Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File:                     NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier:          qIt4UdkHhNn8DIzNzjZT80sP8cRvkr3q3nDqNgHbikM=
Subject key identifier:   BB:A1:ED:72:E5:55:62:28:27:6E:62:35:BD:13:0D:D9:17:B9:54:52
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer:       /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial:       01A12BE910ADCE89FFDB065E46631B8ECDB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number:          0555
Signing time:             Sun 11 Oct 2026 17:00:56 +0000
Manifest this update:     Sun 11 Oct 2026 17:00:56 +0000
Manifest next update:     Mon 12 Oct 2026 17:00:56 +0000
Files and hashes:         1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: 7K+c21C/9hmVIyH466HTHvE2GLNtjju+2Hq6gKuoCEI=)
                          2: XjHiB7b9z_T46VQcb721C3JpJTk.roa (hash: 2SpmBh5QqFPTVBTrNZKDK22YuyIJQ5SsVgb9fBuM8pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:10:ad:ce:89:ff:db:06:5e:46:63:1b:8e:cd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
        Validity
            Not Before: Oct 11 17:00:56 2026 GMT
            Not After : Oct 12 17:00:56 2026 GMT
        Subject: CN=bba1ed72e5556228276e6235bd130dd917b95452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:20:84:ca:e0:0d:21:2b:ca:3b:44:31:36:
                    16:04:1d:c1:66:ee:d3:70:6a:86:d0:e6:c8:86:00:
                    4a:58:49:f3:00:59:a3:f6:48:16:f4:47:89:9f:c9:
                    24:28:e7:90:91:b5:7b:fd:68:26:f5:86:dd:6e:a0:
                    68:2b:8b:c9:c4:f6:48:2e:26:97:42:d6:e8:b4:77:
                    61:34:8b:a7:29:ec:07:e0:97:10:1a:04:c0:f4:55:
                    5e:d2:84:59:f5:a8:3b:ac:29:f7:71:a1:bf:43:72:
                    32:8c:26:9d:f7:8a:a5:8a:61:ed:75:96:c1:e7:fe:
                    d4:c8:4a:2a:89:ac:28:29:fe:36:d3:48:fc:e3:a1:
                    63:c3:01:9d:44:0c:08:57:7a:d4:64:41:21:98:23:
                    61:9f:23:c6:8f:b3:17:29:de:6a:0a:cb:85:3f:27:
                    a2:7f:d3:6f:a1:ee:5e:43:0d:c3:1a:9a:44:ec:ad:
                    60:76:12:6e:30:7c:47:bd:cf:06:68:85:1f:67:6f:
                    32:35:3d:97:1c:f8:79:9e:7a:7e:0f:0c:16:58:80:
                    57:a9:23:d9:0e:7b:9b:67:fa:55:a6:38:78:78:c8:
                    00:14:32:39:4c:d2:12:fe:c7:55:a3:08:8b:aa:6a:
                    81:d7:3b:f9:63:1f:33:93:00:ff:c9:63:e4:2e:35:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A1:ED:72:E5:55:62:28:27:6E:62:35:BD:13:0D:D9:17:B9:54:52
            X509v3 Authority Key Identifier:
                keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:46:15:5d:5b:89:c0:54:b0:09:16:27:b4:f2:56:62:26:
         bb:18:1c:7e:f5:54:bb:11:ab:56:3c:d3:c4:da:01:0b:56:bd:
         e0:1d:f8:dd:47:ed:94:2f:41:ef:92:bf:5b:d5:b6:ad:da:b2:
         ae:ac:60:9f:17:94:90:fa:68:df:62:78:9d:de:ba:4b:46:ed:
         81:e1:df:23:68:ca:3a:d3:78:35:98:c9:fb:7c:20:e9:99:0e:
         59:bd:be:65:cd:ac:0d:1a:ee:7f:5c:1c:df:58:f4:e5:8a:fc:
         10:5a:84:66:ea:0b:38:cc:d0:92:92:7a:e0:93:7e:3a:c3:e4:
         88:84:20:bc:e9:c6:4c:b8:d3:4f:20:3b:fb:10:1e:05:15:81:
         7f:d7:29:fb:c2:1d:fb:4e:ab:5c:c6:6c:46:68:2f:bb:b1:66:
         b0:5e:dc:19:3b:33:34:10:f1:1f:98:98:58:8a:ed:2e:36:0b:
         20:0c:01:be:32:aa:7d:26:02:65:ff:8b:34:db:02:81:09:1d:
         cc:6d:a9:0f:93:de:6b:0c:4c:16:d5:f3:76:35:b2:a0:22:c6:
         9e:39:df:66:b6:66:64:19:e5:51:63:e4:db:a5:a8:f0:26:73:
         02:90:d5:fe:61:ca:19:7e:27:c7:ec:37:fd:97:28:d0:e1:16:
         d8:a0:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:03:23 2026 by rpki-client