Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File:                     N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier:          jWjwOfcFfI5ovYCBgX3DqfS/jdGwkpWx3vjxxef79xg=
Subject key identifier:   1D:03:0C:B8:38:30:5B:13:0D:D6:91:BD:1C:26:E0:3A:F4:21:B9:11
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer:       /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial:       01A1A7F05A75EC462F23BBE169BBCF38E052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number:          1827
Signing time:             Wed 04 Nov 2026 19:01:49 +0000
Manifest this update:     Wed 04 Nov 2026 19:01:49 +0000
Manifest next update:     Thu 05 Nov 2026 19:01:49 +0000
Files and hashes:         1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
                          2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: uhs4kavUFDXjV3U/Qayaj7dJ3vWvL2L8XnD+ymSUcgA=)
                          3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a7:f0:5a:75:ec:46:2f:23:bb:e1:69:bb:cf:38:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
        Validity
            Not Before: Nov  4 19:01:49 2026 GMT
            Not After : Nov  5 19:01:49 2026 GMT
        Subject: CN=1d030cb838305b130dd691bd1c26e03af421b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:5d:5b:22:06:bf:ff:24:22:33:76:a0:8b:
                    87:e2:42:e3:e0:c7:43:92:4b:f0:60:b9:2a:88:31:
                    59:3b:e1:94:62:b5:0b:49:ae:c5:30:bb:35:bb:5a:
                    b3:ea:6e:fe:ff:78:3a:5c:fa:cc:23:af:80:29:2f:
                    74:27:43:45:17:ac:a7:00:e0:8b:08:4b:33:c4:37:
                    54:83:ed:7f:24:46:d7:26:ac:bc:4d:bc:e7:71:65:
                    4e:1b:ba:de:54:30:60:3c:02:9f:9c:b0:fa:5f:4d:
                    c6:5a:59:da:0b:dc:f8:ea:b5:59:58:92:c8:6c:4c:
                    86:95:41:91:97:df:1d:fc:5a:c5:7a:e6:3b:09:65:
                    56:86:6b:a5:8e:a4:78:85:2b:6c:5a:f3:4d:3c:ff:
                    90:7b:c1:b7:80:32:74:ed:88:4f:07:7e:c4:06:71:
                    1b:72:13:cb:6c:47:76:23:6c:0d:91:0f:b4:98:65:
                    58:14:d6:13:14:50:5c:b4:77:10:99:ea:e8:1b:02:
                    a0:47:8a:a7:66:8e:64:d6:1c:59:8e:01:37:0f:5b:
                    f0:3a:bf:7f:5e:42:ac:8e:9a:67:17:d1:64:06:e6:
                    8c:62:29:02:94:c2:56:0c:62:3f:fb:af:b2:e0:0e:
                    60:db:31:04:84:ae:b4:ad:08:94:24:d3:89:58:0a:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:0C:B8:38:30:5B:13:0D:D6:91:BD:1C:26:E0:3A:F4:21:B9:11
            X509v3 Authority Key Identifier:
                keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:b8:9d:31:dc:64:f8:fc:2c:d2:49:19:d1:38:64:5c:72:
         75:0e:ed:e7:f8:b3:10:34:c1:53:e6:aa:22:dd:68:6b:cf:4e:
         1a:56:82:48:d3:a9:8f:63:4b:8b:14:bb:01:9e:0a:0c:48:52:
         42:4e:61:66:46:91:0b:48:01:2f:71:35:9e:2f:06:3d:85:8d:
         8b:cc:7b:71:b1:d6:34:4e:1d:24:88:3c:c7:03:89:57:8c:7a:
         c8:69:64:64:49:98:ee:85:fa:6b:d3:7f:1d:e0:fe:fa:55:a8:
         75:a5:84:4e:d3:72:92:6b:e6:da:37:eb:ee:87:90:3e:d3:95:
         0a:57:4f:2e:91:a1:50:7a:e1:d1:9e:54:f1:8a:fd:d8:d1:5e:
         5c:0d:e4:d5:3b:82:6b:b0:2d:2b:df:ec:3f:a5:c1:97:a8:1a:
         4b:e9:d0:49:95:39:d0:18:7a:01:09:e4:e6:70:d3:4c:93:d0:
         56:37:bd:6b:46:d0:f8:5a:7c:7d:3f:c7:b2:79:16:ba:b7:2e:
         5f:d8:65:c6:92:ec:da:24:49:ca:81:8a:a9:70:be:35:57:00:
         88:79:44:eb:ca:f6:f4:6f:5e:38:b9:53:10:d6:89:b9:2d:cb:
         d1:85:69:3a:3a:54:25:1a:97:d0:d9:57:37:78:82:f0:65:33:
         92:0b:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:12:34 2026 by rpki-client