Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File:                     N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier:          TEFYD7ZsHU/BEGFOC9I+iV/uFGY98P9zdAxP5GisXd8=
Subject key identifier:   B2:4B:5B:01:97:CA:85:0D:F5:DA:B6:62:75:B5:9B:A7:C1:BE:10:5D
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       01A18DF8E23BC31C141A51BFBC38AB5F7878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number:          1AD7
Signing time:             Fri 30 Oct 2026 18:01:00 +0000
Manifest this update:     Fri 30 Oct 2026 18:01:00 +0000
Manifest next update:     Sat 31 Oct 2026 18:01:00 +0000
Files and hashes:         1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
                          2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: BJgeuuN4tYYxA1QbJ66g48IHmf+f+Udifisvv6Bh1Nc=)
                          3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
                          4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
                          5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
                          6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
                          7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
                          8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:f8:e2:3b:c3:1c:14:1a:51:bf:bc:38:ab:5f:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Oct 30 18:01:00 2026 GMT
            Not After : Oct 31 18:01:00 2026 GMT
        Subject: CN=b24b5b0197ca850df5dab66275b59ba7c1be105d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:4b:b2:1d:7e:bd:df:e3:c4:65:22:87:73:
                    e4:78:f6:71:e9:1a:82:dc:2b:67:46:15:66:40:99:
                    d4:1c:fe:10:20:97:71:39:21:c0:a2:65:e0:e4:61:
                    c9:0d:81:d4:2a:51:40:4c:1b:59:03:66:be:1c:e8:
                    97:60:e4:18:1d:72:d1:d7:0f:b3:3b:da:49:aa:01:
                    99:df:96:b5:9d:04:53:fe:b1:02:59:84:01:bf:40:
                    5d:28:6b:a5:e7:ae:d5:70:d5:27:db:1f:cb:5d:47:
                    23:6a:2e:64:9f:04:3c:c7:5d:98:fb:8e:dc:e4:52:
                    ba:83:f6:9e:3a:80:f3:8f:b7:4f:96:6b:7e:1c:2c:
                    ad:86:63:c6:1d:9d:5e:a7:c5:4e:59:0c:98:e8:c2:
                    5d:cf:5a:8d:18:b8:5d:97:9b:87:ff:43:6f:d4:b4:
                    1b:6e:96:21:c4:2b:f6:0a:6c:c2:1f:36:a5:bf:72:
                    2b:e0:70:81:3e:1e:c8:df:27:07:bf:91:76:37:c7:
                    e1:92:a9:1c:b5:a7:7b:d6:1e:a9:fa:62:09:ad:89:
                    84:0a:d5:e7:aa:52:63:a3:ed:c9:38:fc:ed:37:0a:
                    0d:88:b8:6a:92:1c:d6:48:41:d8:18:b4:b4:22:3e:
                    ca:26:ee:cd:2d:71:1e:e5:3b:da:0a:fc:03:88:ee:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:5B:01:97:CA:85:0D:F5:DA:B6:62:75:B5:9B:A7:C1:BE:10:5D
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:a2:42:2e:77:ed:4e:cf:c1:88:90:24:30:ff:c5:a5:b2:
         16:ad:8f:14:f4:32:e7:9d:9e:19:f7:11:3b:08:74:0e:97:cc:
         d7:71:11:a5:fd:fa:30:d8:e8:e9:02:da:3a:0f:63:9d:71:9b:
         1a:03:c4:2f:7a:b9:07:3f:9b:95:26:58:f1:fe:fc:12:de:30:
         04:3d:3d:d4:2d:99:0d:33:91:86:88:85:26:d6:99:9a:00:40:
         db:9c:15:7a:aa:7f:cc:10:ed:78:e2:f7:92:a0:6c:04:70:0d:
         2a:dd:59:1a:51:11:9c:f6:06:34:59:72:1f:dd:bd:c3:b2:c3:
         f5:7d:37:a6:c8:de:f9:f9:39:94:a4:d2:a3:ca:69:b9:aa:e3:
         6a:98:1d:64:81:ef:75:34:e3:6b:87:7c:eb:65:61:1d:73:73:
         45:87:ba:e8:75:29:93:ca:10:70:62:fb:30:72:23:c6:9f:7a:
         84:0d:6c:71:1d:da:80:9f:73:08:9e:19:23:f1:46:2c:ea:db:
         c7:be:1f:32:8c:f4:de:7b:c5:4c:c9:c2:68:77:7f:65:ad:10:
         cd:c9:e4:95:5d:d2:0c:00:f1:ff:a8:b2:dd:ed:0e:fd:31:f6:
         05:f5:10:29:cf:e2:98:7c:41:c2:a4:38:48:54:2d:72:12:c3:
         b9:2a:26:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGN+OI7wxwUGlG/vDirX3h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjYxMDMwMTgwMTAwWhcNMjYxMDMxMTgwMTAwWjAzMTEwLwYDVQQD
EyhiMjRiNWIwMTk3Y2E4NTBkZjVkYWI2NjI3NWI1OWJhN2MxYmUxMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbBLsh1+vd/jxGUih3PkePZx6RqC
3CtnRhVmQJnUHP4QIJdxOSHAomXg5GHJDYHUKlFATBtZA2a+HOiXYOQYHXLR1w+z
O9pJqgGZ35a1nQRT/rECWYQBv0BdKGul567VcNUn2x/LXUcjai5knwQ8x12Y+47c
5FK6g/aeOoDzj7dPlmt+HCythmPGHZ1ep8VOWQyY6MJdz1qNGLhdl5uH/0Nv1LQb
bpYhxCv2CmzCHzalv3Ir4HCBPh7I3ycHv5F2N8fhkqkctad71h6p+mIJrYmECtXn
qlJjo+3JOPztNwoNiLhqkhzWSEHYGLS0Ij7KJu7NLXEe5TvaCvwDiO4unwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJLWwGXyoUN9dq2YnW1m6fBvhBdMB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozGiQi53
7U7PwYiQJDD/xaWyFq2PFPQy552eGfcROwh0DpfM13ERpf36MNjo6QLaOg9jnXGb
GgPEL3q5Bz+blSZY8f78Et4wBD091C2ZDTORhoiFJtaZmgBA25wVeqp/zBDteOL3
kqBsBHANKt1ZGlERnPYGNFlyH929w7LD9X03psje+fk5lKTSo8ppuarjapgdZIHv
dTTja4d862VhHXNzRYe66HUpk8oQcGL7MHIjxp96hA1scR3agJ9zCJ4ZI/FGLOrb
x74fMoz03nvFTMnCaHd/Za0QzcnklV3SDADx/6iy3e0O/TH2BfUQKc/imHxBwqQ4
SFQtchLDuSomKQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:47:37 2026 by rpki-client