Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          8BoeS0Q+ozUAYaucVSQ2/3HVbPTC57zvptxzlMbpBO4=
Subject key identifier:   96:86:DA:82:2C:1A:94:B8:A0:53:62:CC:21:9B:91:89:B1:14:F3:21
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       01A0E5882C637AA8F1941645A8265EFE5DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          1A38
Signing time:             Mon 28 Sep 2026 01:01:41 +0000
Manifest this update:     Mon 28 Sep 2026 01:01:41 +0000
Manifest next update:     Tue 29 Sep 2026 01:01:41 +0000
Files and hashes:         1: 4MZHtrPduvwWZu0hq-_oUYNM5w8.roa (hash: AxdxJvWatT200gvs4axM5PIkBFxSpInVyc3mGSKp8vU=)
                          2: RVVP5PD8dP-43J18hmU2HOb7Ac0.roa (hash: OTrvnZXSq87IsihJgFpcsrD3gfgWtAmyMOFW/2u0mbk=)
                          3: S4jlTESNKuERIhzvefthxqxMjFE.roa (hash: yLIrF9eIEj+kTPaOF2RFGKsApZoPXCZlHEXSS6Q4GZY=)
                          4: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: Vnr0v9iep2nEneeB6+P9tN3wGtaUdRtGWJ6VKHyrx8E=)
                          5: q7lePwAA7tbvwyh9g0diFjxEIEM.roa (hash: fcB9jLCKEftt/YheXWPytPk6jNt6XasOK8ZmMyOLEwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:88:2c:63:7a:a8:f1:94:16:45:a8:26:5e:fe:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Sep 28 01:01:41 2026 GMT
            Not After : Sep 29 01:01:41 2026 GMT
        Subject: CN=9686da822c1a94b8a05362cc219b9189b114f321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:ec:35:0a:f7:1b:82:e6:0f:e5:2e:2e:ab:
                    02:c4:e2:d8:25:39:3b:db:08:2e:60:ac:97:82:74:
                    f0:6f:da:d7:af:d3:b6:8f:7f:cf:82:8e:2d:c4:c3:
                    cb:9f:7f:f8:6c:36:69:52:f3:81:2d:17:2b:40:b3:
                    06:88:2e:c9:60:c7:a1:f3:02:eb:3e:46:d7:82:4f:
                    eb:05:9f:f9:e2:db:34:a7:45:24:10:49:8a:f8:bf:
                    17:00:75:36:b9:1c:e2:5f:21:e9:82:6c:d0:bd:05:
                    77:3e:ea:ec:97:11:a6:3d:c0:e1:0d:68:d5:4a:8a:
                    19:a9:62:40:c4:f2:62:b6:ea:70:ab:7a:01:98:1d:
                    3a:a6:ba:c2:18:d5:be:d7:d2:73:e9:d8:e3:86:6a:
                    2c:f2:70:94:d2:ef:68:09:c1:de:ac:af:63:b1:3a:
                    61:7e:7e:c1:34:20:76:45:54:8e:02:1d:41:75:6f:
                    d4:fb:8f:41:98:a9:9b:29:9d:e3:21:3b:75:0f:1d:
                    f0:61:a0:82:23:d4:4e:bb:45:91:67:18:10:d4:ed:
                    59:cd:e9:69:10:8b:9a:87:54:ad:bb:49:30:3d:7e:
                    3e:b0:17:69:05:ba:15:e0:4d:38:01:95:ab:63:d4:
                    d5:a1:a2:ae:11:ba:8c:9c:2d:26:38:9b:11:56:59:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:86:DA:82:2C:1A:94:B8:A0:53:62:CC:21:9B:91:89:B1:14:F3:21
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:61:17:8e:4c:51:73:f2:03:c0:69:44:70:2c:80:06:56:a1:
         ba:70:45:9f:7b:21:1c:ef:17:aa:f6:d1:06:0b:01:80:a3:a5:
         20:32:2d:c9:1d:59:21:27:ea:45:97:e1:a7:ab:a1:b4:ab:d4:
         02:81:a6:36:8a:0a:a3:37:ae:44:1e:d4:4a:a2:35:3d:ad:14:
         35:13:ca:eb:73:81:7b:b0:c5:63:23:c3:b9:56:c0:81:4e:9d:
         a4:49:e1:d5:ac:c4:39:e5:5b:b1:f7:7d:4c:8d:0a:00:1b:df:
         cb:41:ad:76:7f:7f:5f:f3:11:58:46:47:de:cf:6b:07:5c:95:
         02:be:4f:b5:fe:76:fd:c9:4b:f4:b8:17:6f:52:14:2d:55:0c:
         54:58:bb:6a:ca:84:81:9e:0c:a7:8c:45:88:58:47:05:a7:fb:
         c0:3c:a8:88:40:df:a1:74:37:39:a1:af:20:28:fb:d6:1b:b7:
         82:10:38:9f:a8:7d:73:47:19:c1:fb:ef:fe:c7:21:9e:e7:be:
         27:12:db:d7:f5:b3:04:14:13:b7:e6:66:25:c0:8f:44:48:98:
         f0:40:a8:53:f1:66:a1:9c:85:e4:51:10:44:6c:c7:10:51:09:
         ba:30:2b:72:7f:a3:c8:9c:6f:0a:0d:ac:5f:27:0f:e4:bd:3f:
         d7:98:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:12:25 2026 by rpki-client