Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File:                     NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier:          Rn4+Fiv8dZC6qrBkSd2GcrWCezxm4+0uFA3wKb1q4HQ=
Subject key identifier:   6D:F2:D7:F5:7B:04:D6:73:50:8E:50:50:57:94:E7:8B:82:96:4F:D9
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer:       /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial:       01A10C2746EEDB2CC5BCA63575F426F09B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number:          10CC
Signing time:             Mon 05 Oct 2026 13:01:02 +0000
Manifest this update:     Mon 05 Oct 2026 13:01:02 +0000
Manifest next update:     Tue 06 Oct 2026 13:01:02 +0000
Files and hashes:         1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: cHlH1Yv2iCGi1WNAnC+SCeHNJQQX1HUU8TL2YEwk7oU=)
                          2: aGJMNViunI3sW8LPBTbWuO2JMU4.asa (hash: IYFle/3hjx48l13pLg/VjqdcHmOV1LkxhQSSbNvNDQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:27:46:ee:db:2c:c5:bc:a6:35:75:f4:26:f0:9b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
        Validity
            Not Before: Oct  5 13:01:02 2026 GMT
            Not After : Oct  6 13:01:02 2026 GMT
        Subject: CN=6df2d7f57b04d673508e50505794e78b82964fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:04:11:d9:9a:26:a6:b8:36:ae:1d:ab:06:
                    74:aa:56:37:e5:b3:ca:0c:ad:d7:d8:52:35:d0:d9:
                    57:24:71:cd:da:09:0c:5d:f8:62:95:89:d5:6c:a6:
                    66:c9:70:45:90:33:53:23:21:5b:e5:35:4f:6d:98:
                    b1:ef:35:e1:bc:25:d7:4d:b0:f5:6a:91:ce:7e:58:
                    09:da:4f:de:cd:ae:41:68:c8:e4:8e:0e:9d:61:ab:
                    34:4e:c0:70:74:e8:2b:6c:d5:55:1d:ca:b2:aa:9d:
                    58:e5:13:f1:3c:72:dd:99:7f:d2:5c:20:be:88:31:
                    d8:46:90:c3:0f:24:eb:86:ab:bf:fd:1a:59:27:f6:
                    d1:2b:22:8a:f7:80:38:91:36:49:b1:ce:0d:30:94:
                    95:62:73:bf:2b:2e:b5:31:19:80:b3:18:1d:4a:4b:
                    bd:1f:0e:67:2b:8b:0c:36:7e:e0:ce:01:82:92:36:
                    e1:50:a7:05:c5:d4:7d:32:a6:50:83:bb:0b:e8:e3:
                    07:06:64:7e:06:1c:75:4f:69:4f:8e:ad:e2:28:98:
                    54:b3:b2:ef:a7:bb:6a:58:00:6e:92:8e:64:25:68:
                    ff:32:46:23:0c:0e:df:9f:fd:40:27:dc:1b:57:95:
                    67:b8:77:a4:0b:60:42:95:33:d3:3a:f4:06:01:38:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F2:D7:F5:7B:04:D6:73:50:8E:50:50:57:94:E7:8B:82:96:4F:D9
            X509v3 Authority Key Identifier:
                keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:9f:af:6a:b4:15:3a:0b:da:ec:2c:13:ca:e7:05:a9:be:
         ef:b6:a4:2f:c0:a6:bf:b9:6b:5e:6f:42:89:a6:f4:75:67:a3:
         cb:fe:1e:7d:4f:e2:82:4b:c1:73:c5:aa:8d:2e:87:13:d5:67:
         9f:27:92:70:3b:65:d1:ee:6d:4b:a6:aa:41:75:f5:c8:01:2e:
         26:24:37:cd:64:e0:94:e9:fe:0f:a5:f5:ff:ea:90:10:21:85:
         87:77:58:98:1a:6e:93:bf:79:05:a7:f5:c7:7a:e0:3b:93:16:
         79:70:56:ea:33:cc:7c:ac:6a:bc:99:64:24:67:ef:63:6b:f8:
         d8:1c:96:1e:c1:dc:f2:65:43:16:ef:8d:54:70:0f:d2:2d:ae:
         c7:a9:e2:c1:33:3a:24:ce:7c:b2:41:a3:2a:9b:dc:04:b8:80:
         5c:c8:9d:62:b4:f0:01:72:eb:8d:ec:69:81:76:df:6e:af:e9:
         62:0f:0f:04:6e:92:e6:b7:96:5c:60:18:4a:78:0d:76:a1:fd:
         de:6a:15:c5:52:dd:f6:b7:1e:d8:6f:28:c8:89:1d:94:c3:9c:
         4f:7c:a4:a6:4c:35:c7:00:a6:f2:71:9a:28:1e:53:b8:64:02:
         f3:9d:0e:45:92:5b:20:bc:e3:8b:f2:11:4a:20:6d:f5:af:d9:
         de:44:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:10:29 2026 by rpki-client