Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File:                     N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier:          avuUFXvxGeXRkjIRhCHzGSjTJeiTSMGlFPySYcuT6tE=
Subject key identifier:   0C:8C:BF:36:E5:B5:E0:80:0B:37:C6:D7:24:D0:CE:40:63:0B:C7:77
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer:       /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial:       01A1137347C5D163774077A950746559BAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number:          15E3
Signing time:             Tue 06 Oct 2026 23:01:24 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:24 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:24 +0000
Files and hashes:         1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
                          2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: RFXWa2NPKKMwTzvo/yPCmn+96ByHxvRGO8nHDOMfhAs=)
                          3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:47:c5:d1:63:77:40:77:a9:50:74:65:59:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
        Validity
            Not Before: Oct  6 23:01:24 2026 GMT
            Not After : Oct  7 23:01:24 2026 GMT
        Subject: CN=0c8cbf36e5b5e0800b37c6d724d0ce40630bc777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:6a:6d:9c:13:44:89:7f:e0:9a:24:3d:5e:
                    2c:c4:a0:f9:8a:03:6c:22:f6:f6:4a:2e:e9:fd:26:
                    86:6b:90:93:82:4b:4d:7e:62:a6:37:45:f6:ea:16:
                    31:5c:42:26:35:c2:e9:03:66:7f:2d:3f:7a:0f:42:
                    87:42:92:00:00:0d:94:63:ad:4b:7d:cc:97:c7:60:
                    04:59:9a:6b:b6:d8:f6:f6:e8:a9:02:d3:5a:46:ab:
                    a0:6c:fa:dd:ea:c4:ac:12:05:b0:af:d1:de:7a:73:
                    aa:b8:02:75:7c:ae:ab:66:32:bf:84:f8:1c:ae:0d:
                    fe:51:69:0f:4f:99:6c:fa:e3:7f:e7:7a:d9:60:ed:
                    58:0f:62:ec:4c:ab:a5:43:f8:f8:28:0d:bd:95:7b:
                    40:e1:3f:76:3a:04:5a:ce:16:bc:3b:47:e8:a6:8d:
                    af:57:7d:af:37:ea:92:08:d0:fc:11:f7:b9:53:49:
                    c4:49:5e:93:0b:aa:62:04:c3:90:b7:22:a0:cb:81:
                    f6:eb:ac:0e:1f:e4:be:21:32:fc:78:8e:9d:8d:b4:
                    8f:0e:e6:37:2e:13:ba:37:84:e1:4b:3b:78:9a:80:
                    dd:59:a3:51:bb:fb:e0:d6:1d:f5:4c:12:ba:aa:35:
                    0b:5f:30:32:48:1d:58:79:10:db:0c:0d:60:84:97:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:BF:36:E5:B5:E0:80:0B:37:C6:D7:24:D0:CE:40:63:0B:C7:77
            X509v3 Authority Key Identifier:
                keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:4f:28:1f:4d:66:7f:d8:88:d9:ef:06:60:1a:a8:c8:3a:
         c6:6a:70:8c:21:d0:53:8c:64:65:a7:e8:b4:4a:a5:ec:3b:9f:
         29:6e:be:a7:b1:1c:4c:13:a9:66:29:e8:89:08:8c:b2:21:a5:
         eb:74:30:e8:05:87:5e:41:b3:bb:e3:80:c2:c3:86:70:08:aa:
         f0:b9:8f:56:f8:fd:f4:46:84:7d:5e:5a:e9:0f:d1:0b:bb:27:
         de:9f:64:8f:44:0d:8f:46:5e:54:79:a2:ba:f2:83:f0:2e:54:
         6e:0c:ba:de:2c:3b:da:1a:4b:47:6f:d2:1a:4c:0a:36:0a:6a:
         e5:9a:2f:2e:fd:f2:b4:f9:94:05:01:88:40:f2:73:e6:aa:6c:
         ee:62:7e:1a:18:23:7a:55:fa:03:54:4f:7a:d3:50:b3:84:32:
         88:2d:9e:5e:68:19:71:cc:07:60:40:cf:23:f3:91:ea:46:4f:
         66:d4:d0:1c:2f:61:4c:92:25:11:bd:cd:e4:6c:15:ef:af:1e:
         53:37:99:3c:67:76:d2:bf:cd:b3:c5:9b:54:b8:11:65:e1:f3:
         26:ce:ec:0e:a7:5d:05:90:aa:a0:39:8a:77:76:68:c5:6d:04:
         18:4c:56:d1:f8:6b:55:76:40:73:16:7b:4f:bf:54:aa:55:3e:
         d9:2b:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:40:47 2026 by rpki-client