Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
File:                     N0APqidmcJP67lLVG3cVZIg_QFI.mft (raw, json)
Hash identifier:          cOu+etVJZuEpY9d4BjgZRu+xMK/095IE1fC8cb5zqds=
Subject key identifier:   30:12:65:91:F2:5F:67:CD:AE:10:4C:FA:92:E6:77:B9:3D:79:91:10
Authority key identifier: 37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
Certificate issuer:       /CN=37400faa27667093faee52d51b771564883f4052
Certificate serial:       01A0DEE16FB76EA7D5947CB37430D69334FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
Manifest number:          DE
Signing time:             Sat 26 Sep 2026 18:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 18:01:51 +0000
Manifest next update:     Sun 27 Sep 2026 18:01:51 +0000
Files and hashes:         1: 9R-i3Wq120RN_k44oqDZ3zt9azA.asa (hash: 3V4HeiStb0wJSnHYXbbtVpXK6uhTtJpV7jDdRPhzS1k=)
                          2: N0APqidmcJP67lLVG3cVZIg_QFI.crl (hash: 6DY7FzSOmpPsqF/YwVvDLCaNQOyk4m/EmfNuOiGG2To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:e1:6f:b7:6e:a7:d5:94:7c:b3:74:30:d6:93:34:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37400faa27667093faee52d51b771564883f4052
        Validity
            Not Before: Sep 26 18:01:51 2026 GMT
            Not After : Sep 27 18:01:51 2026 GMT
        Subject: CN=30126591f25f67cdae104cfa92e677b93d799110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:6f:87:2a:54:a0:8e:d1:05:2d:41:bd:3d:
                    b1:43:da:04:b5:71:a3:86:5e:e2:14:0c:1b:37:78:
                    cb:fc:15:25:12:c3:42:79:00:ca:33:28:42:b3:12:
                    66:05:81:55:53:b3:c4:a8:c7:58:5b:52:e1:cd:19:
                    43:72:fd:10:26:96:2c:3f:82:42:51:7a:04:16:c7:
                    37:9a:c5:09:28:78:b4:b8:20:5b:41:a6:dc:e1:14:
                    f0:91:5d:00:04:66:b7:e7:4a:11:c3:7b:07:a1:d7:
                    8b:8c:88:1a:d2:33:09:7f:0b:a7:11:7d:ed:a2:fe:
                    93:18:6e:7f:9c:14:ea:6e:d3:27:7c:80:6b:9c:28:
                    b7:9d:57:4d:76:8a:d9:60:cf:8d:e5:22:c8:6d:42:
                    ed:ed:b2:e6:c6:a2:b8:ab:94:cd:d7:6f:96:1e:7a:
                    96:24:af:c5:5e:f1:92:da:c3:e0:ca:ee:f9:65:a1:
                    2a:38:8a:82:f5:a0:79:ec:29:80:29:fa:0a:ae:66:
                    8e:70:34:f0:f0:09:4f:57:6e:7f:b0:da:c8:fc:e6:
                    fd:a3:36:24:fa:30:b6:8c:6f:2f:8e:41:48:c5:0f:
                    0c:94:b4:4c:1c:a6:f2:38:8f:02:3e:d3:c4:84:98:
                    bf:79:38:0c:1d:b9:07:4b:26:9b:1a:1d:26:9c:93:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:12:65:91:F2:5F:67:CD:AE:10:4C:FA:92:E6:77:B9:3D:79:91:10
            X509v3 Authority Key Identifier:
                keyid:37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:5c:e4:32:28:c0:06:fa:46:26:6a:82:82:59:e6:d0:bf:
         85:83:67:3c:a4:c6:39:a3:6e:57:96:3c:63:66:e6:64:a7:15:
         b4:9d:ff:88:e3:9d:b7:27:88:67:0e:0c:5e:ec:18:48:cf:70:
         47:0f:f0:29:9e:4d:53:b9:86:e9:3c:cc:41:01:2c:e5:b1:0e:
         b0:1d:65:21:ae:0d:2f:cc:6c:f2:87:d3:6b:1d:10:50:e1:c2:
         6c:c7:97:c6:49:d9:92:19:d4:a9:1c:93:1a:5a:87:db:41:a8:
         9c:c2:8b:d7:7b:4b:0d:e6:bd:dd:54:00:6f:21:13:97:61:08:
         47:5b:d7:da:88:40:ab:7d:7e:c6:8b:93:c8:9d:53:70:7a:4c:
         63:4a:5e:58:05:d4:40:77:0a:76:26:91:8c:d7:f0:77:34:13:
         54:99:3b:16:66:30:6d:e7:9f:30:b6:2d:67:ff:3c:6e:e0:4f:
         15:4f:ad:9c:c5:a8:8c:86:30:05:3a:66:23:33:78:2d:48:8f:
         f5:11:7c:71:c1:50:09:1d:f2:5e:f2:77:a6:c0:f8:fc:6f:2a:
         72:ae:08:91:56:5c:b2:c5:49:60:85:a6:3f:a4:f4:c5:f8:86:
         e2:2c:b2:7c:60:c5:b3:0d:05:74:19:a1:61:73:ff:d0:2c:b2:
         90:37:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:46:26 2026 by rpki-client