Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          XDw5z4oqfpjYA7o2A0oaXItBFgSKD/XGnMELTSGm95Q=
Subject key identifier:   64:62:08:BB:19:B7:4A:44:9E:29:8C:26:0D:3B:95:2D:6E:26:0F:05
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       01A0DCF2D2D26DA18147677913EE96687515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          1129
Signing time:             Sat 26 Sep 2026 09:01:36 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:36 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:36 +0000
Files and hashes:         1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: sxP6G8OPTNq+HEgwzXCWUpZzuDfwdLDmDndzG2/R570=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:d2:d2:6d:a1:81:47:67:79:13:ee:96:68:75:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Sep 26 09:01:36 2026 GMT
            Not After : Sep 27 09:01:36 2026 GMT
        Subject: CN=646208bb19b74a449e298c260d3b952d6e260f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:59:f7:c1:75:65:11:bd:ac:3a:8d:f7:7f:
                    e2:03:93:15:fa:6a:8b:df:38:ea:c1:05:70:09:3b:
                    23:29:82:55:39:9c:e2:c7:2b:bc:2f:1b:f1:6b:15:
                    b4:58:23:43:46:00:27:4e:d3:7e:8e:a0:34:31:68:
                    6d:4d:0c:7e:16:dc:ce:32:96:45:aa:d0:84:45:3c:
                    88:0a:f3:98:6b:75:f6:87:b6:c2:77:2c:9c:85:02:
                    89:9a:f6:9a:bb:e5:61:1c:a4:05:72:23:fc:e8:af:
                    c2:53:8d:1d:70:45:82:72:ce:a4:c7:4f:5d:db:77:
                    eb:e5:06:2e:c5:e1:d9:eb:90:1a:ad:c9:01:21:1e:
                    0c:3c:d8:90:b5:2c:03:ad:39:56:c1:1d:c9:8e:ff:
                    64:18:5f:c7:2c:8f:7c:bf:4c:47:e3:49:58:e6:ea:
                    5c:59:d9:5e:4f:1b:d5:27:02:3b:4c:6c:19:25:07:
                    e2:38:1d:12:50:b3:07:92:50:12:3c:f9:0b:6b:92:
                    b3:02:cd:d8:0a:96:11:b0:e8:5b:51:bb:33:74:7b:
                    38:80:fd:91:ed:e8:52:38:cc:ec:66:3a:6f:8f:ef:
                    f5:ff:72:9d:24:d7:da:cc:b3:c9:38:b5:f9:03:25:
                    95:0e:6c:d6:34:25:26:1d:b5:a7:77:c2:d4:2a:d2:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:08:BB:19:B7:4A:44:9E:29:8C:26:0D:3B:95:2D:6E:26:0F:05
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:b4:79:2d:18:42:2a:47:1d:24:be:1a:e9:7d:0f:d2:4e:
         05:1a:61:7e:6b:0f:5c:69:f7:76:9f:89:4e:ca:f3:16:92:f6:
         78:2a:eb:56:e7:90:72:8d:bd:0b:18:69:a7:cf:78:67:28:f8:
         61:c8:13:b3:1d:37:fc:00:6e:f3:cf:4e:e9:2c:fd:18:c9:ad:
         20:2b:2f:88:b5:47:f2:fe:94:3e:f1:36:19:89:72:cc:cd:bf:
         d7:e5:0f:d6:9d:0c:6f:f4:41:60:01:b5:b8:cb:dd:2a:4a:03:
         9b:5c:a4:e5:11:da:d6:3b:ce:fe:c2:bc:21:28:54:c8:79:29:
         ff:62:6d:8b:ef:dc:10:7d:de:90:14:c3:74:34:a0:bc:1d:16:
         d2:a8:35:78:17:59:47:9f:1a:e5:0f:eb:1b:ff:9b:2f:98:8f:
         e8:fc:aa:f8:b3:69:30:d9:04:42:67:44:42:10:e5:ba:f1:b3:
         97:b8:a6:c3:c4:ac:37:06:89:96:fb:f6:1d:19:9e:2d:76:bd:
         62:e7:8c:f6:0b:eb:ab:a1:9a:49:32:51:27:a7:1f:2b:a1:3a:
         21:71:16:9e:bc:4f:0a:1d:40:38:f3:0f:91:59:c3:2a:0e:41:
         41:28:c2:f5:0b:ee:48:3b:64:cf:3e:59:64:b2:96:a2:c1:0e:
         d4:e9:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:09 2026 by rpki-client