Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
File:                     ngYAPFcVh0_asOMVcigO-OTkeYw.mft (raw, json)
Hash identifier:          AKrt5d4Le4jDNDfxrweEMSJSGV26dePD5GBAwOkrTas=
Subject key identifier:   BE:6D:26:D0:55:F9:2F:EF:C9:99:15:58:C0:D0:BC:64:31:C4:EC:AF
Authority key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Certificate issuer:       /CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Certificate serial:       01A0F90EAB7620EE4179ED80D01490C3776A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
Manifest number:          52
Signing time:             Thu 01 Oct 2026 20:01:23 +0000
Manifest this update:     Thu 01 Oct 2026 20:01:23 +0000
Manifest next update:     Fri 02 Oct 2026 20:01:23 +0000
Files and hashes:         1: H4A0XaCoNz3xdxbu_BQvhonTrLg.asa (hash: SUZN+kpPo9X4uP4hRZXEB9Klwbg5G07yYkGjoku+ID4=)
                          2: U40woe4t5L3G0u-LTfcj5cxfaU8.roa (hash: gDcGs3cvNtDcrQmnu+d2LGcZqFkPSX7n6H8BVd1x9QM=)
                          3: ccEx9SOUx4m-tHjhTok2nkxXIt8.roa (hash: hHnnV4OUqt3+HNEP/62ZeDafUCLIXf+qqG6fUJLUQ/o=)
                          4: ngYAPFcVh0_asOMVcigO-OTkeYw.crl (hash: EE3hSqX4KJzjm0M3zcNsn6Qe7IzfxsnYfJ9xcSrnYJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:0e:ab:76:20:ee:41:79:ed:80:d0:14:90:c3:77:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
        Validity
            Not Before: Oct  1 20:01:23 2026 GMT
            Not After : Oct  2 20:01:23 2026 GMT
        Subject: CN=be6d26d055f92fefc9991558c0d0bc6431c4ecaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:e2:4b:b8:cd:63:58:4d:7a:d3:85:72:42:
                    5b:a5:5c:a1:ce:b9:db:66:8f:9d:09:c4:a5:5c:9b:
                    fe:2f:8e:f3:72:5d:22:81:85:e6:47:b6:e8:77:c2:
                    1e:0c:b6:1a:a3:a4:7e:0d:59:8d:d9:f2:97:6a:bf:
                    ce:0a:e9:cb:69:33:23:aa:bd:80:c4:8a:60:26:b4:
                    92:a6:81:f7:07:8b:fa:36:b8:a1:29:dd:b6:2e:4d:
                    49:6f:08:48:fe:20:72:bf:48:26:25:ab:9a:88:2d:
                    23:8b:f8:4b:08:c3:7c:52:06:00:d7:e7:b8:ea:27:
                    24:b7:ee:87:4a:fc:0a:04:27:a2:73:31:c7:b2:d1:
                    6e:77:a4:0f:ec:00:6d:bc:99:31:f2:bd:22:5c:f1:
                    b6:62:ba:00:91:92:4e:2d:40:76:08:d6:79:a1:3e:
                    77:64:09:9a:24:37:2d:39:3b:88:c7:21:77:50:c1:
                    78:1d:88:c7:3d:67:eb:49:19:36:a2:f7:95:47:10:
                    ce:41:2c:24:77:1f:6f:f1:d9:3f:3a:0f:02:0d:ac:
                    ab:ad:f8:93:d6:45:7a:0f:9b:74:cd:a0:41:3c:33:
                    26:c5:98:2c:1a:d1:bc:d0:13:35:08:6d:98:56:26:
                    c7:5a:82:54:1f:f3:da:3b:61:bb:b1:a4:ff:b8:93:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:26:D0:55:F9:2F:EF:C9:99:15:58:C0:D0:BC:64:31:C4:EC:AF
            X509v3 Authority Key Identifier:
                keyid:9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:e7:d1:d9:07:2d:dd:fb:e3:34:db:aa:92:5e:31:c8:de:
         34:5f:69:61:bd:b3:c3:47:8b:33:56:7c:e8:33:68:44:1c:95:
         57:60:cf:05:f9:89:b0:05:07:b9:cd:68:a2:b8:86:fe:7c:99:
         73:46:f0:63:fe:3f:98:05:17:21:d4:9f:66:db:d7:65:7c:eb:
         99:2e:47:b0:bb:59:5e:6d:ee:61:3c:e5:68:6b:51:4e:43:ca:
         9b:1f:87:ed:ce:2b:58:90:70:a5:d8:7f:90:bc:8c:d3:91:c3:
         56:7b:a0:07:0a:1d:2d:57:a6:97:31:19:d7:e7:99:a2:61:07:
         94:1b:f6:19:cc:ba:39:72:40:e6:3e:46:3d:e9:fd:c1:0b:67:
         b0:80:3f:68:49:6a:26:f6:61:33:9c:05:06:1b:17:b7:ce:68:
         13:79:e8:d6:5b:72:23:ff:8f:f2:3e:f0:1d:86:14:09:3b:eb:
         a2:05:5a:d5:f8:e8:e6:97:f1:86:1c:d0:fe:7b:c4:45:88:e1:
         a0:41:69:df:4a:da:f3:96:60:2d:c7:ef:02:b0:73:07:ce:28:
         33:5e:20:43:7d:60:27:53:de:3d:c3:24:b9:36:be:c2:6f:0f:
         53:fa:81:2f:17:1e:18:b3:95:1a:0d:74:e1:a4:77:75:19:1a:
         dd:09:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:48 2026 by rpki-client