Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File:                     N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier:          tfCucS/uX9CaRlw8Y/PyB9cSoykStmmwKDyVpeDSYK4=
Subject key identifier:   F8:8A:D0:00:CD:4E:02:26:43:DF:67:19:A6:F8:12:84:52:9C:B7:08
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer:       /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial:       01A0D8044A3A136A985C3A5369A8EE15152C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number:          1A66
Signing time:             Fri 25 Sep 2026 10:02:34 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:34 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:34 +0000
Files and hashes:         1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: 5gZyagUFBoPrw9Dc7kGRaFp01NtVlrwtoKyqTg1msIM=)
                          2: Xu_M6qzcK7mfWZCHmn6JKUUrAt0.roa (hash: 3PFCQYjH23ubKta8UeYrfDkFec6WuV94yV14I25LNoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:4a:3a:13:6a:98:5c:3a:53:69:a8:ee:15:15:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
        Validity
            Not Before: Sep 25 10:02:34 2026 GMT
            Not After : Sep 26 10:02:34 2026 GMT
        Subject: CN=f88ad000cd4e022643df6719a6f81284529cb708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:78:88:31:30:51:c9:74:e3:bc:2c:43:56:
                    ca:58:06:2f:f8:70:57:65:e0:92:47:6d:ab:85:3b:
                    37:59:51:72:77:0a:9b:72:b6:42:34:dd:c8:ba:46:
                    3f:69:07:a2:d0:7f:8e:83:32:87:fd:69:a2:81:7d:
                    f8:90:4d:92:02:da:37:4d:77:84:a8:19:46:bd:ee:
                    7a:4e:16:ab:db:a9:9a:93:83:4e:2b:5f:c6:c9:8b:
                    91:f2:4e:dc:79:9d:f9:7e:c1:3f:5f:65:66:8d:6a:
                    cd:81:43:22:50:2d:5f:18:8c:15:01:8e:f1:5f:b6:
                    ad:81:79:12:2f:5b:dc:5e:ce:2c:f0:d4:6f:1d:3a:
                    54:51:01:97:56:08:81:66:74:60:cf:5a:26:ef:01:
                    a3:01:a9:fd:06:07:48:dd:07:ce:83:5e:68:1a:45:
                    59:6d:e5:e2:52:11:05:22:90:64:de:f4:8d:d0:38:
                    86:63:6b:a2:a2:c3:7c:9b:dc:0a:30:1b:72:af:9c:
                    6f:94:54:c3:a7:dd:7e:5b:1a:a0:54:46:e1:3c:7c:
                    83:ed:87:81:2d:b9:a3:67:3b:0a:6a:09:c4:44:4f:
                    92:d9:c6:c4:ab:6c:aa:5d:9d:af:6b:8b:4a:af:a2:
                    26:06:89:7c:5c:ab:95:d5:a3:64:21:f1:3c:c3:a3:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:D0:00:CD:4E:02:26:43:DF:67:19:A6:F8:12:84:52:9C:B7:08
            X509v3 Authority Key Identifier:
                keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:99:e6:8a:38:da:48:bb:bc:f0:da:0d:bb:cb:81:e0:31:26:
         9c:15:ee:d2:c1:b9:d9:6a:74:ff:26:d3:b7:89:d3:29:c4:c1:
         ab:0f:7b:9a:aa:5f:23:42:ad:85:e2:18:a4:ea:1b:53:18:a4:
         90:ec:95:e6:3b:1e:82:78:6b:e6:8e:40:00:4b:ea:ea:53:44:
         db:f9:ab:dd:77:4b:b6:24:32:ce:22:d5:c2:bf:2a:ae:e6:73:
         6c:d8:d8:08:fd:a1:9d:5b:c5:11:24:0e:4e:1c:e3:c1:98:78:
         b7:d9:03:e2:87:f5:70:74:71:9c:d0:db:7b:b6:69:95:98:33:
         c9:85:06:f9:a2:3b:00:e5:6d:98:96:62:4e:0b:46:bf:c9:72:
         2d:57:0a:75:20:5b:3f:5d:31:fe:f4:f8:09:91:b6:3a:26:4b:
         a4:62:f4:ee:f9:a6:8c:54:fe:64:76:4f:5c:42:3f:05:86:54:
         68:bb:02:94:86:fd:d0:76:70:1d:a7:2c:48:5e:9a:b0:fc:8b:
         3f:c3:8f:0e:4d:92:c7:e9:33:de:41:75:82:ef:41:f2:13:82:
         02:36:d2:fe:2b:f8:1b:ce:0f:10:71:97:7c:7f:18:dc:13:b5:
         07:2a:57:56:5e:6d:cb:7b:cc:53:da:64:57:c8:d3:c9:c9:92:
         6b:7a:7e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBEo6E2qYXDpTaajuFRUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDk5NzU0MzlmZTRmZmE5MzEwMjYyYWNiZGQ1ZjcyM2Nl
ZTIyMjMwHhcNMjYwOTI1MTAwMjM0WhcNMjYwOTI2MTAwMjM0WjAzMTEwLwYDVQQD
EyhmODhhZDAwMGNkNGUwMjI2NDNkZjY3MTlhNmY4MTI4NDUyOWNiNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xt4iDEwUcl047wsQ1bKWAYv+HBX
ZeCSR22rhTs3WVFydwqbcrZCNN3IukY/aQei0H+OgzKH/WmigX34kE2SAto3TXeE
qBlGve56Thar26mak4NOK1/GyYuR8k7ceZ35fsE/X2VmjWrNgUMiUC1fGIwVAY7x
X7atgXkSL1vcXs4s8NRvHTpUUQGXVgiBZnRgz1om7wGjAan9BgdI3QfOg15oGkVZ
beXiUhEFIpBk3vSN0DiGY2uiosN8m9wKMBtyr5xvlFTDp91+WxqgVEbhPHyD7YeB
LbmjZzsKagnERE+S2cbEq2yqXZ2va4tKr6ImBol8XKuV1aNkIfE8w6OZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiK0ADNTgImQ99nGab4EoRSnLcIMB8GA1UdIwQY
MBaAFDdJl1Q5/k/6kxAmKsvdX3I87iIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEt
YmUwMGE2NTEwM2FkLzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEtYmUwMGE2NTEwM2Fk
LzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpnmijja
SLu88NoNu8uB4DEmnBXu0sG52Wp0/ybTt4nTKcTBqw97mqpfI0KtheIYpOobUxik
kOyV5jsegnhr5o5AAEvq6lNE2/mr3XdLtiQyziLVwr8qruZzbNjYCP2hnVvFESQO
ThzjwZh4t9kD4of1cHRxnNDbe7ZplZgzyYUG+aI7AOVtmJZiTgtGv8lyLVcKdSBb
P10x/vT4CZG2OiZLpGL07vmmjFT+ZHZPXEI/BYZUaLsClIb90HZwHacsSF6asPyL
P8OPDk2Sx+kz3kF1gu9B8hOCAjbS/iv4G84PEHGXfH8Y3BO1BypXVl5ty3vMU9pk
V8jTycmSa3p+Zw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:40:10 2026 by rpki-client