Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File:                     NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier:          P4wJATlfV0kFDgb0o02xb/nbFCYJoufl1dn7SomsvCk=
Subject key identifier:   F5:97:0B:FA:76:7D:FE:E0:7B:E2:53:08:34:06:94:11:08:63:FB:EF
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer:       /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial:       01A102ED6763A7F23E72E10E6428BCA5BF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number:          1A82
Signing time:             Sat 03 Oct 2026 18:01:15 +0000
Manifest this update:     Sat 03 Oct 2026 18:01:15 +0000
Manifest next update:     Sun 04 Oct 2026 18:01:15 +0000
Files and hashes:         1: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (hash: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=)
                          2: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: 73/2+wwoKWM07f6T/H/GwVkk0dlapGEQ9ALQvOFZVIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:67:63:a7:f2:3e:72:e1:0e:64:28:bc:a5:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
        Validity
            Not Before: Oct  3 18:01:15 2026 GMT
            Not After : Oct  4 18:01:15 2026 GMT
        Subject: CN=f5970bfa767dfee07be25308340694110863fbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:bc:e2:36:28:8b:5c:b4:09:68:68:c3:76:
                    c0:e3:9a:40:f2:39:3c:be:b0:ee:76:cf:b3:ac:f9:
                    ae:86:62:42:bc:11:c0:7c:ca:79:54:18:62:00:23:
                    a8:23:26:53:7c:37:cd:c6:2e:31:54:15:2e:8c:1c:
                    2a:ba:61:7d:c5:fa:51:6d:6f:4b:f0:fd:d0:fb:7d:
                    19:5f:3b:b4:46:7a:88:7a:5b:12:a6:ba:13:8f:6b:
                    e1:5a:c8:cd:5a:48:75:1f:61:c8:ec:2d:02:08:bb:
                    99:af:73:05:ca:e7:de:1b:18:c3:dd:45:ce:da:12:
                    58:5e:3e:6a:f0:96:07:36:90:1a:d5:0c:be:46:5e:
                    7f:f4:32:ed:2d:05:ac:77:ad:03:5c:ce:e0:72:66:
                    68:7b:eb:49:da:f7:6b:0a:e9:e9:d7:2a:2b:dc:26:
                    ae:06:d9:1c:fc:62:92:2e:4b:24:ba:36:87:d9:38:
                    13:1b:e6:8d:e7:2a:5c:35:0f:f4:14:a0:9d:38:e3:
                    80:8a:b9:ec:0c:cd:12:e7:9b:9e:7c:1c:b3:f7:5f:
                    81:32:83:73:77:ae:df:f3:82:f9:72:96:c9:62:e4:
                    c4:74:47:f0:79:c7:b4:e0:73:18:7b:f1:a9:bf:d2:
                    7b:d4:0f:da:c6:9c:89:91:cd:79:52:fe:3b:39:36:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:0B:FA:76:7D:FE:E0:7B:E2:53:08:34:06:94:11:08:63:FB:EF
            X509v3 Authority Key Identifier:
                keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2c:a1:95:5d:65:ed:f8:ef:16:e3:92:e4:19:f3:0a:d0:ea:
         8b:dd:a6:27:ad:b8:20:61:e4:d7:08:f5:b5:43:86:c2:db:b3:
         0a:eb:a2:00:d4:49:c1:ff:f2:ec:ed:e1:44:03:ed:a9:b9:2b:
         ad:49:5b:c3:1c:a2:c3:5c:2a:4a:c7:f6:81:97:1b:4b:35:5f:
         44:81:97:99:dd:e8:8e:4d:da:c4:c0:02:8a:56:06:f9:15:83:
         ff:74:e8:75:ff:f0:e1:32:b9:de:0d:62:07:b6:fc:28:28:8f:
         7b:4b:0b:f5:44:8d:09:aa:dc:dc:4f:98:c4:fe:56:32:71:22:
         bd:22:fe:7d:37:8f:b5:a6:99:46:0b:ee:47:41:a2:15:59:ad:
         58:4f:4c:91:31:ef:dc:17:8f:00:77:89:83:13:69:f6:ef:1a:
         60:0c:c5:75:41:21:c5:d0:da:41:2a:fa:2d:40:0f:b1:3c:67:
         8e:b7:7b:39:9f:2e:07:66:c2:a1:e7:98:b5:09:6b:db:4c:6a:
         d0:37:d0:f4:fe:ff:3e:65:8e:b3:a4:8f:32:ca:7e:61:cc:98:
         ea:1e:e9:89:ac:3e:1b:d8:3d:eb:59:e3:e1:f2:f1:a7:89:93:
         a3:bc:34:bd:01:cb:47:34:d0:f2:86:23:16:cc:35:41:46:91:
         d8:47:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:18:30 2026 by rpki-client