Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          8uXl83bqKr7pkSmGFGUc8xnnEEvVwnLJz3hSUvwm3jI=
Subject key identifier:   F4:D2:0F:8E:7A:EC:20:23:A4:DC:59:D6:03:47:4A:E8:EB:5A:99:47
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       01A03D83C357C7F0C274D5AA99301BAAC310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          1A7C
Signing time:             Wed 26 Aug 2026 10:00:40 +0000
Manifest this update:     Wed 26 Aug 2026 10:00:40 +0000
Manifest next update:     Thu 27 Aug 2026 10:00:40 +0000
Files and hashes:         1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
                          2: 1Ikbuy_DUz_8gty98LDVB8xGq50.roa (hash: zrTNzGLxlgMZow7vDwHgzsumwcJBM47dodboiin2uMo=)
                          3: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
                          4: CMrPIdkb44qxQh52DtLH2me7jkw.roa (hash: itZcbLbqeJ3hQd52B6qbtQV5jsaCYlBbwqCtZuToeLQ=)
                          5: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
                          6: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: JOEs0wSXbNk62Db4vQtOc8yxKLY0xSbItZMxkYTfLMg=)
                          7: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
                          8: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:83:c3:57:c7:f0:c2:74:d5:aa:99:30:1b:aa:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Aug 26 10:00:40 2026 GMT
            Not After : Aug 27 10:00:40 2026 GMT
        Subject: CN=f4d20f8e7aec2023a4dc59d603474ae8eb5a9947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:57:1a:8b:7f:97:a2:87:9e:d9:f5:9e:ab:
                    7a:22:e8:46:cb:82:0e:24:d8:a3:5e:39:c6:9a:69:
                    b6:d0:4d:ac:a2:b2:15:1c:b1:22:84:3a:e3:d6:f8:
                    68:29:00:c3:b5:cd:60:bb:97:95:d5:49:43:c4:9c:
                    d8:bd:0a:07:61:d6:4d:9f:95:73:ca:39:70:2c:28:
                    ad:7c:f6:3c:fa:7d:41:06:5d:b9:d7:a1:07:39:8f:
                    43:6f:4b:c4:eb:b1:f5:7f:fc:2a:b7:4e:e9:38:e9:
                    69:1f:13:41:8a:82:3a:7b:43:10:4d:cb:d5:68:e0:
                    f1:77:e2:bb:aa:25:d1:0c:72:cc:3a:ca:4c:78:16:
                    9f:81:d9:39:b7:eb:b0:3e:71:dd:6b:8d:48:1a:fe:
                    d1:17:b3:18:ab:83:64:64:4c:ae:71:69:e1:ca:89:
                    e0:38:e1:e5:85:70:db:95:ae:bf:e8:e7:b9:1e:e7:
                    d4:c0:85:f6:ce:9e:d8:60:8a:f0:5f:cd:74:e0:fb:
                    ca:1c:9d:77:95:6d:d2:45:a1:90:15:a9:4f:88:cb:
                    6c:e4:bb:9d:d4:09:03:ca:1f:1f:7d:53:a6:33:f2:
                    72:d0:8d:a7:57:aa:8e:5c:fa:be:ba:3c:dd:22:5f:
                    2a:c7:e4:f9:e2:a8:d0:55:63:3c:87:ea:9f:0b:a8:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:0F:8E:7A:EC:20:23:A4:DC:59:D6:03:47:4A:E8:EB:5A:99:47
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:be:ee:0a:07:af:1a:5f:35:f5:8d:c1:04:41:da:bf:48:ed:
         66:91:b5:bd:31:f1:54:9e:f3:dc:56:32:c8:b6:81:0c:90:81:
         34:e1:e4:bb:21:c1:65:45:ce:ae:25:9b:79:3a:9b:15:04:d9:
         d6:25:5b:e2:be:0d:c0:6b:b2:7a:ab:b5:ce:d6:0d:db:85:17:
         33:78:cc:15:c0:9e:e9:13:b3:05:cd:14:e8:0a:80:c5:bd:a3:
         9f:d4:6b:99:b0:60:bb:e2:85:02:0d:48:ba:95:ec:4b:1b:9e:
         03:11:93:11:34:91:97:ff:9f:42:f3:b2:e4:f8:96:a7:21:92:
         b5:43:f9:b5:d0:d1:ae:67:46:c9:1e:92:19:e4:19:fd:e2:cc:
         4f:6f:01:11:0c:59:92:49:c3:62:38:6a:c8:0d:2e:2e:27:21:
         5a:c8:9d:be:c6:6f:87:c2:09:de:16:2f:ac:f5:ee:47:ea:bf:
         55:aa:5c:4e:c4:c9:db:5b:23:00:0b:ec:19:0d:76:bd:b3:87:
         73:ae:79:27:f7:49:ff:4b:24:d2:dd:74:56:1c:53:a5:6c:84:
         4b:35:66:2b:84:f3:49:19:23:45:3f:2f:1a:48:35:56:1e:1a:
         80:2f:02:21:77:df:3a:72:c6:e9:38:dd:10:93:07:47:8c:a4:
         23:67:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:24:20 2026 by rpki-client