Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File:                     NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier:          rgg8qIIFoyJcv/epYadOHIqahQLhr+cROSFp13DfJKQ=
Subject key identifier:   41:C5:F5:AD:56:46:20:79:8A:5D:E7:35:85:DB:DD:09:50:94:1F:DE
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer:       /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial:       01A0CDB598D5F1BB4EA43906E9F317898AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number:          074E
Signing time:             Wed 23 Sep 2026 10:00:25 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:25 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:25 +0000
Files and hashes:         1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: tEP15jKIikaGNnZ71DUQiTi0zaENnIEc/D0Q7nv+PBU=)
                          2: vh8nHnZMli624EqpANkCUP1tqk0.asa (hash: Kv7KcCGaNFb9ry30kWnChNRoLUB8OMH9uERlx7jLg1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:98:d5:f1:bb:4e:a4:39:06:e9:f3:17:89:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
        Validity
            Not Before: Sep 23 10:00:25 2026 GMT
            Not After : Sep 24 10:00:25 2026 GMT
        Subject: CN=41c5f5ad564620798a5de73585dbdd0950941fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:4e:4c:63:77:27:46:a7:ff:46:5c:a0:a5:
                    25:05:cc:39:f5:da:19:a7:d6:8b:76:94:90:61:f9:
                    22:f0:4a:51:cd:09:6d:a1:16:61:ad:b9:95:90:94:
                    2d:59:29:42:12:1e:83:80:f4:ce:2e:9a:92:44:b6:
                    72:2b:56:66:90:6d:d4:db:cb:bf:6d:ab:e8:63:e9:
                    cc:25:a8:ba:9b:55:4c:13:e2:61:6f:c8:4d:fd:af:
                    9c:92:f6:e7:26:f3:62:c2:28:ba:9d:08:1f:7e:83:
                    36:dc:bb:24:8e:3f:89:f9:ff:ab:19:d9:5b:8d:12:
                    b0:d1:be:ae:38:43:e3:05:39:eb:04:b7:a4:72:56:
                    76:5e:f1:cc:26:e2:e5:c1:08:c1:25:62:68:b6:5c:
                    51:22:f0:34:48:18:06:3d:c8:d1:03:08:e4:34:17:
                    cd:99:0f:a7:5c:8f:48:43:1e:78:c8:ff:72:dd:47:
                    44:45:59:b6:6f:bb:9a:7f:d4:8f:91:f2:85:75:45:
                    35:e8:79:44:19:ba:db:df:3a:8d:e3:27:91:81:8b:
                    19:6b:5d:a7:f4:24:76:11:ea:b0:7f:6b:c5:cb:9d:
                    e0:48:bc:79:8d:05:88:5c:db:ec:66:b3:48:cf:99:
                    a6:28:8c:34:15:5d:5a:72:4e:f1:98:f8:a9:06:b7:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:F5:AD:56:46:20:79:8A:5D:E7:35:85:DB:DD:09:50:94:1F:DE
            X509v3 Authority Key Identifier:
                keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9c:53:bb:83:67:3c:d1:15:f2:5d:01:1a:ad:f9:4e:14:31:
         3d:36:bb:0e:19:1b:15:65:cd:93:66:11:ae:05:be:fe:0b:5e:
         ac:a1:15:ad:d1:12:f0:40:c2:73:13:0e:ad:f6:13:1a:80:85:
         42:55:52:38:4d:6f:7c:5b:6b:87:2c:30:ad:18:22:fd:3f:7e:
         76:e3:fd:e2:d2:a0:5a:8d:af:63:f4:38:7f:f9:c8:ad:d3:b2:
         6c:45:be:c2:89:db:a6:07:e5:62:0a:06:e8:c3:e1:b0:a9:14:
         bc:18:ef:3f:31:14:a0:6f:6c:eb:c1:30:dd:43:18:83:e9:77:
         a2:08:07:a1:a5:ca:aa:a0:63:d1:82:4b:ab:59:63:eb:15:35:
         97:a3:3b:41:e5:d6:64:85:85:1e:a0:d1:17:ad:79:b7:bf:83:
         40:3a:bb:d9:10:9e:f3:68:5a:f0:4a:73:1c:77:53:f5:f6:94:
         08:4f:57:98:5a:88:e7:ae:c6:54:8a:fd:de:7b:d1:14:5c:b2:
         9f:f8:98:57:e2:44:86:7a:9b:79:ff:40:01:03:41:30:02:2c:
         fc:40:2b:87:7e:bc:a0:f9:f5:98:ea:db:24:ab:ff:7f:2f:5d:
         a0:4f:a8:4f:10:21:83:40:00:4b:a6:75:e7:5c:13:87:40:11:
         c6:35:14:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtZjV8btOpDkG6fMXiYqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz
MjNlYWEwHhcNMjYwOTIzMTAwMDI1WhcNMjYwOTI0MTAwMDI1WjAzMTEwLwYDVQQD
Eyg0MWM1ZjVhZDU2NDYyMDc5OGE1ZGU3MzU4NWRiZGQwOTUwOTQxZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth5OTGN3J0an/0ZcoKUlBcw59doZ
p9aLdpSQYfki8EpRzQltoRZhrbmVkJQtWSlCEh6DgPTOLpqSRLZyK1ZmkG3U28u/
bavoY+nMJai6m1VME+Jhb8hN/a+ckvbnJvNiwii6nQgffoM23Lskjj+J+f+rGdlb
jRKw0b6uOEPjBTnrBLekclZ2XvHMJuLlwQjBJWJotlxRIvA0SBgGPcjRAwjkNBfN
mQ+nXI9IQx54yP9y3UdERVm2b7uaf9SPkfKFdUU16HlEGbrb3zqN4yeRgYsZa12n
9CR2Eeqwf2vFy53gSLx5jQWIXNvsZrNIz5mmKIw0FV1ack7xmPipBrfHawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHF9a1WRiB5il3nNYXb3QlQlB/eMB8GA1UdIwQY
MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt
MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk
LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJxTu4Nn
PNEV8l0BGq35ThQxPTa7DhkbFWXNk2YRrgW+/gterKEVrdES8EDCcxMOrfYTGoCF
QlVSOE1vfFtrhywwrRgi/T9+duP94tKgWo2vY/Q4f/nIrdOybEW+wonbpgflYgoG
6MPhsKkUvBjvPzEUoG9s68Ew3UMYg+l3oggHoaXKqqBj0YJLq1lj6xU1l6M7QeXW
ZIWFHqDRF615t7+DQDq72RCe82ha8EpzHHdT9faUCE9XmFqI567GVIr93nvRFFyy
n/iYV+JEhnqbef9AAQNBMAIs/EArh368oPn1mOrbJKv/fy9doE+oTxAhg0AAS6Z1
51wTh0ARxjUUVw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:13 2026 by rpki-client