Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File:                     NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier:          OnQp1IMSYXnuFKi76NxMyJzCW0Tk1pmAmgT2jBMQmgY=
Subject key identifier:   1E:31:6C:25:CD:EB:D4:31:77:72:66:51:16:2E:97:0B:6D:2F:6C:1E
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer:       /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial:       01A107DCABA35D89DCF575386A361EF8B5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number:          1A8B
Signing time:             Sun 04 Oct 2026 17:01:04 +0000
Manifest this update:     Sun 04 Oct 2026 17:01:04 +0000
Manifest next update:     Mon 05 Oct 2026 17:01:04 +0000
Files and hashes:         1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: QGWjBuVXCfnf9ZmMNkeFvhKdA7cKc11ewHWMtFiqr/g=)
                          2: oQ465u5ABjy_bI2bid_xFwTRdk0.roa (hash: kIHQwUf72AZCR5eKFc8oJX7KFeRJopOB0HQDj68kcTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:dc:ab:a3:5d:89:dc:f5:75:38:6a:36:1e:f8:b5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
        Validity
            Not Before: Oct  4 17:01:04 2026 GMT
            Not After : Oct  5 17:01:04 2026 GMT
        Subject: CN=1e316c25cdebd43177726651162e970b6d2f6c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:a9:49:93:e6:eb:90:8d:9e:64:da:26:31:
                    99:4d:ac:fe:07:29:a7:22:3b:27:3a:9e:c2:d9:77:
                    be:23:c9:44:86:c5:0d:86:e1:7e:83:e5:19:3b:73:
                    e0:07:69:9d:8b:06:a6:0e:23:1f:6b:a5:94:0f:8c:
                    4d:b5:90:25:82:ac:45:8f:07:6b:44:64:95:74:20:
                    13:b8:e2:86:34:b3:65:be:45:0e:c9:3d:1a:d2:9e:
                    b5:0b:29:e5:69:38:b4:0a:c2:53:5b:76:52:2c:21:
                    1c:86:2c:73:33:03:ba:ef:0f:42:5e:0c:4e:4c:24:
                    bb:c9:1d:e4:ea:8d:3a:f0:28:0e:4d:a3:8d:1f:c5:
                    d1:e0:63:42:8a:2b:a5:6d:11:0a:ac:0a:98:83:ac:
                    28:e9:00:9c:db:fb:7d:3e:9a:8d:af:1a:11:17:63:
                    26:b0:d2:b9:19:70:91:9c:c8:3a:56:01:8f:23:01:
                    44:98:85:26:ed:2c:6b:69:ec:68:c6:ae:38:b8:a3:
                    e4:8c:c2:36:81:0d:d7:de:d2:f2:ca:94:87:c6:07:
                    f6:63:b1:e6:f1:4f:c1:90:3c:19:d4:3e:7d:62:c0:
                    c7:64:65:3c:de:71:48:54:16:84:68:c8:bd:de:90:
                    02:1b:59:94:ac:8e:e0:10:2e:07:5e:2d:7f:e7:1f:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:31:6C:25:CD:EB:D4:31:77:72:66:51:16:2E:97:0B:6D:2F:6C:1E
            X509v3 Authority Key Identifier:
                keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:e3:25:a1:50:5e:25:f2:b3:78:44:7f:8c:3a:59:17:b4:
         a0:5e:5f:57:64:44:02:b6:b7:0b:18:b0:cd:9b:a0:30:e8:52:
         be:d1:7b:80:38:a1:21:d8:2c:91:91:62:f4:7e:cb:d5:8e:c1:
         f3:9d:13:63:26:64:fc:5c:02:48:2b:81:b4:7b:5b:ae:20:05:
         99:76:dc:ef:45:5a:36:e5:a6:d2:e8:d0:27:11:f8:26:4b:2e:
         88:ee:fe:df:24:12:11:ee:9b:93:02:84:de:14:8b:dd:d7:1d:
         e8:38:46:68:ba:37:6b:fc:d2:19:ba:2a:ff:c9:d1:67:8f:b2:
         87:6e:87:f9:91:2f:95:d9:90:fe:f1:56:70:8a:d6:91:ab:36:
         7a:60:9d:01:26:05:c0:c7:c2:a4:bd:6a:f3:81:8b:3b:49:c6:
         82:8c:51:fd:f6:6f:87:3d:34:e2:90:ce:8e:c8:3a:62:22:9f:
         55:4d:a5:e1:d6:21:be:0d:cd:ee:11:02:1e:d3:2d:ef:af:67:
         12:22:7d:ef:29:31:03:e9:42:0c:ce:86:e1:57:96:59:0e:dc:
         a8:0b:57:01:ca:ef:62:9f:00:a9:9e:39:4d:90:69:dc:98:93:
         64:c9:52:13:30:bb:cf:61:89:c5:51:ff:0b:6e:b6:9e:ea:51:
         ca:0b:97:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEH3KujXYnc9XU4ajYe+LWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3
OTlmN2UwHhcNMjYxMDA0MTcwMTA0WhcNMjYxMDA1MTcwMTA0WjAzMTEwLwYDVQQD
EygxZTMxNmMyNWNkZWJkNDMxNzc3MjY2NTExNjJlOTcwYjZkMmY2YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGepSZPm65CNnmTaJjGZTaz+Bymn
IjsnOp7C2Xe+I8lEhsUNhuF+g+UZO3PgB2mdiwamDiMfa6WUD4xNtZAlgqxFjwdr
RGSVdCATuOKGNLNlvkUOyT0a0p61CynlaTi0CsJTW3ZSLCEchixzMwO67w9CXgxO
TCS7yR3k6o068CgOTaONH8XR4GNCiiulbREKrAqYg6wo6QCc2/t9PpqNrxoRF2Mm
sNK5GXCRnMg6VgGPIwFEmIUm7Sxraexoxq44uKPkjMI2gQ3X3tLyypSHxgf2Y7Hm
8U/BkDwZ1D59YsDHZGU83nFIVBaEaMi93pACG1mUrI7gEC4HXi1/5x8YHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4xbCXN69Qxd3JmURYulwttL2weMB8GA1UdIwQY
MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt
NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh
LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaTjJaFQ
XiXys3hEf4w6WRe0oF5fV2REAra3CxiwzZugMOhSvtF7gDihIdgskZFi9H7L1Y7B
850TYyZk/FwCSCuBtHtbriAFmXbc70VaNuWm0ujQJxH4JksuiO7+3yQSEe6bkwKE
3hSL3dcd6DhGaLo3a/zSGboq/8nRZ4+yh26H+ZEvldmQ/vFWcIrWkas2emCdASYF
wMfCpL1q84GLO0nGgoxR/fZvhz004pDOjsg6YiKfVU2l4dYhvg3N7hECHtMt769n
EiJ97ykxA+lCDM6G4VeWWQ7cqAtXAcrvYp8AqZ45TZBp3JiTZMlSEzC7z2GJxVH/
C262nupRyguXbA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 01:22:07 2026 by rpki-client