Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          CYRTKJBGxxn7DdGOr7qw9nEkhmV0mtURj1yxEPDMdAE=
Subject key identifier:   10:2F:DD:A7:D2:F3:A2:9E:CB:32:48:B2:4B:B0:F3:F3:C1:89:00:60
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       01A0C030DFD84E1A9E797DF204040B0EEF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          1A71
Signing time:             Sun 20 Sep 2026 19:00:23 +0000
Manifest this update:     Sun 20 Sep 2026 19:00:23 +0000
Manifest next update:     Mon 21 Sep 2026 19:00:23 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: l+wV2eeZ4XOZy/27d1/mmlEK6DcfFeK8WKuypp/2K6Q=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:30:df:d8:4e:1a:9e:79:7d:f2:04:04:0b:0e:ef:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Sep 20 19:00:23 2026 GMT
            Not After : Sep 21 19:00:23 2026 GMT
        Subject: CN=102fdda7d2f3a29ecb3248b24bb0f3f3c1890060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:05:7f:b1:12:64:43:77:19:93:08:c2:85:
                    01:65:7b:ff:39:8a:26:4a:0e:a4:27:d6:db:eb:c4:
                    b4:9a:95:99:c1:e1:54:34:52:2a:c5:12:c2:b9:5f:
                    1d:0d:2a:3d:78:54:c2:08:90:bb:3c:a0:6c:75:41:
                    cc:07:c3:d6:92:bf:d5:c2:51:bd:1a:f2:fa:17:c9:
                    e8:b7:8e:d8:04:be:23:48:13:1d:5f:07:01:2a:f2:
                    ed:35:89:1b:b3:e0:a3:04:9d:36:aa:15:fa:05:52:
                    0e:99:33:b3:26:bf:91:fd:b7:d4:5a:ee:4b:f2:86:
                    04:d3:26:0e:43:43:17:cc:0f:fa:dc:19:f4:31:40:
                    c4:53:08:92:49:4c:99:d5:92:e9:ac:2d:cf:88:34:
                    b5:ac:e6:6b:30:6d:43:e6:6f:19:17:ff:9a:f5:03:
                    2e:c3:31:98:13:6f:75:fe:dc:46:91:ec:d1:f2:fa:
                    7c:a4:ca:40:dd:8e:6f:7b:42:a0:66:bc:4e:59:e8:
                    be:0a:0b:c8:00:87:e5:3e:71:cf:38:dc:10:da:0f:
                    c7:7e:8f:26:9a:b6:10:c3:85:7d:e8:8e:de:04:ef:
                    11:29:49:1b:60:2c:60:7e:59:9f:ea:b3:9c:db:6f:
                    02:dd:47:d4:c1:bf:45:af:1b:07:95:d6:68:ad:92:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:DD:A7:D2:F3:A2:9E:CB:32:48:B2:4B:B0:F3:F3:C1:89:00:60
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:f1:9c:53:8b:4b:b8:fd:cf:2d:40:5f:c3:7b:56:27:69:
         89:6d:6c:58:89:d6:ad:2f:ab:62:80:2c:10:e4:9f:57:34:4e:
         f7:f3:18:62:5e:c7:be:89:bf:5e:33:b5:68:71:74:f6:96:3c:
         c3:86:e2:ac:75:d9:0a:54:09:b0:1d:c7:e8:ca:b7:a3:d4:bd:
         dc:74:6a:8e:1a:bd:05:29:57:86:a1:db:42:b6:96:85:75:00:
         45:72:d8:47:8a:d7:a1:39:39:46:4f:12:d2:8e:84:ca:10:3e:
         d7:e7:46:a6:25:fa:ea:41:76:fa:13:f9:de:f7:a1:3e:8d:5e:
         0e:8e:75:70:11:88:51:15:4b:37:38:2a:ff:be:10:5c:b1:44:
         25:0c:1e:b4:3c:ef:3a:46:ba:bb:6e:35:06:29:85:a5:c9:ce:
         44:bd:ce:4d:d5:b4:b9:39:e4:14:58:3c:de:29:20:88:d0:a6:
         2f:cf:48:9c:88:93:56:97:39:b3:e2:d1:9a:25:65:b6:48:1d:
         6e:67:ca:fa:5f:ec:f4:ba:90:9f:23:06:2b:24:c0:2e:f0:d3:
         c6:f5:15:a2:3c:bd:cb:d4:47:91:71:bc:23:ee:6d:52:3d:4b:
         2e:1a:8b:03:08:c5:6f:d3:b2:51:2a:09:bb:fe:d8:76:16:f4:
         b1:32:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:30:10 2026 by rpki-client