Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File:                     ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier:          t3r8cvY1tqZehzsg3hPfrinJUMpDAIoXPdgK+A1+Rxw=
Subject key identifier:   BC:B7:7C:DE:DC:18:CF:3A:25:CF:02:3B:07:CD:C2:F2:57:D6:95:90
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer:       /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial:       01A111BBBF8B60E484EA2A4B87AB58B0F695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number:          1A90
Signing time:             Tue 06 Oct 2026 15:01:19 +0000
Manifest this update:     Tue 06 Oct 2026 15:01:19 +0000
Manifest next update:     Wed 07 Oct 2026 15:01:19 +0000
Files and hashes:         1: BeJNk9n8DYGbjTquSZbOtIDrziM.roa (hash: Zutqy3F5GANTK963UN96Wios5HRE6QVmB+2x04QKDnI=)
                          2: RymG3dgu32q1w2cKh-aQrObAOFY.roa (hash: vKDtrprX/YjsvTEOZs6TJziAhjR0Xm4oYJTGdbuLsSY=)
                          3: S1jpIYU2pdyOm86Ekw65pir3-bY.roa (hash: n376vHxrsIXOyQdU+e+2c3li+uvHApOskctbMarm8Dg=)
                          4: TYub0TncnmCJgK5YqhcQq6uxFY8.roa (hash: PVSgFXhha0Tttkf2YheReFWR8vkcxo99w+Rpb5iRQR8=)
                          5: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: Wu8NLw4uk/6eE2xfaKFYkzVMvLbst7/6Si1FW5R3rTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:bf:8b:60:e4:84:ea:2a:4b:87:ab:58:b0:f6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Validity
            Not Before: Oct  6 15:01:19 2026 GMT
            Not After : Oct  7 15:01:19 2026 GMT
        Subject: CN=bcb77cdedc18cf3a25cf023b07cdc2f257d69590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:19:d2:c5:9b:a6:b4:68:9c:0f:e3:10:38:
                    bd:39:10:28:5d:70:8e:b4:d0:77:c1:fb:7d:76:f5:
                    6c:fb:bc:b6:23:db:df:be:7b:77:57:2d:45:75:7b:
                    44:ec:ea:e7:5e:64:3a:1b:90:ff:c7:7f:ce:b5:72:
                    78:4d:2f:db:f3:47:f3:21:cb:05:cc:ac:54:6e:71:
                    02:31:84:8e:d4:da:75:af:e3:e2:bd:8a:39:d4:54:
                    48:a6:65:4f:8d:40:0f:7a:00:16:df:58:4b:77:ac:
                    2d:26:b1:0f:ab:11:f2:4c:b9:f2:95:8f:d9:9d:a9:
                    be:8d:0e:ff:7e:0b:e8:a9:9e:05:07:d4:7f:c1:12:
                    00:36:68:47:98:1f:cc:4c:07:e5:53:84:ad:16:4a:
                    71:d4:c6:46:01:8c:af:5d:3a:92:e6:0b:49:07:86:
                    1a:40:68:c2:cf:6d:24:fc:da:cd:27:30:eb:51:6a:
                    ff:af:78:ff:17:05:c7:70:e6:73:37:f7:26:60:8e:
                    b2:61:a0:bb:8a:65:0c:ba:7e:ac:d8:39:5d:6f:84:
                    c4:d8:10:f7:13:05:5c:7a:00:fd:6b:50:3a:6c:79:
                    d5:0e:5f:52:5e:2d:1a:e0:c1:13:85:5e:59:d5:5f:
                    40:17:89:f0:a8:f3:1a:4d:b6:a6:71:06:06:18:9f:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:7C:DE:DC:18:CF:3A:25:CF:02:3B:07:CD:C2:F2:57:D6:95:90
            X509v3 Authority Key Identifier:
                keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:2b:21:42:de:d8:25:15:93:07:00:8a:78:87:d0:8d:fe:
         65:6f:24:8c:c8:88:0f:6a:62:e2:73:04:ce:20:28:da:1f:25:
         1c:95:6b:3a:cc:5d:6b:e0:f5:32:d0:24:83:3c:46:1f:3b:24:
         87:22:83:6a:a4:c0:a7:af:a5:2d:9f:d7:13:fa:bc:b2:5b:aa:
         88:1a:9f:37:2b:d2:fb:40:8c:ab:73:a2:81:48:6d:02:9a:09:
         5b:35:06:6e:ed:bb:2d:aa:58:29:2b:c6:ec:d1:93:68:f4:28:
         70:a5:34:3e:23:c8:e7:6e:8d:fa:e2:39:39:b3:c0:81:4c:a6:
         03:cc:75:04:0f:ba:2a:46:b5:cc:ad:7a:b7:1d:b1:aa:2f:6f:
         76:a7:6f:0f:f2:f9:48:dd:e9:76:22:c9:1f:20:e3:1a:88:01:
         b1:2b:61:30:b9:cf:7a:15:3c:fd:9e:c8:17:51:1a:42:39:10:
         8f:9a:88:aa:40:3b:a2:86:a7:01:47:df:4f:cc:64:d1:a6:3b:
         39:62:bd:f2:21:90:be:da:04:c9:48:d8:e5:ad:bd:b1:a3:95:
         e3:62:6c:31:2f:bb:ae:e0:71:57:d0:b0:3b:49:fd:20:6c:c7:
         b0:b5:63:10:a0:5e:ee:e2:69:2c:bd:ec:c0:1f:6c:7d:63:1e:
         17:80:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:04 2026 by rpki-client