Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File:                     N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier:          G7NC6QInBZZtjqcizlHpu0nOF9bvsLf0bvOPWH3/wL8=
Subject key identifier:   50:E9:96:A2:4B:B3:37:2A:D4:AF:7A:7E:09:8D:3D:04:70:F3:C2:EA
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer:       /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial:       01A0F7C4C3F8D946B608E312F53B047C6CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number:          1A88
Signing time:             Thu 01 Oct 2026 14:01:02 +0000
Manifest this update:     Thu 01 Oct 2026 14:01:02 +0000
Manifest next update:     Fri 02 Oct 2026 14:01:02 +0000
Files and hashes:         1: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: mK5RLV8Lr+rwDco9qx4UYqkEBhJA1Vyjnkrs3gu+yvQ=)
                          2: NRr2xnrc8q3h4uFkXN71z-KKA3E.roa (hash: P9SGhc4Yfp9gNj6Hs6UJwSGYWBkDoeITgWd2bUYfBvw=)
                          3: eVDKx-waXJEfn-9dJnyiz-_1kbU.roa (hash: Cnjv1/pdi5B82pagXhY941DhsIB6QNcJ5gqZ85TwLZs=)
                          4: q8LLAWsYj15dDU4uGxTr8uDvbqE.roa (hash: +TDQWUOOqKp5vb78QVJ0zxHTWhdeGR0lnx+TBsmkF48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:c4:c3:f8:d9:46:b6:08:e3:12:f5:3b:04:7c:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
        Validity
            Not Before: Oct  1 14:01:02 2026 GMT
            Not After : Oct  2 14:01:02 2026 GMT
        Subject: CN=50e996a24bb3372ad4af7a7e098d3d0470f3c2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:b6:a2:a5:c6:af:c6:5a:1e:72:f3:cd:28:
                    6a:ce:c8:9d:28:d0:96:78:7a:a0:08:1a:12:9d:45:
                    7b:b9:66:ed:0c:e7:e2:62:8c:82:f6:cf:f3:f1:0c:
                    66:25:9c:e8:c2:3b:ff:0d:82:3b:0d:17:c7:12:69:
                    cf:20:70:62:03:d8:1f:8c:9e:8b:e6:f1:ee:95:ab:
                    93:e3:9e:26:01:c7:32:03:44:6a:dc:b2:62:da:43:
                    74:05:5f:ea:99:0c:a6:3e:01:b4:16:c9:c4:95:1c:
                    ca:b8:04:28:2f:58:b5:1f:f6:9b:aa:2a:bd:67:3d:
                    d4:17:e4:9d:df:bb:b7:30:03:d7:80:74:5b:12:b0:
                    d6:7d:aa:39:30:aa:b1:64:31:5c:42:9d:42:af:6b:
                    55:ce:f1:0a:e0:08:f0:80:05:fd:f4:2d:e9:1a:f2:
                    dd:ac:56:35:ad:77:1a:d6:6e:8b:09:32:84:b9:eb:
                    5d:dc:9e:76:7f:a1:1e:cb:83:d1:e6:1a:75:da:6a:
                    52:df:3f:a9:8b:2d:98:d7:dd:2a:6e:25:bb:80:f5:
                    a9:ac:83:bb:0d:af:04:ee:f4:56:61:dc:67:f2:b1:
                    b8:cd:8e:75:45:3b:6c:e9:0c:d3:cf:85:80:0a:3b:
                    c1:bd:ee:f5:f1:34:37:ff:e8:a9:1e:89:7b:e6:77:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:96:A2:4B:B3:37:2A:D4:AF:7A:7E:09:8D:3D:04:70:F3:C2:EA
            X509v3 Authority Key Identifier:
                keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:91:27:dc:ae:ed:60:c6:b9:80:a2:38:9f:23:7d:18:38:
         81:88:ee:23:06:ab:84:b1:60:d0:75:6a:4f:99:7b:53:2e:f8:
         69:71:cc:3d:e7:c2:7d:9e:a2:19:18:8a:44:72:75:a2:b7:ae:
         72:7a:ec:e1:c6:24:f8:42:46:f8:e9:b8:ef:0b:f3:31:19:d1:
         d5:37:81:29:56:7a:fd:f0:9b:44:65:98:08:1c:10:06:2b:2a:
         16:a0:c2:ce:16:0e:3f:36:6a:f7:c8:30:b6:6c:2d:78:af:71:
         6b:28:d4:15:fe:c2:6b:27:a6:cc:f9:e4:81:53:47:a5:ba:e0:
         50:8d:eb:61:f8:0d:7c:bf:6a:a6:74:bf:6f:e1:7c:0d:f3:19:
         0b:02:44:56:e4:b3:f8:19:34:5a:f9:26:cf:a4:2d:20:6b:38:
         a6:d7:a2:50:38:cf:21:9a:0f:a8:86:03:3f:ee:5c:1d:2d:78:
         52:e4:7f:86:28:2a:80:71:07:5d:58:bb:7d:8f:2a:45:26:44:
         ea:9d:f7:da:5e:e4:66:da:8d:2d:fa:0a:d4:06:40:39:45:69:
         08:1e:f3:80:7c:0f:a5:cd:c6:c7:86:a4:0d:02:8a:51:d5:a6:
         b7:36:2f:5e:f1:a9:4e:73:6a:4c:3e:65:a2:64:4d:0e:bf:3c:
         90:c9:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:46:36 2026 by rpki-client