Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
File:                     n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft (raw, json)
Hash identifier:          x/zrvjKbBbYR/q7YvboFF0AdxtKN+8xBjw8Ljj/wDZA=
Subject key identifier:   CA:95:5A:3D:0D:97:DF:19:D5:45:D2:DA:DA:3A:50:FD:93:93:B3:5D
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Certificate issuer:       /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial:       01A128E811A3C7DAC054E4FEAB65CA9540F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
Manifest number:          0113
Signing time:             Sun 11 Oct 2026 03:00:59 +0000
Manifest this update:     Sun 11 Oct 2026 03:00:59 +0000
Manifest next update:     Mon 12 Oct 2026 03:00:59 +0000
Files and hashes:         1: Ts__go_5kraAxg_xlkVG1jwWF4s.roa (hash: SzNoYDdJ9H0cE2yBXjlxrXi58YXnSypRhyX9GFV3rA4=)
                          2: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (hash: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=)
                          3: n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl (hash: tseAjD4OzuaI2rIkOVZC3nmAj3vNZwllj4xQOV23cJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:11:a3:c7:da:c0:54:e4:fe:ab:65:ca:95:40:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
        Validity
            Not Before: Oct 11 03:00:59 2026 GMT
            Not After : Oct 12 03:00:59 2026 GMT
        Subject: CN=ca955a3d0d97df19d545d2dada3a50fd9393b35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:21:52:41:52:95:3f:ea:94:75:8b:92:9a:
                    51:61:d5:aa:b9:66:be:65:a9:2d:8d:34:6a:18:e0:
                    5f:e7:30:12:9b:be:b3:7a:4b:67:14:bd:e6:65:69:
                    fb:a1:c0:0a:8e:4b:76:c4:81:fe:1b:96:17:3f:08:
                    58:f4:6f:96:a4:2b:d5:57:8d:d1:f6:eb:03:ba:ed:
                    bf:ee:56:82:e1:43:db:f2:6d:8d:73:e4:bb:fa:9d:
                    8d:6b:ae:6f:ed:0a:0a:0f:76:ce:05:93:d3:e9:99:
                    3b:91:86:14:5b:d2:7f:d3:20:5e:da:94:75:00:6b:
                    46:0d:c4:2f:bd:bb:c0:80:31:3b:af:38:bf:4b:24:
                    e0:78:b9:bf:b7:f0:20:3b:62:d8:9a:0c:05:40:3c:
                    6c:1e:49:5d:c0:71:f2:61:ea:f6:33:4d:22:94:e1:
                    31:01:60:26:ae:44:94:9e:a5:f0:a2:70:92:3d:f6:
                    07:78:84:6d:01:29:6a:1a:27:44:37:41:5f:78:33:
                    e1:1d:4f:fb:70:e4:33:2f:84:8e:5b:91:59:db:e4:
                    6c:d3:64:88:80:70:45:48:71:5b:84:d5:9c:0e:2f:
                    96:69:9e:0c:33:5f:23:75:01:0f:3e:fd:30:55:37:
                    b7:df:af:cb:9e:94:a3:67:8f:2d:38:80:55:74:bc:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:5A:3D:0D:97:DF:19:D5:45:D2:DA:DA:3A:50:FD:93:93:B3:5D
            X509v3 Authority Key Identifier:
                keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:92:a7:30:39:28:d6:04:9d:f0:70:f7:66:4b:77:4a:97:89:
         ee:ca:a3:e2:3a:56:33:1f:3f:4b:52:5a:cf:ef:af:90:32:b8:
         d2:c5:1f:52:43:23:84:10:9f:3f:9c:78:01:8d:0e:15:ab:59:
         77:5f:cd:67:44:a2:74:5f:a6:52:95:ce:b4:3b:ab:b3:f5:45:
         66:da:5f:c6:cb:39:4b:fc:32:28:2c:b3:f4:3f:ca:5f:0c:3f:
         1f:b3:f5:23:1a:fc:7a:22:2d:ed:c7:52:98:3b:03:16:19:62:
         ba:33:28:d0:1b:92:7d:f4:9d:8f:b9:89:86:f8:5d:96:b2:06:
         51:b3:5e:84:a5:11:de:8b:cc:60:4a:3f:2c:64:8f:3b:eb:9e:
         b1:04:45:f4:52:7b:3a:11:14:0f:da:db:de:ff:c5:a9:0a:d6:
         cd:80:38:13:37:f3:10:db:5e:5e:db:7f:f8:a0:a6:07:f2:46:
         02:5c:38:38:27:5c:a9:8c:53:4b:fb:a5:08:ad:36:a6:d8:94:
         dd:96:f4:e1:b2:25:25:58:41:59:de:f1:7f:f1:4d:9d:76:40:
         9c:df:36:a5:e7:b4:0c:3c:cf:db:eb:3e:29:c8:f8:11:13:1e:
         43:6e:6d:ba:70:65:f4:8d:a7:52:52:7c:5a:6d:a9:1b:24:ab:
         cf:18:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:35:45 2026 by rpki-client