Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          suu98kpZZPq+dMnzy5UVzxLfL+RlhFl++9NOis1HjJg=
Subject key identifier:   2D:36:75:CE:01:CF:42:A5:08:B4:77:F1:58:03:A8:B5:37:E2:7A:94
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       01A16FEE1969088E001CACC245414333CC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          1ACC
Signing time:             Sat 24 Oct 2026 22:00:37 +0000
Manifest this update:     Sat 24 Oct 2026 22:00:37 +0000
Manifest next update:     Sun 25 Oct 2026 22:00:37 +0000
Files and hashes:         1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
                          2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
                          3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
                          4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: PvUYYcBtLabIoePFlf82symd/BxXbXDfeacrujyMbhg=)
                          5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
                          6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
                          7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:ee:19:69:08:8e:00:1c:ac:c2:45:41:43:33:cc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Oct 24 22:00:37 2026 GMT
            Not After : Oct 25 22:00:37 2026 GMT
        Subject: CN=2d3675ce01cf42a508b477f15803a8b537e27a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1b:1b:41:87:34:08:56:1d:8c:56:c5:e3:f8:
                    81:e7:96:18:6f:32:35:d5:8c:37:26:18:48:2a:48:
                    4c:67:61:1f:09:92:55:95:bf:11:73:da:61:2c:32:
                    3c:de:64:03:29:22:31:67:d0:fa:6d:0f:46:e4:a9:
                    fc:8b:51:fd:c9:46:6a:6c:c3:cf:ff:75:da:d8:dc:
                    cb:57:2a:11:81:91:2a:2d:6b:10:dd:1b:1f:56:6f:
                    07:c9:ac:94:7f:fd:bd:2d:6e:bf:83:e6:ea:88:2f:
                    57:89:5d:38:aa:30:02:61:9d:e0:33:80:ea:8d:8e:
                    49:53:8b:f5:7b:4b:25:af:f7:86:58:4a:ab:44:8c:
                    4e:2e:22:79:37:63:06:54:87:ee:8c:83:a4:36:25:
                    d5:5d:56:d7:41:55:12:dc:88:17:91:06:f5:a7:b2:
                    55:1c:c2:1a:12:1b:78:b3:d3:ae:6f:0c:ee:2a:04:
                    15:72:ec:a2:b9:dc:6a:7c:7e:42:dd:a2:6b:c2:21:
                    d9:70:50:c1:7a:e5:63:8c:f4:7c:10:2e:0a:58:29:
                    8e:8a:23:71:37:5b:80:0a:6a:2d:ca:55:01:12:6a:
                    af:81:c7:ed:b6:fb:f8:8d:00:d3:92:7e:08:fc:2d:
                    ca:60:19:52:21:8b:cb:55:75:74:f1:51:de:f3:f3:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:36:75:CE:01:CF:42:A5:08:B4:77:F1:58:03:A8:B5:37:E2:7A:94
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:48:3b:27:eb:77:30:72:52:03:d2:0d:ae:92:84:44:98:fa:
         4a:7e:3b:2d:78:56:8e:37:ad:b4:f5:e6:53:e1:62:7d:8c:3e:
         bb:32:a3:77:6b:16:63:5c:84:27:ca:3d:3d:21:08:ed:5e:e2:
         1c:a1:56:cc:69:cf:18:7f:a4:0c:01:5b:96:16:24:1c:a6:1f:
         c1:6d:e6:16:45:23:ef:59:df:b4:c2:91:68:ab:69:d9:14:24:
         7f:c0:72:53:9f:c1:d5:64:69:ee:cb:0d:ce:75:8a:f4:a0:09:
         7f:cc:58:59:a6:ed:3e:32:a9:58:a4:f2:c9:d6:9f:10:5d:38:
         f8:45:7f:a2:ba:51:0d:89:10:5b:79:35:de:87:87:5d:84:e7:
         3f:3a:c0:17:ce:6b:f0:01:2a:06:57:96:34:a4:98:94:dc:99:
         c5:82:ee:76:ea:78:57:60:ed:82:03:16:13:ce:26:5b:04:2b:
         d2:ce:49:f6:30:3f:06:1b:5f:a9:1b:10:5c:1d:a7:53:b8:16:
         be:e1:fb:3d:5b:14:41:17:00:cb:04:4a:55:c7:7c:a8:8b:4c:
         02:d9:d6:16:82:95:f5:7c:52:a6:dc:0b:e1:d5:69:f1:56:ea:
         07:01:63:a6:5d:03:66:4c:7e:ca:e8:e2:91:a4:32:fc:17:91:
         f0:03:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:11:07 2026 by rpki-client