Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          brzHtPEnDfTY5r199xx85mp60cGMSc2TExJK5DsaRK4=
Subject key identifier:   C5:4A:A4:E9:FC:80:C5:79:F1:06:4A:82:EF:56:AC:D5:4F:74:9C:53
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       01A12B44F70ADBF3B3EAFF02127FA7663E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0C56
Signing time:             Sun 11 Oct 2026 14:01:42 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:42 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:42 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: fZkkTYWhi3VHnfKJ5b117GWVT7AxbSTFhdk9CXYO02c=)
                          2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:f7:0a:db:f3:b3:ea:ff:02:12:7f:a7:66:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Oct 11 14:01:42 2026 GMT
            Not After : Oct 12 14:01:42 2026 GMT
        Subject: CN=c54aa4e9fc80c579f1064a82ef56acd54f749c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:f1:a9:ea:fa:f7:f5:a6:9f:8f:44:10:e2:
                    ad:e6:37:b3:a7:9b:c6:6c:ee:28:5c:1e:70:aa:b9:
                    80:ef:0a:0a:b8:57:97:8c:21:3a:71:e5:c7:99:d6:
                    d9:34:d8:e5:47:22:20:35:b1:66:00:c7:8d:51:6f:
                    30:c7:3a:0f:f2:e5:8e:fe:de:07:ff:4b:69:84:3d:
                    6d:a0:12:55:36:af:d1:9c:69:4b:9b:b4:18:be:1e:
                    cb:48:08:3f:83:e1:27:55:98:36:06:3f:fe:ee:2b:
                    8a:3d:ab:ba:6b:a2:b9:42:0b:ce:e3:0c:c1:07:5f:
                    fe:87:43:98:37:5e:04:4b:47:38:b4:9b:cb:64:ba:
                    37:fc:f4:a5:bc:ea:79:16:38:c3:f0:a9:0e:87:45:
                    4a:28:8d:b9:ac:5e:ac:b6:91:2f:8c:52:e4:2a:15:
                    90:98:84:de:58:46:ea:81:39:2c:2e:2a:b1:21:17:
                    ee:01:13:82:d8:62:22:7b:24:78:d1:ca:a0:4f:c6:
                    73:b2:8a:5f:5c:01:7f:5a:30:a3:db:cc:0f:d3:99:
                    43:49:e6:b8:31:38:31:7f:20:b5:f8:9e:39:62:27:
                    0e:08:da:fb:22:d6:67:3f:9f:4f:ff:1d:29:38:73:
                    c5:4e:c6:69:74:44:7d:f1:61:b5:f7:6e:03:a8:40:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4A:A4:E9:FC:80:C5:79:F1:06:4A:82:EF:56:AC:D5:4F:74:9C:53
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:04:be:57:30:41:38:1c:2f:33:15:f2:5e:a8:6e:1a:8b:
         e4:d0:dc:a6:c6:5f:be:16:b9:30:76:34:76:87:cc:e7:6b:30:
         5d:fd:13:28:73:2f:fc:d8:37:c5:23:6b:5b:c9:cd:ef:88:76:
         5c:02:dd:a3:34:75:80:11:12:61:22:ce:35:fb:c3:c1:85:9f:
         33:ab:bf:09:0d:cb:2d:84:30:80:86:f9:28:7c:87:77:4f:b8:
         cb:63:b8:52:62:bf:4d:07:4a:9d:22:50:4a:06:9f:66:7b:9a:
         d5:39:5d:9f:dd:a4:13:df:ad:74:cf:d3:6a:c1:36:de:9d:6f:
         12:a0:31:5f:ae:db:00:89:ab:ae:2d:01:62:b9:06:1a:a6:e8:
         70:d0:3d:b9:88:c8:81:ae:8c:f9:94:1f:30:4d:a1:3f:75:f6:
         09:72:04:dc:9a:e5:5f:05:d6:70:2b:41:c8:ad:27:ad:ad:71:
         01:16:34:80:05:5e:dd:a9:4a:da:73:cf:a1:23:0a:9d:98:19:
         87:24:28:6a:ff:d6:35:c7:61:f0:73:17:44:58:a5:34:ed:8f:
         42:49:e8:e8:da:87:9f:fb:c2:3b:8e:13:c1:90:cb:47:bb:a6:
         b9:42:80:24:2e:cc:06:51:0d:26:d1:4f:23:94:f3:be:a2:ff:
         36:4d:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:11:01 2026 by rpki-client