Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          VWEedooayr5x09OrZdk/ATACIXmfQ08NkswyC6qOPhY=
Subject key identifier:   88:27:BE:3B:5D:93:16:D2:41:85:18:5B:60:39:EB:CB:CC:31:F1:BB
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       01A136A3B78979CAAC2FD04A5852FE618CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          1AFE
Signing time:             Tue 13 Oct 2026 19:01:01 +0000
Manifest this update:     Tue 13 Oct 2026 19:01:01 +0000
Manifest next update:     Wed 14 Oct 2026 19:01:01 +0000
Files and hashes:         1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
                          2: 16w8fKX-NSNDBHMIkb6Syvbgttg.roa (hash: EfAdsi8h+oAMMwRDv56MXINYQxMMRARBe+9IrtMbR5Y=)
                          3: 61jbpJA5HVGEOT8tC1fGORk3MnA.roa (hash: 9IKMLLOw3MqOJAEUO9knXWz+1yaQquLBRUG/eUeACOk=)
                          4: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
                          5: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
                          6: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: Bm0eSgxKMXK1Fclx1q7MfrIpNLWS+voQ9obhlZwZYD4=)
                          7: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
                          8: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:a3:b7:89:79:ca:ac:2f:d0:4a:58:52:fe:61:8c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Oct 13 19:01:01 2026 GMT
            Not After : Oct 14 19:01:01 2026 GMT
        Subject: CN=8827be3b5d9316d24185185b6039ebcbcc31f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:23:97:f9:8b:09:7f:ee:56:1f:ce:72:b5:b5:
                    78:2e:d8:9f:cb:01:20:d2:33:c3:f2:2c:1d:36:4d:
                    bd:84:f9:49:aa:73:38:53:bc:c0:5f:bd:8b:b3:67:
                    a6:83:c4:6b:3e:46:53:8b:30:2d:42:bd:20:c3:3a:
                    ce:af:83:bb:aa:91:89:eb:20:bf:e3:92:50:1c:71:
                    93:6f:02:cd:c5:d4:f0:d4:0b:e6:82:6a:fa:80:50:
                    28:dc:86:9b:3e:b0:b3:e6:d2:63:e4:5d:77:e8:03:
                    c1:d3:2e:36:ba:33:67:94:2d:39:0c:ab:e4:98:b0:
                    3e:9a:64:1b:4c:25:c2:0b:59:ca:60:18:b5:94:f4:
                    63:8f:ec:f0:bc:af:dd:37:7b:23:9a:87:dd:74:b7:
                    7e:c2:79:69:fb:28:08:a1:1e:d9:b4:95:b4:a9:5c:
                    ef:c9:4a:9b:f6:2c:71:5e:16:dc:39:13:51:59:4a:
                    1c:73:7e:78:9e:70:a0:d9:6b:ea:63:c6:c9:f2:79:
                    de:57:4c:61:87:20:6b:f3:e3:f1:42:f7:d0:51:fe:
                    de:d0:05:41:81:03:64:e4:69:28:ab:30:62:29:7f:
                    7c:3c:07:c5:b7:88:b0:1a:30:75:7a:d3:e5:de:1b:
                    10:ef:bc:c7:97:15:a2:58:ee:53:7d:68:3d:fe:56:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:BE:3B:5D:93:16:D2:41:85:18:5B:60:39:EB:CB:CC:31:F1:BB
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:9f:a3:e6:03:33:f5:85:35:2e:fc:61:3c:a1:09:31:16:
         d2:fa:cd:a2:78:0a:17:f9:8c:da:db:99:f4:19:8a:a4:09:b4:
         45:96:72:81:e8:32:6c:76:63:32:a8:b7:d6:19:4e:2e:1a:e4:
         f3:90:59:af:ce:f0:4c:e1:4c:d4:ff:2b:52:2b:9f:72:1a:5d:
         33:48:39:34:86:88:be:1b:10:03:fd:44:f0:06:b0:61:90:d2:
         e2:a6:e7:da:b7:72:1c:1f:12:0c:be:98:35:e2:aa:5a:65:75:
         59:7e:b1:e1:90:20:04:3d:d2:27:1e:25:92:25:63:6e:3d:15:
         89:5a:1b:c1:a9:e3:b2:ce:25:fc:0e:8f:a2:f8:ca:e0:52:6a:
         1f:99:a3:14:c1:b4:86:1b:75:32:2e:3b:32:c6:5a:fd:49:cb:
         ba:91:92:cd:8e:64:fa:ce:ed:02:e4:53:ea:f3:93:4c:ae:73:
         13:5a:f8:a5:f5:92:99:52:b9:49:c2:f9:0e:cf:8e:64:0e:a3:
         f9:64:f9:2c:95:45:b9:29:02:19:5c:db:47:d6:1d:9a:26:96:
         f7:59:f8:d9:4b:d5:c0:28:66:2d:bd:f1:74:53:13:a5:b4:fb:
         db:6e:95:24:2d:94:3d:75:0e:c9:a4:d1:93:ae:ea:75:21:cc:
         4b:3b:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:28:45 2026 by rpki-client