Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          3nOPZvI29MAcTy74CRvYM92pGq1ZPHnspeRDr6dCJWo=
Subject key identifier:   D1:E9:14:DB:E9:57:C9:95:C1:B6:06:CE:E0:70:7C:A3:38:71:45:58
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       01A17C608EC27B9FCCA1BACD6F804CFEF5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          1B23
Signing time:             Tue 27 Oct 2026 08:01:05 +0000
Manifest this update:     Tue 27 Oct 2026 08:01:05 +0000
Manifest next update:     Wed 28 Oct 2026 08:01:05 +0000
Files and hashes:         1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
                          2: 61jbpJA5HVGEOT8tC1fGORk3MnA.roa (hash: 9IKMLLOw3MqOJAEUO9knXWz+1yaQquLBRUG/eUeACOk=)
                          3: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
                          4: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
                          5: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: 1dGHjA/q4HlzW4XT+y7eE0vbqmBqSONRApxwFN/WEf0=)
                          6: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
                          7: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
                          8: dFJgElWQXUaN6oRf27W9_w-Hkzk.roa (hash: ZOJpqzHbbh31q4bCeBvyBD6UKLdT9LpjJ4Y0W2zhvAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:8e:c2:7b:9f:cc:a1:ba:cd:6f:80:4c:fe:f5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Oct 27 08:01:05 2026 GMT
            Not After : Oct 28 08:01:05 2026 GMT
        Subject: CN=d1e914dbe957c995c1b606cee0707ca338714558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:1f:88:03:27:ef:cd:05:f6:a3:52:e4:d9:
                    4c:6b:8b:cb:99:d0:0f:98:cb:c1:33:54:3a:1c:2f:
                    ae:f8:07:b0:3b:76:13:55:d4:6f:e4:65:f3:9f:0d:
                    78:62:56:7d:09:41:57:69:34:59:5e:85:5e:c5:cd:
                    d0:36:ee:26:c3:7e:2c:73:d5:4e:f6:a8:e2:05:17:
                    e5:c0:ca:0e:fc:2c:31:f7:58:12:30:64:79:49:cb:
                    cf:fe:bc:87:ef:a0:39:43:ed:96:ae:8b:b8:2f:88:
                    f0:49:5b:3d:4c:dc:8c:ae:6c:f3:a1:ed:68:66:00:
                    0f:46:d7:e5:0c:4d:96:56:67:77:a3:83:5a:39:25:
                    c5:63:ff:2e:a3:57:47:62:f1:a5:e1:3e:0c:64:e9:
                    01:82:3f:19:6a:88:66:a4:89:1d:8f:58:ec:46:50:
                    ba:88:e9:05:dc:05:ef:53:3f:6e:6e:df:09:54:73:
                    09:28:7e:72:48:94:23:85:d4:23:51:fe:bf:58:3c:
                    50:af:c5:b8:2a:6d:0e:b8:71:10:31:64:6f:a1:2a:
                    f2:6d:33:20:83:af:76:93:f2:69:12:aa:89:f8:a4:
                    10:5c:1e:58:13:16:8e:80:9c:31:12:b0:ff:ab:5f:
                    ab:df:84:ad:48:2f:e6:ed:8b:0a:30:1c:61:77:c9:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E9:14:DB:E9:57:C9:95:C1:B6:06:CE:E0:70:7C:A3:38:71:45:58
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:3d:89:7a:a8:5d:fb:fd:cc:bd:78:12:94:f2:b6:73:bd:
         fb:d6:7f:af:53:6c:38:0a:e8:d5:03:f1:07:02:83:01:ad:b1:
         56:40:aa:95:6d:fb:da:e2:62:bb:b3:9b:2c:8c:c6:67:e4:58:
         02:f5:6f:d1:04:07:be:7d:ca:90:f7:62:d7:60:7b:ec:b6:bb:
         f5:ea:f1:06:49:6f:e2:f5:94:60:58:c2:78:47:8c:1d:d5:df:
         80:11:ea:cb:65:17:44:92:cf:c5:31:7c:0b:8f:06:61:9e:87:
         b3:57:ca:6e:08:a6:d0:41:c6:f4:82:d9:88:9e:a3:bb:06:0d:
         9b:d1:04:b7:cc:bb:29:dd:c2:3d:fd:84:63:68:30:3f:24:4b:
         69:ac:31:79:f0:b7:1b:03:b6:06:be:70:2d:70:e2:ee:f4:27:
         4a:8c:11:9b:cb:4f:79:b1:79:dd:ba:c0:b2:77:4c:bd:ad:4b:
         40:e8:84:91:0d:66:69:33:b3:79:10:86:e6:56:38:07:07:22:
         ef:a9:bb:55:6a:c3:8f:35:30:29:24:89:8b:f2:35:2f:f2:f6:
         c9:0f:17:f9:e9:6e:cf:57:88:70:a9:f2:f1:6e:38:71:20:23:
         67:5d:c5:eb:48:d5:e3:79:d7:07:f0:67:17:05:c6:08:df:8a:
         36:8a:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:25:53 2026 by rpki-client