Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          rJwPSI5lNcdEVPOhMYmFjG/68Og4LPD6M+qb6qO+Hjc=
Subject key identifier:   0A:01:C9:B1:C8:40:FE:77:BB:4B:1C:CB:37:0B:60:DE:D8:64:83:0E
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       01A0E32B6FB473FB3BD345D0432FD2FCB7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          102D
Signing time:             Sun 27 Sep 2026 14:01:09 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:09 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:09 +0000
Files and hashes:         1: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (hash: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=)
                          2: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (hash: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ=)
                          3: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (hash: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=)
                          4: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: 32uZF/Piearq8YvxqyJv0MXWXQXvFXh4D1O0vZsEzTA=)
                          5: piHfYItCMRZJoIEsDJ__Qf2pGaA.roa (hash: RezZZPRB2YkkE5M8DiOZbDxcJLsNR31nGSqMJCGciug=)
                          6: rkgYpLaSooeAeaPc6HeDMNwsGSE.roa (hash: dwK5xzYUrSSoaqAtejdAj3gsVAadyZPLwc0zD6SmFNo=)
                          7: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (hash: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:6f:b4:73:fb:3b:d3:45:d0:43:2f:d2:fc:b7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Sep 27 14:01:09 2026 GMT
            Not After : Sep 28 14:01:09 2026 GMT
        Subject: CN=0a01c9b1c840fe77bb4b1ccb370b60ded864830e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:8b:b7:c0:57:cd:7a:1b:20:cb:12:bc:9e:
                    f4:47:3c:1a:24:d0:bd:eb:39:75:46:59:2f:10:0d:
                    c4:a0:d1:29:02:b6:57:83:16:17:02:8f:01:f6:a7:
                    b9:ef:31:2f:f6:8e:53:28:ff:77:1d:8d:9a:9e:e4:
                    6e:b8:7f:03:e1:aa:b0:b6:08:e3:42:23:a0:bb:01:
                    8b:1f:aa:89:4e:f2:16:52:76:13:ec:1c:d6:89:a3:
                    bd:50:64:73:be:7a:86:c2:c0:15:2a:13:07:1e:59:
                    29:df:a5:7a:36:f4:cf:b1:10:a1:e2:a4:3f:fd:10:
                    fe:16:da:ff:41:34:d6:29:73:d2:eb:6d:8b:18:14:
                    fb:66:51:3c:1a:b1:2e:9e:9b:49:b8:c9:70:85:40:
                    44:b3:c9:0b:42:3b:75:16:bb:75:50:e8:77:60:b7:
                    44:29:6e:a4:2b:c1:a8:b1:3b:ac:25:c1:6f:93:1a:
                    8d:e5:c0:e1:a4:a8:03:61:02:91:13:a8:9d:c6:5e:
                    9f:52:30:ca:06:8d:39:a6:d0:72:2d:34:8e:30:8e:
                    1a:ad:1e:92:ee:45:8a:69:f5:19:0f:fa:1f:23:86:
                    16:68:bf:4b:ec:ce:da:dc:96:72:14:5d:84:61:98:
                    c8:2a:de:1d:a6:73:e1:bd:f4:1f:17:1d:bf:2c:ee:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:C9:B1:C8:40:FE:77:BB:4B:1C:CB:37:0B:60:DE:D8:64:83:0E
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:23:4c:b6:bb:93:91:be:2d:54:d4:3b:d7:93:57:d2:e4:9c:
         9e:59:45:29:de:b8:a5:cf:e3:1a:9e:d1:c9:1d:f5:fb:56:08:
         6c:a5:c3:03:2a:65:60:2a:3f:bb:52:9f:51:64:11:c6:66:6b:
         4f:2b:4e:1d:2d:3e:2d:3a:7c:bc:ec:19:52:96:78:9f:2b:41:
         ef:73:42:8c:b2:6e:10:a4:c3:c6:d6:b9:a0:67:87:11:8e:d8:
         6b:6a:70:61:d6:74:90:94:d2:26:5a:6b:90:b3:94:26:fa:0e:
         a8:00:4b:60:6e:14:17:d3:64:aa:30:7a:43:21:2a:0f:4e:7b:
         b1:9d:f4:e5:10:a1:39:fa:a7:ba:d8:a4:b4:6c:1b:2f:90:48:
         b9:d2:02:4e:05:0a:40:41:45:06:91:d6:2d:40:56:66:a9:0c:
         8b:53:b9:6c:17:9d:68:27:a5:3f:39:5e:b7:1e:c7:59:29:61:
         94:82:5f:55:26:86:7e:b5:76:e5:ea:94:b9:84:ea:7c:76:76:
         db:7f:7b:8f:02:b2:75:d6:5e:cf:9c:5a:68:f1:79:50:08:2e:
         e4:db:f6:19:12:a4:16:31:4b:10:30:b7:a1:42:61:06:87:2d:
         3e:54:2c:6d:42:40:ff:37:40:82:ac:a7:f2:59:2a:31:55:4e:
         d1:96:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:19:54 2026 by rpki-client