d:8f:c9:66:81:
                    38:32:2f:dd:53:75:0f:56:29:ef:23:83:26:27:90:
                    c1:b6:33:bc:b5:76:bc:69:13:df:f8:7c:32:6b:18:
                    f7:3e:12:0b:74:4e:da:81:b0:f2:15:e1:84:57:85:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:23:FC:D9:19:20:68:93:49:EB:0A:DA:0A:58:8F:70:86:38:A9:4D
            X509v3 Authority Key Identifier:
                keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:e7:7b:89:1b:11:38:99:27:16:86:1e:18:66:d4:66:84:
         36:69:ef:72:1a:ce:7b:29:09:3f:6d:ea:28:b1:9c:63:6b:b4:
         5d:68:28:1e:d7:9b:85:8e:ca:14:cd:d6:17:fd:be:3f:05:aa:
         b3:60:c7:ac:b6:b2:f9:33:41:fb:0c:14:18:c1:e9:71:de:d0:
         1d:82:e0:b1:d5:10:c3:8f:95:6f:b6:83:eb:66:f2:fc:3b:4d:
         bb:5f:9f:bd:6d:51:cf:6e:c5:f3:a3:99:5a:c8:cb:dc:a5:61:
         c0:a8:f1:36:e1:78:06:5a:c0:37:23:51:cf:7e:c3:b0:0b:44:
         b5:96:6b:14:88:3a:dd:9f:2b:f8:6b:48:2f:0e:d4:52:11:6d:
         f2:0c:18:52:77:0b:5e:22:fe:46:8a:d6:47:71:bf:e4:b7:05:
         6b:67:50:31:e7:83:bc:3f:d1:59:87:a7:b4:cf:73:d5:0e:92:
         63:e1:8c:d9:e9:d5:3b:da:49:26:15:bf:cb:ad:37:28:62:39:
         85:ed:48:73:ef:cb:ff:1d:3d:bb:39:57:3e:fe:7e:59:ec:22:
         9d:e8:9f:89:41:f4:7d:1e:71:87:06:57:20:7a:62:97:d8:d3:
         41:5e:95:d3:55:fa:19:5d:eb:77:cf:20:66:43:1d:bc:fb:b5:
         ee:06:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:20:39 2026 by rpki-client