Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File:                     N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier:          D5xSpW+97yiIFXXUZMT7RXr4oJdAz/cZURlv7piT/vY=
Subject key identifier:   BE:E9:D6:C0:F7:C2:F2:F3:49:48:D8:E3:7D:B7:7C:44:13:18:21:EF
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer:       /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial:       01A0CEC88AA953A9F0D5012D5FEAC047A67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number:          1A75
Signing time:             Wed 23 Sep 2026 15:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:44 +0000
Files and hashes:         1: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: UCZtrl+1a0feScVh740NyCDILEOgB/4vHeHoE996WJQ=)
                          2: W_aG2Y2dW-GITjfNATjKMf8zsks.asa (hash: ifDIM36/MROrO3cBLEr4Poh0WSs47IBQAw7+5bNLgws=)
                          3: hdfHlp9X2wMs9YL8yldtpHWheV8.roa (hash: Pv6P2CmLu762uZLyxGq9eFFRzEqg1ASmUsEfElOD4ZA=)
                          4: jr55ySGNHSD10H2_OXt21Ktunw0.roa (hash: vxN6j3jPaPKjT/LRmQlMKBnzVqHbofA00iJqGae0vWo=)
                          5: ss_96DZv9-2-Q7bXfrXtpXHRYrw.asa (hash: Cv+l2CfkPUCKb3BjfXISXGPqpWp34OHTN/uHUi8NbC8=)
                          6: vN-QNhPrTsEbYGTx8daKtvPjdzE.roa (hash: mT9H4mkT7WVAi+nSLyy8fxt12jq+PfPah/Hp91TG3TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:8a:a9:53:a9:f0:d5:01:2d:5f:ea:c0:47:a6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
        Validity
            Not Before: Sep 23 15:00:44 2026 GMT
            Not After : Sep 24 15:00:44 2026 GMT
        Subject: CN=bee9d6c0f7c2f2f34948d8e37db77c44131821ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:96:04:5f:dd:10:bd:6f:f6:fc:65:44:6b:
                    42:a4:28:df:6a:95:92:7c:d9:3a:d0:36:ac:d6:3f:
                    94:17:d1:6a:d4:5c:9d:0e:a6:f0:0e:01:af:c7:dc:
                    5e:30:b2:f6:1a:b3:2e:9a:38:6b:72:0e:95:2d:a5:
                    a4:f0:b9:01:cb:54:d4:40:8e:93:ce:47:84:3b:e7:
                    53:11:82:2c:71:8d:a3:9b:aa:c0:84:a4:6c:09:8b:
                    a6:e2:0e:e4:6e:32:53:03:91:6d:6d:ad:81:d9:d4:
                    44:3c:ea:78:89:10:d8:80:7d:60:ce:c6:75:2a:0d:
                    61:7d:8e:3b:e2:4f:25:24:e7:74:b5:c5:cd:fa:ba:
                    04:1b:16:64:f0:b0:fd:91:81:78:86:8e:45:59:8c:
                    00:24:03:69:ce:2e:a7:73:5a:63:0f:56:74:96:cb:
                    34:80:53:5d:4f:21:00:07:e5:fb:59:48:82:f8:a3:
                    2f:5a:5b:2c:ee:23:3b:d7:fb:cd:c9:d1:2c:31:ba:
                    72:c8:c5:3a:6f:6d:20:66:47:72:07:1b:11:0a:2a:
                    39:1e:77:d0:b6:5d:f8:ea:be:59:da:74:da:10:e5:
                    e3:8d:c1:5f:1b:4d:84:ec:5d:9e:e4:b5:cd:09:88:
                    5f:c1:28:36:40:5d:64:34:1a:01:0d:86:17:ec:f6:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E9:D6:C0:F7:C2:F2:F3:49:48:D8:E3:7D:B7:7C:44:13:18:21:EF
            X509v3 Authority Key Identifier:
                keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:65:cb:68:cd:6e:5f:56:ee:7c:fd:b8:a1:90:65:b8:4a:
         a7:0a:4f:c3:79:57:56:18:08:e0:51:1e:08:66:c2:ae:19:72:
         a3:6d:33:fd:07:02:dd:94:ec:b2:7c:b0:cd:f1:d4:4a:3a:6b:
         1c:eb:e6:a8:f0:29:a3:08:fa:ee:f8:20:87:fe:7d:28:5c:e6:
         46:5a:c6:5d:48:44:3a:05:61:7e:e4:da:85:73:97:96:f2:fb:
         a1:ec:4e:c9:93:e0:73:82:af:d5:54:af:26:c4:13:f9:f9:0e:
         49:ed:48:83:36:dd:86:f7:55:df:cf:39:08:60:ce:0c:2f:da:
         64:d2:b2:4f:02:80:bb:c1:32:58:03:9a:b4:6c:fc:88:90:b0:
         ec:08:4b:e4:fc:10:a4:25:30:39:69:59:33:8b:65:0d:fa:c5:
         d5:a1:80:55:2d:e9:52:c2:83:f6:88:9d:bd:53:21:1b:b0:b8:
         43:e3:e6:ac:64:63:74:e4:c4:8d:fd:45:c0:3a:3f:45:4b:5a:
         59:1d:ab:cb:c3:db:22:e7:8a:d8:60:67:61:49:3b:14:7e:93:
         78:e6:ff:aa:76:eb:35:98:22:92:90:bd:95:47:c7:13:1a:34:
         7e:eb:11:69:7f:2e:69:4a:6b:2b:17:9d:d9:a2:c8:7e:4d:12:
         d0:17:36:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyIqpU6nw1QEtX+rAR6Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YWY0ODEzMWVjZDlkY2EzZGVmMmIyZGU3ODhmMTUwNjA2
Mjc3NTUwHhcNMjYwOTIzMTUwMDQ0WhcNMjYwOTI0MTUwMDQ0WjAzMTEwLwYDVQQD
EyhiZWU5ZDZjMGY3YzJmMmYzNDk0OGQ4ZTM3ZGI3N2M0NDEzMTgyMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TWWBF/dEL1v9vxlRGtCpCjfapWS
fNk60Das1j+UF9Fq1FydDqbwDgGvx9xeMLL2GrMumjhrcg6VLaWk8LkBy1TUQI6T
zkeEO+dTEYIscY2jm6rAhKRsCYum4g7kbjJTA5Ftba2B2dREPOp4iRDYgH1gzsZ1
Kg1hfY474k8lJOd0tcXN+roEGxZk8LD9kYF4ho5FWYwAJANpzi6nc1pjD1Z0lss0
gFNdTyEAB+X7WUiC+KMvWlss7iM71/vNydEsMbpyyMU6b20gZkdyBxsRCio5HnfQ
tl346r5Z2nTaEOXjjcFfG02E7F2e5LXNCYhfwSg2QF1kNBoBDYYX7PZ29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7p1sD3wvLzSUjY4323fEQTGCHvMB8GA1UdIwQY
MBaAFDevSBMezZ3KPe8rLeeI8VBgYndVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUt
ZGY2ZjIwZGNiOTRiLzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUtZGY2ZjIwZGNiOTRi
LzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6Fly2jN
bl9W7nz9uKGQZbhKpwpPw3lXVhgI4FEeCGbCrhlyo20z/QcC3ZTssnywzfHUSjpr
HOvmqPApowj67vggh/59KFzmRlrGXUhEOgVhfuTahXOXlvL7oexOyZPgc4Kv1VSv
JsQT+fkOSe1IgzbdhvdV3885CGDODC/aZNKyTwKAu8EyWAOatGz8iJCw7AhL5PwQ
pCUwOWlZM4tlDfrF1aGAVS3pUsKD9oidvVMhG7C4Q+PmrGRjdOTEjf1FwDo/RUta
WR2ry8PbIueK2GBnYUk7FH6TeOb/qnbrNZgikpC9lUfHExo0fusRaX8uaUprKxed
2aLIfk0S0Bc2zA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:10 2026 by rpki-client