Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          y3aK9VLg2Xw8xesRG3QnlnOsKWtBCfGFZw2t24P7mNI=
Subject key identifier:   8C:A3:07:94:E3:6E:95:A1:CB:24:C3:AF:CE:A4:4F:0B:EE:F8:51:F3
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       01A1DF832ED1985C54325E0D26491B93AB52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          080D
Signing time:             Sun 15 Nov 2026 14:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:18 +0000
Files and hashes:         1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
                          2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: wk+QMeKM8YRcCdmSCqDzufjeNNyRAzsjYL9dVttHU24=)
                          3: gozbr4UgB-08kovMPY3uAOal00w.roa (hash: umdkp9hNx8UQiddB43dZmA/rvSexrPQ2jrWdEUV0vYw=)
                          4: kUsgoDKvC6Zrkrt39ZK5TGpttts.roa (hash: R6EIMwTV2AxtRVnvEeq/MoHnOuREjc1rKOmJmpjIgRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:2e:d1:98:5c:54:32:5e:0d:26:49:1b:93:ab:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Nov 15 14:01:18 2026 GMT
            Not After : Nov 16 14:01:18 2026 GMT
        Subject: CN=8ca30794e36e95a1cb24c3afcea44f0beef851f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:b8:97:68:03:c3:86:08:01:5c:48:28:c4:
                    10:c9:b4:c4:1e:06:30:41:7c:26:20:45:5b:da:0b:
                    be:0e:0c:35:4c:20:24:d2:d0:a5:81:78:f0:a5:1c:
                    a8:fa:1c:92:51:5e:df:04:bd:05:98:47:65:b0:e6:
                    ee:4c:b8:3b:c2:29:30:a3:8f:6b:e1:8e:0f:ba:a7:
                    e0:78:2c:2b:13:1f:5e:43:02:ad:8e:0a:a0:5b:55:
                    46:d1:ac:e5:e3:22:4c:22:a7:75:92:30:27:04:64:
                    82:0b:2a:03:dd:7b:6f:74:d9:57:89:c0:f5:ca:9e:
                    22:d7:9f:0b:71:2e:9e:3f:4d:7a:67:ab:c9:ff:f1:
                    8a:71:54:24:13:1d:f1:a5:ea:58:79:40:bc:7d:65:
                    b9:d8:d3:ee:73:3c:53:3a:82:dd:75:fc:37:7e:e7:
                    58:03:ae:e8:1d:5c:83:47:1a:54:89:81:ce:59:f0:
                    13:f4:8e:17:43:a1:91:8d:bf:4b:ff:55:34:5d:8e:
                    f5:2b:87:36:0c:9c:7c:41:a7:f9:91:0f:08:e5:43:
                    91:3a:82:e2:cc:67:3e:d6:1d:7e:0f:97:d5:1b:82:
                    21:3a:23:6d:eb:1b:ae:61:68:26:ab:d3:53:99:de:
                    25:27:e7:34:7e:fe:b7:32:17:a8:97:d5:c5:8a:f1:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:07:94:E3:6E:95:A1:CB:24:C3:AF:CE:A4:4F:0B:EE:F8:51:F3
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:17:a8:35:71:2a:f7:8c:00:90:a0:02:17:95:94:6b:a1:
         09:52:55:c4:31:60:b2:cd:37:e4:ef:7f:6e:03:15:05:1d:aa:
         d6:4b:63:7c:33:35:12:96:16:1e:7d:62:e8:c2:29:8a:88:4b:
         b9:c2:78:92:3e:81:80:cd:b7:f9:47:50:dc:ff:9c:fe:4b:12:
         d4:1d:42:a0:83:90:a5:be:d9:e0:b7:b5:e4:3a:07:71:c9:e7:
         81:25:52:de:b4:4c:4e:1a:20:f0:70:a8:a8:40:92:57:e6:51:
         2d:d7:d7:6c:67:f9:73:0a:e1:3e:aa:c3:87:e1:a0:cc:12:c1:
         02:f9:1f:11:a0:64:73:cb:f8:9d:73:88:2d:23:fd:67:28:47:
         d3:be:97:18:b8:24:4f:56:80:8b:93:22:49:c5:58:40:d2:2b:
         11:57:37:24:5b:9a:a5:2a:91:79:d7:43:04:a5:64:d5:6b:d3:
         8a:1d:b6:f7:b4:4f:44:2c:ac:e9:0a:25:cb:54:8d:6c:98:54:
         c2:04:fc:a8:11:e4:f6:49:36:84:8c:0d:8f:f6:64:26:ca:b1:
         89:df:b8:e8:a1:2d:9f:37:f8:4d:e4:58:f3:cd:2d:40:41:5b:
         2a:53:07:0d:82:a7:f7:b7:b3:f6:1f:fa:34:eb:08:45:df:13:
         4f:72:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:32 2026 by rpki-client