Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File:                     nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier:          +PIeWnt5RrOOGbw+EY/GUr2aQhIC9Gl4Foc5NPwceTc=
Subject key identifier:   92:CD:57:8B:9F:E6:AB:E9:90:C8:D3:78:2C:FE:A9:5A:7E:CE:94:F8
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer:       /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial:       01A107A5F71C3AF293DEE18863FEF458490D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number:          0663
Signing time:             Sun 04 Oct 2026 16:01:19 +0000
Manifest this update:     Sun 04 Oct 2026 16:01:19 +0000
Manifest next update:     Mon 05 Oct 2026 16:01:19 +0000
Files and hashes:         1: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (hash: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I=)
                          2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: xnTH3XOIbk5igxZ85Ije6jnGEXth3IvwsOpgzL3YENU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a5:f7:1c:3a:f2:93:de:e1:88:63:fe:f4:58:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
        Validity
            Not Before: Oct  4 16:01:19 2026 GMT
            Not After : Oct  5 16:01:19 2026 GMT
        Subject: CN=92cd578b9fe6abe990c8d3782cfea95a7ece94f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:2a:04:c4:64:fd:49:b7:0d:b4:9e:46:d6:
                    d1:41:82:ab:86:bf:b1:9c:aa:3f:3d:69:47:79:13:
                    7f:8a:fe:8b:77:a0:7b:d1:b4:77:1f:e2:32:eb:51:
                    95:37:8e:8b:e8:86:b4:3c:c4:bc:e2:06:de:70:32:
                    db:2f:d8:c7:a1:1d:4f:f8:66:80:9a:47:89:fc:f4:
                    7a:55:af:e3:ba:ea:e9:69:b9:81:47:83:f7:c0:ba:
                    e9:32:e3:bb:f2:d8:57:db:6e:5f:93:d3:7e:a4:23:
                    d8:fb:ea:78:be:46:2c:5b:65:8b:e9:d5:17:e7:84:
                    32:5b:ad:3e:27:c0:c7:c8:95:39:8c:ed:cc:37:96:
                    45:2d:1f:24:06:ed:70:ea:15:83:74:8e:ea:28:f2:
                    45:c1:58:84:7b:61:cc:6d:f0:c7:48:f9:e3:6f:86:
                    94:32:88:f2:e3:89:5f:bb:29:ad:66:ac:3f:af:8e:
                    5d:81:31:a0:10:a1:85:e6:ca:2c:bc:17:9b:fe:d2:
                    67:b6:6c:6d:8a:46:da:3a:b8:02:dd:71:4d:f4:a9:
                    f5:70:f8:5b:87:d5:8f:24:db:57:33:d0:57:39:05:
                    15:31:5e:ea:4c:09:f5:4b:6d:db:06:08:fe:0a:e1:
                    bf:35:47:7a:4f:44:ff:cf:7f:1c:0c:d7:50:ac:b7:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:57:8B:9F:E6:AB:E9:90:C8:D3:78:2C:FE:A9:5A:7E:CE:94:F8
            X509v3 Authority Key Identifier:
                keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:b6:61:b9:e4:6c:2e:6f:be:7e:b2:15:8e:ca:1c:38:c3:
         81:c9:b5:99:2d:17:42:0a:1a:e9:37:88:9f:28:fd:b3:a6:2e:
         e6:b1:af:d2:9b:00:2a:09:5d:73:c3:a9:49:fd:d6:fa:59:7b:
         c2:19:5b:22:fa:d3:d9:31:f4:96:f5:16:3c:d5:cf:3a:2b:38:
         27:75:56:b4:0d:97:0b:76:a9:90:de:17:d9:80:7f:f2:89:5d:
         98:cc:d7:9c:c2:ed:6d:da:80:7c:65:9c:6f:05:a2:99:e9:9c:
         11:b6:1e:5b:0c:ef:94:5a:3e:69:c1:e7:68:bc:88:50:21:10:
         62:b5:3d:a1:32:ca:f3:8d:85:52:f7:d2:71:40:4a:a3:f8:7b:
         e3:66:b9:e0:1b:98:9a:92:6e:69:4f:87:27:b3:66:8c:b6:37:
         a4:ca:88:71:50:2a:6d:0f:23:10:87:3d:ec:f0:ec:37:e0:98:
         94:cb:a7:d1:6a:4d:b2:ab:ea:a0:b1:8c:8a:ad:e4:75:2a:60:
         4e:af:0d:f4:6d:a5:35:12:ad:0f:17:7e:39:8c:e4:fa:c9:97:
         90:c2:f4:f0:ff:19:0a:9f:f7:4d:b9:62:cb:ac:3a:59:c7:07:
         4b:f4:6b:37:72:21:30:bf:98:ac:c5:23:19:3f:03:1f:3f:84:
         37:63:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:51:08 2026 by rpki-client