Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          2zhBP918QEMpNS6ubEqzNpRAolJzGVCnCRJR6cx9c/g=
Subject key identifier:   D4:C2:0E:5D:78:A2:5D:4D:10:9E:B9:91:2D:3A:AA:28:72:EA:5D:04
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       01A0C1B187F63FC70A796CDE27D8B166F07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1A66
Signing time:             Mon 21 Sep 2026 02:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:32 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: X1FukhnPyQZlkbBKfR/zlIB1nt5F8tMfUN0a+dMZ5t8=)
                          2: e8LfT7gfSGa2muv0jF7A1t1LYdk.roa (hash: WRAYYzwkRc+Wb2Yiz2tOnruT9Tcor90WcXfJXFu2bXg=)
                          3: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
                          4: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:87:f6:3f:c7:0a:79:6c:de:27:d8:b1:66:f0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Sep 21 02:00:32 2026 GMT
            Not After : Sep 22 02:00:32 2026 GMT
        Subject: CN=d4c20e5d78a25d4d109eb9912d3aaa2872ea5d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:fe:45:b0:0e:bb:5a:5b:6a:d7:8c:5a:17:
                    5b:05:55:7a:71:cc:af:77:38:31:9c:46:98:8b:13:
                    08:86:7a:d6:10:d8:ca:cd:21:9e:59:75:48:e5:67:
                    b8:ca:1c:8f:b9:55:b4:3a:d2:65:21:69:8f:af:e2:
                    ea:99:78:b5:ba:15:09:de:cd:3a:68:71:17:48:41:
                    02:79:b7:83:4e:ff:35:6e:09:92:5d:fb:50:80:67:
                    9c:8d:33:11:40:e6:aa:8c:e5:e4:fa:14:ce:f7:64:
                    b3:8c:f8:ef:c0:19:ba:a3:c2:cb:d6:f6:76:8f:f7:
                    a3:9a:be:36:c5:cd:84:39:46:58:a6:0a:08:a3:80:
                    a7:e6:07:ac:a6:27:cf:22:5a:2d:27:5b:17:bf:c3:
                    66:fd:48:80:30:f0:28:79:21:f5:28:a0:fa:9e:ef:
                    39:bc:f4:aa:79:42:45:82:d3:f2:15:4a:ea:26:75:
                    f6:66:e6:d1:9f:32:5f:d1:2f:ab:75:27:cd:69:c3:
                    bf:79:bb:5f:42:68:04:83:b3:b2:51:6a:4b:67:c5:
                    83:b7:72:a0:34:cf:f4:2f:1e:39:37:1a:d7:c0:53:
                    ef:1b:06:b8:4f:c4:97:a3:e0:2e:5d:00:e4:7c:27:
                    ad:f9:01:ad:5e:c2:94:95:35:eb:09:af:32:0b:ce:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:0E:5D:78:A2:5D:4D:10:9E:B9:91:2D:3A:AA:28:72:EA:5D:04
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:af:f2:25:30:f0:94:64:10:84:79:b8:cc:a8:e9:8c:28:f3:
         e4:b6:22:be:de:37:4a:b8:ee:90:13:b4:be:5d:a0:1d:a9:c8:
         26:75:fc:da:d7:1b:ca:42:5f:24:2a:c8:7f:64:11:4c:57:d5:
         45:34:90:81:15:71:e4:a0:4f:ea:17:e1:4d:5b:f7:62:63:43:
         ad:da:65:eb:6d:6f:bf:56:92:14:aa:dc:a0:15:80:b9:b0:de:
         40:34:7d:44:42:fb:0e:01:99:31:c3:20:37:86:df:6d:19:f9:
         9b:79:22:1a:3f:f9:c8:22:1f:ce:a8:02:e4:4a:f9:2c:40:39:
         37:eb:ff:d9:fc:d2:1c:1b:11:3f:bb:b3:67:15:c9:2d:64:b6:
         99:07:54:e4:b1:12:fd:7a:f4:17:e9:c8:26:16:f5:c8:ce:a8:
         f1:2c:51:59:bd:af:94:de:bc:e3:3d:e2:b1:0b:b5:94:67:99:
         d3:16:47:92:9c:04:2a:a0:d5:c1:42:e3:01:6e:97:b7:4e:f9:
         4b:67:8a:f5:2a:a2:36:3d:bd:72:b8:7a:96:0e:2a:d4:9a:75:
         dd:de:21:d0:4d:74:20:72:0f:17:89:5b:7c:38:5d:e3:9c:de:
         a9:6b:36:24:08:09:2e:0c:92:15:48:22:6d:db:88:52:17:18:
         7f:15:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:09 2026 by rpki-client