Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          8E938WySEQTzMa8FksJSLsj2mEw8HpNn5DqPX2sKDm0=
Subject key identifier:   1D:92:98:8A:69:05:F5:B5:9F:0A:B5:98:30:23:46:9E:A4:30:88:4B
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       01A114F3600438527C478D96833673A3748E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          1A8B
Signing time:             Wed 07 Oct 2026 06:00:56 +0000
Manifest this update:     Wed 07 Oct 2026 06:00:56 +0000
Manifest next update:     Thu 08 Oct 2026 06:00:56 +0000
Files and hashes:         1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
                          2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: uKPhBnd7lU+y6G7OB8MFZKNmVXKCqaUkB6JC9Y8Tais=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:f3:60:04:38:52:7c:47:8d:96:83:36:73:a3:74:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Oct  7 06:00:56 2026 GMT
            Not After : Oct  8 06:00:56 2026 GMT
        Subject: CN=1d92988a6905f5b59f0ab5983023469ea430884b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:e8:77:99:56:ca:e6:6f:5e:53:1b:88:56:
                    27:92:79:83:d3:76:6f:f4:61:c7:e9:5a:68:de:51:
                    53:9d:25:86:40:d1:93:91:c1:9d:98:65:46:11:26:
                    c3:d7:ab:a4:23:14:bb:cb:95:5f:e5:dc:92:63:04:
                    cf:d8:65:84:1d:e9:94:da:e6:6c:42:8f:c0:86:26:
                    6c:d5:6b:29:7b:37:ae:20:a9:24:35:a4:86:42:99:
                    10:c5:70:90:3f:b8:bf:fe:af:f9:c8:8d:2a:86:f8:
                    3d:bf:7a:96:0d:04:77:b3:2a:53:82:82:a8:dc:23:
                    d1:a7:c0:af:46:46:95:1d:ac:8f:dc:b7:55:04:8a:
                    06:a6:74:ed:63:7f:eb:84:96:9c:3d:df:aa:93:70:
                    89:3f:a8:64:e0:91:20:19:f7:a4:7c:6b:c0:74:69:
                    08:b1:37:78:55:32:6e:f5:13:55:7c:ce:53:1e:46:
                    9a:b8:39:6c:b0:2c:8b:38:a8:a8:ff:5d:32:3c:ab:
                    19:07:62:6a:cd:2d:93:35:1e:d7:2f:24:bf:5d:bd:
                    a8:86:9e:73:a8:51:8c:ba:58:3a:91:64:b1:d5:5c:
                    06:d7:39:85:c2:e8:7a:41:9b:c0:03:e7:4e:91:64:
                    30:bc:6a:e1:da:78:a3:da:8e:a2:a0:0a:91:e2:dd:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:92:98:8A:69:05:F5:B5:9F:0A:B5:98:30:23:46:9E:A4:30:88:4B
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:5d:19:ec:05:4b:72:77:9f:98:33:d4:b8:56:59:80:b9:
         4d:63:fb:4a:4b:5e:ee:2b:dd:af:45:c6:9c:26:a6:e7:73:82:
         e1:12:81:64:c8:b4:82:24:72:21:8c:7d:e7:04:71:ce:8e:ab:
         02:91:96:b5:c2:a0:1b:85:d3:02:22:a8:ea:93:6b:ea:5d:bd:
         88:96:f0:8f:a1:24:c6:d1:50:ee:6d:a2:e8:e2:5f:d6:d5:63:
         22:6a:2c:17:87:14:94:48:c8:7f:39:af:27:e0:50:f5:48:93:
         cf:16:49:b0:3b:9a:43:e7:68:37:fa:5e:2a:a9:2a:82:08:0a:
         92:74:08:15:71:a2:3b:69:3b:ae:07:c5:bb:93:8d:37:e4:4b:
         92:c7:3e:7a:97:4c:c5:82:2b:d5:a9:63:4f:87:ec:cf:2f:39:
         1e:d0:1f:6e:22:4c:df:9e:9a:b0:15:f0:5a:3b:27:e8:c7:a3:
         f5:a8:99:5d:0f:14:98:d0:e0:ce:cb:5a:c2:3b:a7:34:f7:cb:
         29:93:05:9f:b1:72:2a:c4:a8:69:21:de:fa:44:93:9e:00:6b:
         27:bf:f0:c0:aa:5b:30:c5:a7:68:36:a0:08:55:fc:b7:43:e8:
         16:64:7d:a6:31:ab:10:ca:ba:4d:a2:4b:1e:63:2d:9b:0f:24:
         01:89:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:21:08 2026 by rpki-client