Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          j2cZpyjOV/cro6zkofIf0R8wHCcNP08P4srCV86Lm0M=
Subject key identifier:   6D:73:26:41:4E:7E:6D:CA:40:57:39:4C:3D:7F:46:35:7A:14:2B:53
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       01A1ABCC2D540B8FC9DF1A2984789DD72879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          1AEB
Signing time:             Thu 05 Nov 2026 13:00:47 +0000
Manifest this update:     Thu 05 Nov 2026 13:00:47 +0000
Manifest next update:     Fri 06 Nov 2026 13:00:47 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: akX9Vs3FwGkx6oRHY62OlNuF5VJ67qU3PXgmG9H3Hv0=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:cc:2d:54:0b:8f:c9:df:1a:29:84:78:9d:d7:28:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Nov  5 13:00:47 2026 GMT
            Not After : Nov  6 13:00:47 2026 GMT
        Subject: CN=6d7326414e7e6dca4057394c3d7f46357a142b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:b6:38:12:3f:78:2b:a3:23:f6:07:9e:f0:
                    0f:50:81:d2:1d:c5:a5:f4:15:7b:44:0a:ef:79:b6:
                    ee:61:24:0f:9d:8a:15:8e:ba:d3:c2:18:fb:d0:91:
                    a8:4a:25:ce:c2:a3:8d:24:cb:c6:1b:99:6f:f7:c2:
                    5f:7c:52:80:f3:10:df:c6:d1:9d:e4:84:68:22:4b:
                    8e:58:1f:95:6f:38:1e:de:4a:a9:95:7f:59:15:10:
                    83:c1:ea:a5:3b:8e:47:80:4d:d7:bf:d6:a9:d8:f0:
                    27:f2:ec:58:54:43:65:2f:36:07:dd:af:04:46:f5:
                    a7:23:d5:bd:60:b7:5e:18:51:3c:c0:69:df:7b:21:
                    9b:b4:86:c2:af:18:2f:ef:81:6d:6f:b2:1b:4b:2d:
                    82:32:74:94:72:76:6d:55:b5:30:bb:54:ad:9f:d2:
                    b4:1d:56:04:f9:28:3a:8e:c7:ac:d6:55:af:bf:05:
                    eb:f6:36:01:92:82:73:91:6b:e0:d7:95:36:b9:bf:
                    dd:b0:5e:25:0d:f0:79:0b:a6:0d:4d:35:53:df:99:
                    0e:3f:b1:88:85:ec:59:80:92:ee:c9:6b:c5:e4:f7:
                    f8:e6:cc:01:00:a6:86:4a:36:fc:0b:b2:4f:41:1a:
                    a3:0c:e7:bf:b9:9a:28:6d:c1:d2:ae:f3:bf:24:c7:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:73:26:41:4E:7E:6D:CA:40:57:39:4C:3D:7F:46:35:7A:14:2B:53
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:48:ed:23:65:31:be:35:70:e0:e0:8f:5a:a8:19:17:62:db:
         7c:83:11:a6:34:1a:6f:be:75:79:0a:5f:8b:63:02:8a:a9:90:
         ff:f3:06:58:09:4a:5e:02:bb:10:3f:97:ce:20:e2:f2:7d:43:
         1e:8f:4d:87:f7:c6:0d:85:f8:5d:33:1e:e9:73:76:02:62:f0:
         28:9b:8e:47:1d:0c:71:c1:e0:c4:a5:89:b6:b8:aa:b3:a9:06:
         ac:08:9b:80:5e:4f:17:6e:30:45:6a:32:8f:3d:32:fe:e1:8f:
         15:f1:4a:81:8e:db:d1:1b:3a:b6:d9:91:4a:ac:38:50:9d:f2:
         69:81:df:fb:a6:c3:d2:5c:13:36:48:a1:58:56:52:a2:d1:57:
         83:5f:d8:88:b2:0c:a6:c3:fd:86:e2:19:3f:e7:cd:13:c1:95:
         65:08:ff:bd:69:1f:45:41:26:f4:b6:71:fb:aa:28:da:f0:85:
         e8:16:25:3a:bb:7c:66:ee:d3:b4:4c:7d:0c:cd:e1:ee:02:83:
         58:68:f4:ab:34:ba:cb:15:65:49:82:86:4a:c6:55:7d:74:f0:
         af:6d:f5:dd:9e:a0:c4:63:b5:60:aa:ed:e3:b1:22:83:e7:46:
         63:bb:c6:d9:da:02:cb:95:6a:74:be:d7:b2:af:f1:08:03:2a:
         5d:cf:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:26:19 2026 by rpki-client