Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          J2UH6Yl6oGYUZTKzkcUyd2VmZwayL836QQmsQKfVjrg=
Subject key identifier:   5B:A4:4F:84:D0:D5:3D:22:5F:5F:03:8B:F7:2C:AB:7E:23:69:9E:CC
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       01A06FBA73739358E56987C03B066CDCE887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          0CC3
Signing time:             Sat 05 Sep 2026 04:01:25 +0000
Manifest this update:     Sat 05 Sep 2026 04:01:25 +0000
Manifest next update:     Sun 06 Sep 2026 04:01:25 +0000
Files and hashes:         1: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: 4TA6EICeyZG0mN8p0f3euW3M4dy/JdcwljbzBUxEno4=)
                          2: P9oU8l4hJSdNb2cRdixd2FnzViw.roa (hash: CgDo7X7BhUNB3k1XMsCieKRq+wkse0U7IlgpY0Oyr+4=)
                          3: X30d4L9HwoFcQSCZOPGT8fzFSUk.roa (hash: RqJT0G3LIofj7mqU4OcHwIwo8yHwTlkJsfy4x6YteKE=)
                          4: YTl2wkQfDFdQtN71h5K-qw3EztM.roa (hash: z25IOf5DaazAZ0jaAF7FfOCUfonWoXfC3l+JaU4GRgc=)
                          5: fBEXs-dTnmKjIiNwEfni1rhj8-0.roa (hash: tYbmFJdA3qGjmuXRVTxySeGXojO7ROAd1nbv5cqUyhg=)
                          6: p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa (hash: vehfkPlYhyK0yYpwudREOkhweLKXbX+0n9mqb4hiUck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:ba:73:73:93:58:e5:69:87:c0:3b:06:6c:dc:e8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Sep  5 04:01:25 2026 GMT
            Not After : Sep  6 04:01:25 2026 GMT
        Subject: CN=5ba44f84d0d53d225f5f038bf72cab7e23699ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:e1:21:c9:d1:14:0e:bd:b2:5e:55:9f:f7:
                    ff:82:46:de:94:f9:17:b3:a3:13:e2:78:49:90:b8:
                    f9:0e:c8:5b:93:5c:1c:4b:1a:dc:f1:69:f0:36:81:
                    37:ca:ee:04:cd:1b:24:56:44:84:81:7b:7f:f1:9a:
                    79:78:de:c4:2c:b3:76:b8:60:9d:92:61:51:0a:23:
                    f4:6c:1d:c9:e9:14:db:89:0e:ef:65:2e:bf:35:56:
                    da:4e:82:d6:7d:ee:7a:89:96:e9:dc:09:57:9e:6a:
                    24:67:42:0a:8f:9d:20:11:63:b5:77:c3:c5:04:7a:
                    f2:0a:29:1c:25:be:f4:9a:9f:8b:67:74:b7:3c:41:
                    0e:42:24:f4:2a:9a:3f:95:3e:88:ca:ee:d2:c6:31:
                    c6:97:07:42:40:5a:f9:11:35:8b:0c:44:b9:47:e5:
                    1e:d0:a6:b1:ee:a7:6b:00:1a:79:2b:c7:dd:2f:60:
                    1f:0a:d0:dd:7a:7a:07:48:26:7a:54:b6:2e:8c:72:
                    cc:38:5b:dd:15:62:64:6f:7c:a5:cc:3a:6f:ee:df:
                    e0:96:53:63:87:ca:15:b1:90:b9:0a:fe:3a:fd:22:
                    e0:ae:7d:3f:a4:5a:5c:30:c0:f3:bc:82:7a:b2:1b:
                    3f:3d:61:61:c8:14:ff:e2:6e:07:8d:c6:a5:ce:7e:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:4F:84:D0:D5:3D:22:5F:5F:03:8B:F7:2C:AB:7E:23:69:9E:CC
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:02:4e:7f:7b:9e:e8:e8:b6:f4:c7:7a:db:ad:b9:2e:7c:
         8f:27:c9:90:27:c1:b4:7d:60:90:6a:77:05:94:ed:1e:d5:b2:
         9e:01:1c:37:04:b9:9b:13:e4:34:e6:04:1e:46:2e:99:b7:78:
         03:db:c3:01:db:a3:4e:53:96:e9:0e:b5:c3:ff:43:13:9a:cf:
         db:e2:d0:fe:55:f2:3d:69:43:74:c1:21:c2:46:75:77:2d:4d:
         03:1b:70:15:0a:fa:7d:d4:20:30:36:2f:c0:26:95:8d:0d:b5:
         07:3f:b5:b8:b5:ac:e3:ae:b0:b7:ab:89:71:1d:6c:61:6e:0a:
         1a:84:75:1e:92:b2:b9:66:87:b2:9d:22:47:ed:d8:82:b8:28:
         b1:e9:c6:e8:32:8e:26:15:66:e5:dd:80:28:4f:15:c1:c4:8b:
         3a:00:fd:c6:9e:d2:be:df:2f:04:d0:47:43:ca:b5:6c:ba:4a:
         3d:ee:8e:4c:ad:90:f6:ea:ae:52:45:be:22:2f:24:2e:a0:b2:
         da:48:dc:6d:1a:98:01:4b:86:d3:a3:89:78:41:be:b3:3a:a6:
         50:92:56:08:ed:3e:83:d2:d8:fa:dd:02:15:03:a1:d3:2d:c2:
         44:be:85:db:3d:a5:4b:80:00:32:1e:1e:84:4d:9c:02:96:6e:
         2d:81:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:01:04 2026 by rpki-client