Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          FURULqWaYRsDKKtNh8K1/YsYk3f4P8NXUyTdTqq1gZ4=
Subject key identifier:   C2:81:C1:C6:34:54:4E:FB:05:29:68:06:4F:9A:AF:AC:38:A5:BB:B8
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01A0D26E5D537C546D699E33600A8DEAB186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 08:00:43 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:43 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:43 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: k/kZwWdzh/lwOsgQPDDHNAguPHUlxoU7srSj8izu9jw=)
                          2: ahNLR_0oS-0t1YKVBOVdbZiSYPY.roa (hash: fNNDUa3v8ykCEP/CD6DhZGRwmawCEdvB1zOAi4jYge0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:5d:53:7c:54:6d:69:9e:33:60:0a:8d:ea:b1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Sep 24 08:00:43 2026 GMT
            Not After : Sep 25 08:00:43 2026 GMT
        Subject: CN=c281c1c634544efb052968064f9aafac38a5bbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:ce:13:0f:ac:78:11:9c:78:73:bd:8a:a6:
                    76:8a:71:8d:b8:71:a0:7d:92:1e:fd:36:c7:8e:5c:
                    6c:11:a1:8c:66:57:5c:df:a6:bc:99:83:b8:a7:5a:
                    ea:5a:02:e7:4f:99:c4:07:b4:28:0f:47:c9:cf:09:
                    80:17:6f:dd:1d:26:3a:08:26:f6:82:c9:02:cd:1b:
                    12:ee:b0:7f:f8:35:bb:c8:41:50:7a:52:5d:f5:5c:
                    35:aa:4b:56:d7:88:cd:42:f7:d6:49:dc:06:06:60:
                    f7:bb:a5:9e:f8:b7:3b:28:dd:7b:44:2e:80:47:06:
                    4f:9c:86:64:23:ff:ea:d4:69:ad:61:b4:8d:9a:18:
                    e7:8e:3e:4d:ea:00:50:c9:df:eb:cb:23:3b:c7:18:
                    69:15:c5:62:fb:18:a1:f3:f2:c6:7e:99:6f:f5:19:
                    42:a9:0a:e8:62:dd:34:6d:74:00:40:72:1d:98:95:
                    f7:8c:86:e5:98:9e:48:36:fe:5b:e1:8b:33:e0:36:
                    61:df:7c:83:38:55:1c:d3:db:f2:e3:62:13:9d:1c:
                    2a:6e:27:a0:85:0f:8d:bc:ab:fb:84:48:03:0f:a4:
                    05:b9:c7:9c:c9:47:56:b5:d0:de:68:bc:dc:7b:22:
                    1f:54:37:78:a9:63:27:ba:e8:e9:34:98:19:0b:a6:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:C1:C6:34:54:4E:FB:05:29:68:06:4F:9A:AF:AC:38:A5:BB:B8
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:a9:d3:41:b7:7d:8c:a8:f8:a0:ee:aa:e5:67:66:b5:f7:
         eb:cd:94:b4:f7:c7:0e:f4:c3:b2:ae:2f:70:cb:45:04:a2:22:
         38:3d:2c:69:8a:4b:ae:13:f2:ad:92:9f:4f:26:e3:5e:3a:de:
         3c:94:18:58:85:4f:8e:52:a7:ed:0f:0c:7f:f4:f0:54:bc:ee:
         87:da:21:4a:d0:08:9e:3e:b5:a5:72:38:33:e7:94:05:07:70:
         cc:3c:9f:12:04:fb:a7:6a:30:81:04:90:99:52:81:93:49:82:
         9b:43:f3:9a:b1:0c:80:ea:d7:55:c9:fa:4e:f5:db:f8:4a:a7:
         7c:92:16:7f:09:c5:1d:5a:29:ee:fa:bd:28:5e:1d:75:c5:a1:
         f8:06:b6:8f:13:2e:d6:3e:7a:da:2a:2a:67:d6:1d:cd:66:fa:
         48:60:68:c2:dc:6c:82:50:6a:7b:8b:63:c8:53:d1:74:0f:e2:
         75:f6:6f:f3:eb:c9:95:1a:93:e3:ac:85:0f:58:22:81:6a:8d:
         26:1e:cb:f5:75:1b:49:f2:6c:da:9a:cf:04:2d:8d:7d:77:20:
         d8:8e:30:b9:a2:a3:a3:da:e5:b8:af:bc:9c:d1:97:a5:45:dd:
         8a:69:bc:36:5b:77:58:af:6a:8d:34:e4:41:3c:9e:01:0d:9f:
         11:5e:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:38:05 2026 by rpki-client