Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
File:                     Na5NvD-sOkzQcM-fAql4rz_gqiY.mft (raw, json)
Hash identifier:          vWdoMZUSqqWZYzo/NtzQYE/4twFA6H0GJFoBE1dD4fs=
Subject key identifier:   97:62:AC:78:91:A5:86:8B:D4:1C:FA:76:CA:88:1A:2A:54:1D:FB:A8
Authority key identifier: 35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26
Certificate issuer:       /CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
Certificate serial:       01A1950DF13A11668B268CFC04ABBDC4C19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
Manifest number:          014B
Signing time:             Sun 01 Nov 2026 03:01:21 +0000
Manifest this update:     Sun 01 Nov 2026 03:01:21 +0000
Manifest next update:     Mon 02 Nov 2026 03:01:21 +0000
Files and hashes:         1: Na5NvD-sOkzQcM-fAql4rz_gqiY.crl (hash: aDQxqGF/IM1G20+yiHh3MULsWVriAY2yFETuukjYm70=)
                          2: RRaajtQrss5SvD0UbtCJxO7e-rU.roa (hash: 3rTSj5RjYBccOHFc9KbwnqOPuKe1LfVBGgP8gO67rtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:95:0d:f1:3a:11:66:8b:26:8c:fc:04:ab:bd:c4:c1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ae4dbc3fac3a4cd070cf9f02a978af3fe0aa26
        Validity
            Not Before: Nov  1 03:01:21 2026 GMT
            Not After : Nov  2 03:01:21 2026 GMT
        Subject: CN=9762ac7891a5868bd41cfa76ca881a2a541dfba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:0f:db:a0:33:9d:da:c5:06:e2:f0:c2:5b:
                    2f:7f:e3:80:dc:55:46:1c:49:62:86:3e:f8:cc:58:
                    90:2c:c8:0b:1f:6c:c8:86:c9:df:4f:66:76:9f:e6:
                    e5:ef:26:95:d5:49:0d:7a:bf:7f:0a:a7:81:8d:b2:
                    c6:69:26:e1:01:e6:1d:89:34:bc:d1:c6:c0:03:a2:
                    72:a1:bc:64:cd:86:75:fa:5e:15:ef:85:01:9e:47:
                    84:88:8d:c7:34:f0:5e:47:7e:b1:7c:2b:f8:f1:3f:
                    cd:a0:81:32:2f:69:3b:f8:78:f1:f7:06:ab:3f:0e:
                    95:a9:ee:9d:fe:10:b1:b8:c3:26:01:55:eb:d3:11:
                    0e:b2:5b:f1:77:fe:14:76:d1:f7:48:5d:96:89:d2:
                    ce:96:5b:81:e3:be:bf:3d:c9:de:da:49:bb:02:90:
                    65:c8:c2:ba:49:6f:e5:bf:fa:cf:64:9b:70:e2:3c:
                    d9:b2:e3:96:00:dc:48:b0:22:f5:2f:8c:a9:05:f9:
                    71:ea:84:ab:64:37:f4:8c:31:8b:af:07:11:4f:dc:
                    a4:f6:73:76:27:1c:6b:32:0e:8c:5f:e5:a0:18:01:
                    bc:8c:a4:c3:7c:05:c0:56:11:29:6c:70:69:f0:18:
                    3e:48:f4:43:78:b1:69:66:ba:b7:a8:a6:6d:3b:f5:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:62:AC:78:91:A5:86:8B:D4:1C:FA:76:CA:88:1A:2A:54:1D:FB:A8
            X509v3 Authority Key Identifier:
                keyid:35:AE:4D:BC:3F:AC:3A:4C:D0:70:CF:9F:02:A9:78:AF:3F:E0:AA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Na5NvD-sOkzQcM-fAql4rz_gqiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/Na5NvD-sOkzQcM-fAql4rz_gqiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:3d:b4:80:1c:94:7b:29:5f:2f:56:d6:dc:05:d7:a4:83:
         d8:c3:73:89:c4:b8:b8:a6:51:c2:dd:a2:a7:5b:10:88:1d:3b:
         52:45:33:93:df:f3:79:0b:97:6a:b4:50:32:d5:8b:d4:40:a8:
         d4:a3:e9:86:f9:29:d1:a0:6a:6f:fb:55:1e:37:a3:80:fc:4e:
         dc:93:0f:db:68:5b:21:05:b6:55:4b:09:ce:d9:cf:d7:9a:18:
         70:92:25:c0:01:b0:04:43:27:cd:11:b7:3a:43:a4:d9:a7:9c:
         e9:39:27:4a:9a:d6:de:5e:34:28:30:ec:ec:4b:37:0a:1e:fb:
         c5:42:4f:e8:a1:7f:f2:9e:b6:2c:d5:cf:2a:e4:70:aa:18:58:
         b7:e8:56:3c:35:fd:17:9a:6b:8e:8a:eb:88:00:c0:cc:fa:5d:
         e3:70:d0:72:f2:b5:b0:37:c2:bc:80:b0:b5:cd:90:a3:8d:f1:
         6a:09:7a:91:d3:6f:89:c1:64:fc:7b:e9:e7:85:c5:6d:f8:04:
         3a:f4:96:d9:36:93:54:b9:ed:39:17:98:00:68:5a:cd:d2:04:
         b0:58:40:df:d1:4b:66:49:4c:3e:6d:ce:58:22:cd:15:75:ef:
         fe:9c:ac:ac:6d:bc:1a:f3:f4:97:cb:ff:2b:3b:68:d9:dd:0d:
         dd:be:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:31 2026 by rpki-client