Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          IUrWZW3FUlh8cFh+IrE1bZZZX2kyj+8CBkbdGOsnep8=
Subject key identifier:   33:79:85:F7:81:D6:CD:E2:E0:40:8A:E6:C0:A6:9F:BD:DB:70:B1:2E
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       01A0D1C90BEB2C0E951AFDA788098230DAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          1142
Signing time:             Thu 24 Sep 2026 05:00:08 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:08 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:08 +0000
Files and hashes:         1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
                          2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: wIeUyjeecVPlERvRyO0PCxJBy9iiOAz52ZbOFC0cU+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:0b:eb:2c:0e:95:1a:fd:a7:88:09:82:30:da:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Sep 24 05:00:08 2026 GMT
            Not After : Sep 25 05:00:08 2026 GMT
        Subject: CN=337985f781d6cde2e0408ae6c0a69fbddb70b12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:c9:96:61:ac:20:87:09:fc:54:a3:e7:d2:
                    ba:d4:28:9a:da:ce:e5:31:28:13:5c:18:1f:b1:c3:
                    99:23:a4:a1:8b:60:d1:cc:02:b7:f1:16:19:8a:68:
                    76:52:5e:8c:3f:c9:3b:0f:9f:8e:04:c6:57:66:af:
                    f8:9e:5d:08:c0:ce:15:e4:b6:58:af:09:63:5a:d8:
                    aa:5c:25:2a:02:4e:41:65:85:8a:d0:9e:1f:14:a0:
                    5b:d7:90:fd:11:6f:68:6f:f5:da:bc:22:c1:c6:94:
                    88:7a:8d:56:12:9e:35:b3:a3:44:5f:6a:cd:ac:ec:
                    db:75:27:cc:cc:74:75:68:b6:6a:c0:c2:29:9a:df:
                    8c:71:1e:5e:63:8e:a5:14:45:1a:7c:93:38:d7:df:
                    5e:25:52:fa:ea:ad:93:e4:09:5a:3a:04:99:b6:ca:
                    12:38:6a:a0:47:7c:be:46:3a:a2:f9:80:fb:1e:15:
                    ac:c2:2f:7e:bf:b7:04:5d:30:5a:dc:a4:db:e0:f1:
                    6a:fd:2f:bb:e1:6e:4a:30:91:ac:37:6a:f1:1a:35:
                    29:df:8a:07:bd:dc:96:c0:7b:9b:7c:b2:51:1c:5e:
                    69:e5:f9:68:b4:29:df:ee:7e:2c:d0:2b:d5:96:ee:
                    14:77:56:fc:3b:04:23:1b:c7:88:ce:49:b1:f4:95:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:85:F7:81:D6:CD:E2:E0:40:8A:E6:C0:A6:9F:BD:DB:70:B1:2E
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:47:a1:46:13:88:04:4a:ff:4b:ed:92:8f:bf:47:4d:58:
         7b:29:3f:f0:8b:0a:92:05:3d:e8:8d:6f:1f:02:40:56:bc:20:
         b4:50:e5:61:1b:94:8c:8d:a3:64:88:29:3d:d0:61:ab:71:3e:
         e0:66:6e:16:94:f9:a0:0e:ad:e4:2e:9f:73:e6:fe:f9:97:18:
         36:83:21:1c:15:0b:14:87:2d:2f:e0:52:5d:6f:b7:52:ba:db:
         b2:11:b8:07:e4:1f:45:c0:b7:26:09:fd:d8:46:ca:e7:e9:3b:
         4a:9f:8f:f8:79:41:b2:d9:19:a6:ae:4a:0b:58:94:67:f3:b9:
         89:76:6b:e5:76:b7:15:06:d8:0c:65:eb:f0:62:c0:74:7a:e1:
         ae:4f:40:cc:12:37:cb:68:bb:01:5e:28:58:47:52:d9:27:c0:
         3c:90:3c:38:48:39:eb:ec:56:ef:d6:0f:c1:f3:72:7d:78:b5:
         2c:47:44:6d:90:f0:ad:0d:16:87:20:96:3f:72:e8:e4:31:4d:
         86:b9:49:9d:e8:09:7e:50:46:ed:77:f9:9e:b3:fb:6d:7d:12:
         40:49:31:c6:0a:c6:b2:7a:63:87:7f:4c:87:52:07:ba:bc:f2:
         32:da:45:6b:ba:28:8c:0a:92:0b:c0:31:97:8a:90:a0:fe:2e:
         13:4a:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:56:46 2026 by rpki-client