Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          gsLkhNgPJuLL2kFtHTaocwvFghXYIKgTMXi1ACpgl3U=
Subject key identifier:   62:D3:18:57:27:23:02:B2:61:E1:BA:4F:63:34:B0:9C:6B:70:B7:94
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       01A186086C786506D64275DAE2EE68B29FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          07F5
Signing time:             Thu 29 Oct 2026 05:01:01 +0000
Manifest this update:     Thu 29 Oct 2026 05:01:01 +0000
Manifest next update:     Fri 30 Oct 2026 05:01:01 +0000
Files and hashes:         1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
                          2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: i3yY1vJVjWbuGa7yEOofVyczPGeXmS8qMYhRNfiI/aM=)
                          3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:6c:78:65:06:d6:42:75:da:e2:ee:68:b2:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Oct 29 05:01:01 2026 GMT
            Not After : Oct 30 05:01:01 2026 GMT
        Subject: CN=62d31857272302b261e1ba4f6334b09c6b70b794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:e5:fa:21:36:4c:67:34:df:1b:c0:bf:b2:
                    b8:ae:81:53:3a:90:b5:17:de:a6:ce:60:d7:9e:ba:
                    6e:dc:57:c6:c3:a2:4c:b5:b3:2b:91:be:d2:fc:14:
                    90:c8:2b:0a:02:8a:77:30:31:ea:c1:75:6a:66:dc:
                    6d:d8:b4:46:1f:98:a9:77:12:59:b3:3c:69:36:91:
                    95:da:f3:bb:11:49:92:5a:2e:dc:7d:27:83:ae:40:
                    97:0b:29:29:4a:b4:fe:73:6a:af:39:bc:96:72:4b:
                    40:36:32:82:a0:bc:18:1b:b1:88:40:a1:98:73:0b:
                    6e:f2:18:50:9c:1e:bb:1c:fe:eb:0f:53:cc:5f:8f:
                    24:12:c9:9f:72:4f:16:52:89:52:ae:ee:0f:d0:2e:
                    d1:51:40:91:2b:ab:02:bb:97:e3:6a:65:09:27:e2:
                    49:ff:16:1a:14:91:5c:ea:ff:e6:73:e1:38:27:a5:
                    12:4f:a5:35:03:8b:16:b6:5b:4e:19:ff:40:80:6c:
                    a9:28:36:03:9c:e1:3a:e8:6c:bf:b7:c5:ec:ca:fe:
                    6b:d4:75:77:7a:c7:bd:b6:b3:20:c6:d9:31:ab:62:
                    f9:b7:6e:c2:77:ff:32:7f:86:f8:26:eb:e2:8f:53:
                    4b:61:39:13:b0:c9:c4:95:c2:b0:ba:2c:de:44:02:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:18:57:27:23:02:B2:61:E1:BA:4F:63:34:B0:9C:6B:70:B7:94
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:55:b9:d7:24:ba:bb:20:16:e2:b8:87:5e:7a:08:8d:c2:2a:
         e9:be:d4:21:5b:00:ea:a9:f1:5e:4e:f5:12:83:e4:0d:fc:f5:
         f9:94:58:66:6b:80:e8:3e:b5:0a:5a:e0:38:c1:f0:8b:dc:b4:
         50:da:66:18:cb:2e:a5:92:b3:5e:d7:5f:0c:df:83:26:1d:10:
         8c:63:32:af:29:88:e6:16:12:91:1a:21:b6:d6:23:9c:d3:ae:
         74:87:af:97:52:f7:ac:5f:9e:7f:12:d2:2f:dc:63:55:0b:8e:
         a9:8c:1d:2d:d2:d0:44:e1:7f:4e:74:4c:d4:dc:c9:a6:be:26:
         93:da:bf:17:d3:41:22:0b:f2:c8:66:c1:66:37:60:62:f9:da:
         0a:4a:64:e9:64:5d:2b:97:c8:4c:84:d7:5d:7e:13:40:3f:33:
         0c:77:b3:1e:bb:dc:b4:73:ca:77:b2:00:43:67:8c:c8:d4:0d:
         01:d6:85:7b:ea:7f:34:32:f3:af:dc:c6:37:0a:09:e6:80:a3:
         ee:0b:88:96:46:32:ff:07:dc:b1:e1:8a:13:9c:e9:de:c8:5f:
         38:66:47:52:93:de:99:42:d1:f8:f2:f3:ec:a1:4d:72:c3:7b:
         95:d2:2a:11:99:e4:e7:aa:f6:81:fa:47:54:f2:29:47:eb:20:
         c0:bf:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:41:29 2026 by rpki-client