Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
File:                     N0-NItIYTMfO2e6xPZSgX0u-DKc.mft (raw, json)
Hash identifier:          +5Ni4m3rAstNeg4WwlAzIzHdO71k42P9LMp0kMiIucE=
Subject key identifier:   A4:55:A4:27:AB:9A:DB:3B:45:84:E7:1A:3E:1A:35:FD:5A:F9:C7:C1
Authority key identifier: 37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
Certificate issuer:       /CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Certificate serial:       01A1C69F8E0C7F8235E61D54AB99071E3D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
Manifest number:          76
Signing time:             Tue 10 Nov 2026 18:01:47 +0000
Manifest this update:     Tue 10 Nov 2026 18:01:47 +0000
Manifest next update:     Wed 11 Nov 2026 18:01:47 +0000
Files and hashes:         1: N0-NItIYTMfO2e6xPZSgX0u-DKc.crl (hash: Lb/6ioMsuEFkNx81aUPtGv3itqunbWorJI9EDbbEitU=)
                          2: RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa (hash: 7wQU77lcMx7zNIX5/jMinttVxkaBruMAvwo/yeRlBaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c6:9f:8e:0c:7f:82:35:e6:1d:54:ab:99:07:1e:3d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
        Validity
            Not Before: Nov 10 18:01:47 2026 GMT
            Not After : Nov 11 18:01:47 2026 GMT
        Subject: CN=a455a427ab9adb3b4584e71a3e1a35fd5af9c7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7d:65:a6:b6:92:7e:57:82:8c:35:46:6b:d5:
                    23:38:4c:2e:2b:b8:61:df:96:ba:7d:31:a0:b9:da:
                    4b:ac:eb:63:58:80:de:df:c5:e9:9c:5d:78:5d:67:
                    d6:5d:80:e1:b5:5b:f8:f9:0b:79:3c:f5:8b:2e:f3:
                    07:67:43:26:2d:0b:f3:bc:ea:5b:cf:90:1f:da:a1:
                    55:cb:79:e0:2b:c3:4a:68:da:3f:8d:74:83:b7:cc:
                    3f:2a:19:58:d6:35:bd:b6:b8:4e:26:1a:aa:7b:08:
                    10:cc:4d:c8:25:b7:2e:4a:7e:09:93:36:85:40:a0:
                    ed:1a:b6:bc:14:26:3b:f0:74:7f:66:77:22:10:49:
                    d0:03:f7:86:fb:35:57:5e:4d:8c:ba:30:2b:2f:3c:
                    a1:f5:c8:01:8a:34:8e:5d:5c:70:69:0c:73:7f:a3:
                    01:5c:0b:b2:b1:a6:fb:e6:78:3f:5c:9e:41:8a:1d:
                    b7:95:6c:02:89:4d:b7:3c:3a:a5:6f:cd:72:5b:8d:
                    05:13:c7:0e:a2:8b:04:22:f7:cb:ed:5e:84:91:bc:
                    5b:f6:fb:43:b6:39:e9:61:cb:6a:90:83:d5:b7:11:
                    3e:50:ff:58:a8:5c:49:7b:a7:d7:86:2c:14:9b:16:
                    04:c3:ef:bd:c8:a4:2f:db:21:a6:dc:5e:98:bb:1c:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:55:A4:27:AB:9A:DB:3B:45:84:E7:1A:3E:1A:35:FD:5A:F9:C7:C1
            X509v3 Authority Key Identifier:
                keyid:37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:95:08:15:21:f3:48:52:7b:b2:22:ea:53:35:01:20:29:
         23:92:9c:48:37:c2:b9:82:a5:31:9c:fc:5c:4b:e7:d8:06:dc:
         e0:8d:38:da:d9:08:bc:aa:ab:8d:dd:fd:f8:30:9f:5f:12:4c:
         98:24:56:c4:72:9a:2d:45:35:7f:66:2a:e1:40:3e:ea:7a:79:
         da:13:34:ae:1b:25:f4:7e:c7:04:6e:75:d3:ea:4b:cd:96:65:
         f4:7a:72:9b:11:82:be:10:ec:f0:79:a7:96:57:2e:f5:26:e3:
         a9:1b:30:a8:c4:84:19:c2:df:fc:ee:07:d4:4d:40:71:30:ea:
         b0:03:9e:0b:5d:82:12:6a:61:eb:51:39:45:04:e0:cb:ca:ab:
         15:e3:45:57:f8:c4:18:d7:3f:6d:f2:fa:c6:78:34:17:c1:19:
         0c:14:16:84:4b:2b:0f:86:ec:1f:54:9f:12:7c:ee:11:56:1a:
         08:8f:0b:73:64:bf:dc:6a:5c:73:f1:c3:04:aa:b9:b5:ea:a3:
         95:0a:95:22:24:b8:6e:27:87:7f:d3:37:0f:a3:51:9f:2f:1a:
         60:9b:2a:38:5c:cf:d2:e8:c4:b2:a5:2c:e4:90:6d:53:20:ca:
         b7:b9:03:09:ed:a7:00:5f:d1:26:37:65:28:91:72:5e:02:1a:
         21:d8:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:46:48 2026 by rpki-client