Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
File:                     njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft (raw, json)
Hash identifier:          TurnS7i/3FstPIMbwd9Uvha5NwQ7e6Br38uXw7SKnpU=
Subject key identifier:   44:6F:7D:72:31:A2:88:AC:11:04:54:DF:6C:6C:4E:C4:CC:19:EB:38
Authority key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Certificate issuer:       /CN=9e315018e560000d94718d85ee4e1320c3a5e457
Certificate serial:       01A14D99D078B447758DD07596835A2AB7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
Manifest number:          0126
Signing time:             Sun 18 Oct 2026 06:01:28 +0000
Manifest this update:     Sun 18 Oct 2026 06:01:28 +0000
Manifest next update:     Mon 19 Oct 2026 06:01:28 +0000
Files and hashes:         1: _W2MGLpzYLCcdM8MrYh-W5k4LpE.roa (hash: 5AVtOSonCp0arcBUR0hK73/WbQu4O8oq5lfKGONGBLk=)
                          2: njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl (hash: mU/BWDWKVSqQNlHhOi1ekVCXkzFt+2GdTT2a9PbAAEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:99:d0:78:b4:47:75:8d:d0:75:96:83:5a:2a:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e315018e560000d94718d85ee4e1320c3a5e457
        Validity
            Not Before: Oct 18 06:01:28 2026 GMT
            Not After : Oct 19 06:01:28 2026 GMT
        Subject: CN=446f7d7231a288ac110454df6c6c4ec4cc19eb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:2e:a6:f4:95:36:d0:4a:61:fd:ae:b4:f5:
                    83:05:5e:3c:b8:d5:7a:9a:e5:36:2e:47:b5:e2:db:
                    69:2b:58:f4:6e:26:a3:93:d0:66:b5:1c:fc:bd:c4:
                    fb:63:3d:f2:62:04:21:74:0b:79:6b:43:1e:83:2e:
                    07:dd:48:17:d2:11:3f:0c:62:22:e7:15:14:26:46:
                    30:eb:ac:ce:42:9c:e0:6c:10:7a:71:f7:47:da:2c:
                    ed:56:d1:85:e8:5d:f6:91:5c:80:89:63:94:2c:82:
                    73:bf:19:4c:37:3f:08:e2:71:b9:b9:20:34:7e:ee:
                    80:12:68:fd:cf:3f:a3:bf:0b:71:1b:e5:23:ec:27:
                    ba:d4:9e:df:da:40:e4:43:4f:3b:da:5d:76:de:95:
                    8b:d5:fc:35:43:87:2c:38:5f:cb:30:e5:5b:12:68:
                    fb:ab:fa:8f:4c:2c:52:98:29:03:76:da:44:7b:97:
                    b8:f9:39:ae:16:d0:7e:e9:5c:95:80:af:07:c4:5f:
                    fd:f6:9d:3a:f2:30:ca:1e:58:e7:bd:cb:97:d9:ef:
                    ec:fc:db:91:ee:8f:60:23:5c:e5:db:22:42:32:3c:
                    3c:5a:cf:3e:e3:c2:2e:e6:2e:25:a2:00:71:77:a1:
                    d1:4c:04:ad:63:20:c7:f7:32:9c:81:20:f9:e8:1b:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:7D:72:31:A2:88:AC:11:04:54:DF:6C:6C:4E:C4:CC:19:EB:38
            X509v3 Authority Key Identifier:
                keyid:9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:86:fb:9c:90:8e:2a:73:a5:44:01:1d:e7:d2:0c:d9:b3:34:
         c3:35:b3:f8:13:18:fc:88:fc:a2:82:cc:94:7a:46:ef:f5:eb:
         2b:8c:8b:97:21:35:46:1f:51:c3:04:db:b1:13:82:63:28:8c:
         fa:e6:ee:01:22:f4:22:b4:05:8d:84:d1:59:9a:9d:c0:50:74:
         21:05:65:c3:d4:9c:64:19:cf:a4:6e:37:5e:bb:85:af:48:53:
         ac:59:47:c4:fe:25:de:ae:72:61:da:26:1d:64:88:75:f2:c5:
         7c:de:43:6d:a3:b5:48:f3:ce:d3:89:b9:90:5a:a4:cb:8f:70:
         11:2c:b5:a1:29:00:af:cc:7d:19:b8:4c:42:b1:36:e4:bf:7b:
         b6:99:ba:d5:38:74:6d:c3:65:95:5e:c8:d3:24:34:c0:69:1d:
         7e:0c:38:db:f1:ef:e3:54:91:58:f7:37:37:99:89:c6:fe:0a:
         1c:58:50:9b:1b:f2:48:5d:6b:f6:d0:b2:4c:87:ce:ba:95:a6:
         0b:1d:cb:15:d3:95:96:74:a0:22:99:a5:63:0f:15:ae:fe:92:
         3c:b1:b2:fb:28:df:0e:e0:11:6d:86:1d:1d:9b:31:b3:9a:13:
         82:82:95:cc:0e:3f:2e:6a:b9:32:cd:b8:08:8b:c6:69:c6:43:
         27:83:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:07:09 2026 by rpki-client