Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          KQh3tFkN7c9XA8V1Uahb7aPaIB2Aj27WiyUNAcn2Vpg=
Subject key identifier:   95:FE:96:B5:23:6C:70:55:59:EB:DB:62:EC:87:9F:C6:3D:A0:27:C5
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       01A0D804C2545C2DAE208DE37857EC3B8B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          091A
Signing time:             Fri 25 Sep 2026 10:03:05 +0000
Manifest this update:     Fri 25 Sep 2026 10:03:05 +0000
Manifest next update:     Sat 26 Sep 2026 10:03:05 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: q8BMW9EjjoonVfVALctShZj/2x5bcgiOCKBTReiVVOc=)
                          2: Ur3X7tGlwlj8Gu0-fa33N-Q63qM.roa (hash: 2z8BtqSZNkPP9+O3fGT2k1XuNSF3mGxZv+KGjv8E6zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:c2:54:5c:2d:ae:20:8d:e3:78:57:ec:3b:8b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Sep 25 10:03:05 2026 GMT
            Not After : Sep 26 10:03:05 2026 GMT
        Subject: CN=95fe96b5236c705559ebdb62ec879fc63da027c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:00:28:9b:53:4b:a5:fa:66:e3:83:48:f0:
                    d7:e4:b5:11:d4:35:b2:8d:a6:c0:a1:1b:fb:6a:ea:
                    40:bc:d3:c9:fd:a5:57:e6:91:0f:cc:17:73:e1:a9:
                    8a:c0:9d:05:6c:17:25:81:9a:0f:6c:bb:e1:e2:e4:
                    41:17:73:43:94:0e:ac:82:a8:7a:8b:a8:95:21:c1:
                    18:ef:2a:7b:ae:d8:79:5f:e2:07:5c:fe:32:74:df:
                    81:93:55:97:d6:04:d3:23:0d:93:68:eb:89:fe:eb:
                    e0:2a:71:bf:2a:4b:54:9f:d9:6b:01:f6:d5:f6:5e:
                    f6:e7:0f:d5:81:93:10:ab:93:43:f0:05:ba:cd:d7:
                    e9:28:c5:aa:66:2a:0a:69:1f:03:24:ca:1c:ae:e1:
                    9b:3e:f1:4a:22:3d:0d:04:e3:25:c9:ff:76:40:ef:
                    fb:cf:eb:ae:44:98:60:96:2b:15:08:70:2a:81:2a:
                    4d:68:22:b7:c4:20:dd:54:77:91:e0:4c:54:b4:1a:
                    74:49:0f:39:f3:19:e8:87:87:cd:ec:33:26:c9:3c:
                    e7:f4:11:68:8b:c2:c9:6c:2b:f4:a0:0e:5b:2c:0d:
                    40:2b:f4:bf:4f:4a:0e:99:ec:75:26:d8:02:bd:04:
                    1b:1e:fa:9f:f2:31:e9:d9:58:2a:b9:60:df:4e:9c:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:96:B5:23:6C:70:55:59:EB:DB:62:EC:87:9F:C6:3D:A0:27:C5
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:82:3a:45:3a:92:d0:80:27:25:e1:7c:0c:c8:a2:88:1e:23:
         8d:7d:d4:2f:e3:6c:9a:6b:f7:b1:af:e8:ef:08:0d:16:f5:cc:
         01:09:59:d5:ea:94:0b:f9:d3:b8:43:58:a6:17:96:48:cf:72:
         5c:3a:14:ef:ac:15:4d:bf:6b:31:46:f5:50:cd:c8:df:be:cd:
         e3:51:f2:77:a9:31:2e:e1:99:74:04:1c:05:72:01:3c:c3:f4:
         98:7e:d6:e8:5a:02:41:43:71:89:b3:0c:f8:2b:6c:e2:7b:14:
         1b:60:f3:f0:0a:c6:c9:ed:a6:40:a3:f1:65:76:17:fb:86:5f:
         d4:2a:be:21:e6:fe:d9:83:ad:9d:50:fe:fb:66:d5:8c:eb:fa:
         ee:aa:e2:48:96:e5:30:d6:f7:e3:a8:ff:88:ba:1d:d7:94:b5:
         cd:49:f5:c0:d4:98:b6:02:3d:3c:4d:13:b0:94:cc:c5:ae:29:
         c8:ab:f3:89:83:d6:04:89:66:cf:02:10:d9:95:27:4a:04:b0:
         b1:2d:97:8a:e7:88:04:31:51:fe:e9:1e:96:89:02:6e:76:ae:
         b1:8e:1e:36:e8:ff:67:57:a2:b3:91:43:49:f2:4e:69:cf:1c:
         98:a9:fd:45:71:5e:9e:6d:89:b7:63:ee:f8:32:95:61:78:dd:
         6c:f8:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:08:26 2026 by rpki-client