Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
File:                     Nw9PXYTCtc7jxukDy1MNapH0BLo.mft (raw, json)
Hash identifier:          gXtl1KZKPB5KKnVHy/gNEAzK/pnmZBNMpGJPV8+t450=
Subject key identifier:   E1:13:0B:27:94:1F:3C:AE:30:75:C0:97:E8:13:4C:E0:5A:FE:2D:E4
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Certificate issuer:       /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial:       01A0D0ED9BB75D825066E0D0438EC3EF98DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
Manifest number:          EB
Signing time:             Thu 24 Sep 2026 01:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:27 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:27 +0000
Files and hashes:         1: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (hash: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=)
                          2: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (hash: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=)
                          3: Nw9PXYTCtc7jxukDy1MNapH0BLo.crl (hash: WJY3f3nSylIs5xLJsouEJyCkP6qV6OExfp0Qs3nHdM8=)
                          4: etGPt2jesAgywvKvXb4eae0QhGs.roa (hash: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=)
                          5: jBFBWWjIaJu67xGcpk1-p45qsdU.roa (hash: THJXMMGpVdQhi29jGrWB/2bHfOqzvnHxTtQk9TgxUsc=)
                          6: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (hash: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=)
                          7: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (hash: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:9b:b7:5d:82:50:66:e0:d0:43:8e:c3:ef:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
        Validity
            Not Before: Sep 24 01:00:27 2026 GMT
            Not After : Sep 25 01:00:27 2026 GMT
        Subject: CN=e1130b27941f3cae3075c097e8134ce05afe2de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:71:0e:9f:2d:60:e6:e4:ff:93:ec:38:a9:
                    5e:66:b3:cd:df:47:59:4e:16:7d:93:3b:59:4a:1e:
                    c1:dd:32:f2:22:63:6b:f5:b0:56:2e:9f:b3:6b:f2:
                    e2:b1:b8:51:b4:76:f3:bc:78:03:0e:5f:9d:77:61:
                    33:96:24:81:f2:16:9b:19:4a:63:1d:ae:7d:69:72:
                    82:e4:f9:7d:1a:f9:5d:76:80:20:03:b8:77:29:09:
                    33:90:03:2e:97:85:c1:4f:99:57:88:8b:3e:ee:f9:
                    2c:37:57:61:7d:44:ef:96:f9:5c:9b:88:ef:88:32:
                    b9:41:56:16:b9:2d:27:42:fc:77:f9:b7:b4:f9:8f:
                    17:80:04:29:c8:79:35:24:48:62:a8:25:8f:9e:a0:
                    81:0d:17:de:46:b0:15:18:8c:2b:43:8b:2f:9b:a8:
                    c8:51:5b:a1:73:53:e1:0f:ed:d8:ba:1c:87:d5:38:
                    e2:33:cf:cd:26:96:14:db:03:bf:34:de:c6:96:97:
                    d4:e1:40:8b:50:6a:06:85:04:af:5b:77:57:ba:63:
                    4a:28:06:92:52:cb:ba:28:c7:35:b1:73:4a:88:77:
                    e6:8a:ed:13:f4:48:9f:64:de:fe:14:0e:31:5e:2d:
                    21:af:df:90:fd:89:90:5e:01:c5:09:be:8b:e0:af:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:0B:27:94:1F:3C:AE:30:75:C0:97:E8:13:4C:E0:5A:FE:2D:E4
            X509v3 Authority Key Identifier:
                keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:5d:7a:ee:69:0a:9f:c3:fd:00:a4:48:ca:24:72:72:4f:
         56:3e:7a:92:05:85:6c:74:03:a2:4d:5d:75:40:92:0d:cf:67:
         0c:e1:34:83:50:82:9a:90:2a:d7:56:14:e4:b5:b5:69:91:bd:
         8d:30:2b:87:4f:2c:5f:0d:d8:c4:88:f1:23:38:f3:ae:72:a1:
         14:39:28:25:db:6a:38:c1:69:9b:32:aa:d3:e0:81:02:04:94:
         18:8b:1b:93:28:40:6a:b6:49:94:be:2f:54:b7:ce:ea:a8:54:
         df:c3:93:3a:e9:44:b7:8c:71:6a:ac:04:e2:cb:b7:40:9d:8c:
         5f:6b:48:3a:ec:32:10:93:70:82:64:02:69:00:f3:1a:14:07:
         fe:a2:53:08:e5:71:ad:63:fd:95:be:d0:b7:56:4d:48:3d:fe:
         fd:1f:8f:a0:8e:cf:f1:0a:aa:81:94:e6:27:85:c2:fd:ac:2a:
         7b:c2:47:8e:e1:1b:99:0b:c5:d4:c4:83:ee:c1:f3:4e:b8:3f:
         11:2c:93:8a:4f:f6:b2:d1:a8:3e:ad:94:97:de:09:0f:34:8e:
         ac:67:29:bd:92:5d:78:92:c0:f9:e5:7a:20:16:bf:93:5c:a8:
         da:68:18:5d:26:4e:16:a0:d6:e5:bf:05:82:cc:2f:67:06:ba:
         bf:45:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:42:03 2026 by rpki-client