Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File:                     N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier:          3mYvteNTYO819NgtHQvT36hLO9PYv19XXCnvMsU7xxY=
Subject key identifier:   F0:FD:41:83:AD:CE:87:93:D6:0C:DF:1B:EE:3D:67:11:27:7A:13:58
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       01A0E7E43FEF477883CB3EF24C69228DC8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number:          1A81
Signing time:             Mon 28 Sep 2026 12:01:30 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:30 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:30 +0000
Files and hashes:         1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
                          2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: QMwqsp31NOgslF57PSD17RSnjJp/H7zzG5Mmv4A0xbY=)
                          3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
                          4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
                          5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
                          6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
                          7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
                          8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:3f:ef:47:78:83:cb:3e:f2:4c:69:22:8d:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Sep 28 12:01:30 2026 GMT
            Not After : Sep 29 12:01:30 2026 GMT
        Subject: CN=f0fd4183adce8793d60cdf1bee3d6711277a1358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:cb:a6:50:62:02:db:dc:ab:8d:49:36:0a:
                    08:4a:89:3b:9b:1f:aa:f8:0f:5c:82:1b:06:1a:2d:
                    ae:0c:53:b2:91:a4:cc:05:4d:d1:6c:d4:80:05:38:
                    be:7c:3e:90:6d:18:9d:ab:17:32:58:79:a3:c3:0e:
                    40:c1:15:00:5f:d1:58:6b:e3:cc:c2:ec:32:3c:cd:
                    d8:44:25:60:65:cc:7e:b5:c1:13:63:3d:ce:d6:87:
                    4e:ae:82:c1:eb:09:83:6f:d2:74:86:43:d3:88:4e:
                    29:f9:28:b8:1b:17:63:b9:a9:a6:41:d3:65:00:03:
                    ac:a8:0f:8a:df:f9:05:d9:de:18:a7:5a:9a:58:75:
                    a3:ed:66:a0:91:c4:62:57:25:b3:2a:d4:bf:4a:26:
                    01:b0:50:e2:ca:37:ea:50:7c:bc:b4:33:57:6e:5a:
                    89:90:6d:b8:fe:8f:b2:71:a1:e3:3e:5a:9f:3e:a8:
                    12:31:57:16:c7:37:65:71:cd:fc:f4:aa:70:5f:b3:
                    21:e0:09:43:59:0f:df:68:0b:c6:99:c5:f2:ab:0e:
                    71:5e:84:f2:b8:d8:08:dc:0d:07:5e:d4:92:cf:cd:
                    50:fe:00:d0:30:e6:e9:9e:af:96:67:96:27:78:fd:
                    30:dd:14:fb:c0:f0:e4:62:dd:e3:cf:17:5d:52:63:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:41:83:AD:CE:87:93:D6:0C:DF:1B:EE:3D:67:11:27:7A:13:58
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:6d:6d:20:f0:ad:49:d3:8b:7f:08:33:3b:b6:cd:30:61:58:
         aa:39:99:85:e7:ac:29:05:4b:9e:dd:48:84:26:2f:18:d2:bc:
         64:ad:16:36:5c:d6:5b:07:8e:42:c7:ea:27:d4:bb:d9:39:b5:
         51:21:e2:21:54:35:f4:25:85:26:13:ff:b2:ff:a2:9c:af:05:
         ff:2e:07:e7:c1:3d:21:76:63:72:36:85:80:17:06:85:93:02:
         9b:f2:51:72:c2:80:0c:22:8a:1b:01:b7:45:e1:02:97:95:56:
         ed:bc:cf:c2:6f:03:8d:9a:12:d8:69:1b:67:de:f0:95:54:17:
         07:b4:39:1f:9f:69:8a:66:ca:b1:81:85:02:6a:fb:76:9b:e0:
         ec:d9:65:a2:64:c5:ef:c3:89:9f:e9:e0:27:20:6d:7c:c9:a8:
         7e:b6:14:d6:5a:81:5f:16:11:ae:5c:05:a1:13:d3:15:96:63:
         67:ae:d6:b5:9c:56:2f:e2:a2:d5:46:e2:d4:3e:8c:81:85:ad:
         24:6c:e7:2f:7a:74:01:7d:c9:c0:6c:35:82:4d:07:59:cd:72:
         e8:31:48:e7:f0:a4:1f:5e:30:70:ae:28:08:cb:a4:2b:82:4d:
         18:8f:86:7a:62:c4:c2:7a:11:0e:61:e8:35:53:5f:32:b8:81:
         6d:78:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:01 2026 by rpki-client