Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
File:                     njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft (raw, json)
Hash identifier:          4YVLx/O+LBSa/Cqr+ZS0EDbC+zx9j9aZS6Jt9l56fho=
Subject key identifier:   78:94:C0:AF:2E:08:F8:0E:B7:D2:E0:A1:CD:55:21:15:D4:12:BB:BC
Authority key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Certificate issuer:       /CN=9e315018e560000d94718d85ee4e1320c3a5e457
Certificate serial:       01A0E174AEE41BC44FBFD6D1CAFBB24AB0F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:01:55 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:55 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:55 +0000
Files and hashes:         1: _W2MGLpzYLCcdM8MrYh-W5k4LpE.roa (hash: 5AVtOSonCp0arcBUR0hK73/WbQu4O8oq5lfKGONGBLk=)
                          2: njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl (hash: +UVjp9onz5xLAOH4gNNAY/2+PyOQIs0Fycwz3rpslZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:ae:e4:1b:c4:4f:bf:d6:d1:ca:fb:b2:4a:b0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e315018e560000d94718d85ee4e1320c3a5e457
        Validity
            Not Before: Sep 27 06:01:55 2026 GMT
            Not After : Sep 28 06:01:55 2026 GMT
        Subject: CN=7894c0af2e08f80eb7d2e0a1cd552115d412bbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:9d:90:ba:60:87:ff:15:b6:ea:27:f4:d5:
                    10:de:79:09:29:ce:aa:a6:cd:e2:17:72:f7:16:f3:
                    8c:d1:48:94:6e:5b:23:26:8e:4a:f7:0f:67:28:ae:
                    02:e2:6a:22:82:c6:39:5b:e4:e6:01:e7:6e:05:61:
                    80:40:e9:59:15:41:84:9b:43:97:67:47:d2:36:8f:
                    13:ef:98:3a:d5:a6:32:c8:e4:76:07:7b:57:f7:1f:
                    92:ef:b5:10:3e:be:67:f6:5a:b5:b7:29:9c:59:52:
                    41:9f:0b:4d:38:96:b5:35:52:53:14:01:ba:a0:f1:
                    29:bb:5b:fb:2f:27:43:19:e2:5a:c7:40:ec:ee:36:
                    16:d0:8c:68:73:3b:a1:da:d0:8f:6e:68:16:cb:2b:
                    90:d0:3c:c2:f1:cc:63:69:54:19:38:5d:31:c1:20:
                    2f:a0:13:17:23:b4:10:ed:6a:7a:b1:8a:0a:e7:be:
                    25:4a:3a:c5:ba:17:fa:1e:46:19:90:8b:1b:43:2d:
                    85:c2:59:be:6d:9e:a5:bb:4f:66:ee:6f:a4:c6:72:
                    19:59:77:16:7f:a2:db:da:52:90:05:8b:d8:bd:3c:
                    66:21:78:9b:10:0e:b1:65:4d:49:31:44:4e:b7:34:
                    24:87:54:22:a9:0a:71:59:d0:cc:59:15:e8:a0:f6:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:C0:AF:2E:08:F8:0E:B7:D2:E0:A1:CD:55:21:15:D4:12:BB:BC
            X509v3 Authority Key Identifier:
                keyid:9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:e7:a0:54:98:b8:67:7f:16:c9:44:3e:35:23:e6:ea:43:4f:
         57:fb:97:b6:d1:38:2b:81:1d:0c:60:81:75:71:6d:f0:ca:c4:
         d3:70:7a:8d:c3:c4:79:84:8a:3a:bc:38:8b:59:0e:a1:9d:c5:
         15:28:91:28:08:13:ea:80:ca:d0:f4:e7:ea:ff:28:57:7b:86:
         9c:d5:40:2b:58:ac:5b:e3:56:f1:f8:88:6d:9b:73:60:51:82:
         b6:6b:ff:44:f1:c1:f2:be:9c:3b:3f:b0:b2:76:7e:12:e6:99:
         ee:d9:16:36:17:6b:72:a9:62:94:6f:3d:e4:99:64:91:ad:11:
         aa:f6:9b:0f:38:f9:db:cf:59:cb:23:ce:c4:a0:de:c8:b3:09:
         39:3c:83:fd:70:26:d7:8d:86:7b:86:5b:15:f8:cc:a8:21:55:
         6e:74:ec:f8:0e:73:4c:d9:a0:2c:b5:c7:3b:d6:0d:a8:92:59:
         c2:d9:00:dc:ee:eb:93:f5:f8:9d:8e:e9:ef:e1:31:06:b3:01:
         3b:28:1b:18:be:cd:27:df:10:b1:22:07:e0:34:22:e4:98:a1:
         21:87:65:fb:20:ee:d5:a4:c7:e9:59:95:cc:2d:8b:15:e0:ec:
         b0:d5:81:17:7a:46:c8:55:58:f6:f0:42:3f:08:94:48:fd:dc:
         77:c7:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:05 2026 by rpki-client