Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
File:                     n6smdTuJXn8_2bhglc4E7j4TLMk.mft (raw, json)
Hash identifier:          zhJLifsgh7WW/9mldgpl4S74zn32GwRjZ9lEaU3y1lo=
Subject key identifier:   48:E2:E4:8D:44:9D:1A:C4:85:B2:BD:93:78:95:77:96:5F:B4:9B:21
Authority key identifier: 9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
Certificate issuer:       /CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Certificate serial:       01A18608C7E4BDD4D1D54ACAE0DA676563BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
Manifest number:          03B5
Signing time:             Thu 29 Oct 2026 05:01:24 +0000
Manifest this update:     Thu 29 Oct 2026 05:01:24 +0000
Manifest next update:     Fri 30 Oct 2026 05:01:24 +0000
Files and hashes:         1: VRtorJZHOLzlaL68HjLyyfhrnjM.roa (hash: 0WG5QGGc5ZdP1oBMABkKf9EHRt8+XEO8wLQn99x+rtA=)
                          2: n6smdTuJXn8_2bhglc4E7j4TLMk.crl (hash: KnPjFysDQXAkmKb+28ycCTanLdPC9rbx7uOgORspi8M=)
                          3: nvBQcelYduDd4tm56B5pe90gDS8.roa (hash: 9vccNXYdmTE6+uGQ5rqwpKVFpAfbWEPJIhtoTGi6STQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:c7:e4:bd:d4:d1:d5:4a:ca:e0:da:67:65:63:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
        Validity
            Not Before: Oct 29 05:01:24 2026 GMT
            Not After : Oct 30 05:01:24 2026 GMT
        Subject: CN=48e2e48d449d1ac485b2bd93789577965fb49b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:84:19:67:61:7a:e9:29:ac:2c:f6:47:d0:
                    15:83:ed:70:3b:0c:1a:35:35:8c:06:82:36:5a:4b:
                    23:48:15:8c:03:bd:42:11:c5:4f:58:00:b5:4f:ea:
                    98:75:48:7d:06:f7:46:39:42:b7:56:b6:c3:1c:eb:
                    b2:75:ab:a2:44:c6:f6:ce:d3:4d:60:e3:e5:f1:fc:
                    5a:36:35:eb:36:08:bf:59:b0:f2:03:31:35:2c:da:
                    8b:c7:d2:38:fb:07:37:ad:67:71:f0:8f:a2:8b:64:
                    33:87:26:e2:7c:23:45:2d:b4:25:29:14:61:5b:7e:
                    98:64:0a:27:81:6c:dd:4d:e9:33:cd:32:e7:c9:c3:
                    44:7b:ef:45:d3:55:77:26:2b:a2:d5:2f:55:df:42:
                    d5:85:e1:c2:b0:8a:e1:e9:bf:b2:7e:2a:1b:20:7d:
                    7b:2d:23:f0:e9:b2:a9:41:e0:4c:df:fc:d7:04:b1:
                    a9:6b:b1:a7:19:51:24:92:f0:72:66:74:be:21:f2:
                    47:31:da:f1:b2:60:7d:57:c1:49:9e:9d:cb:82:ea:
                    26:fe:af:4c:e0:f9:e6:4d:f3:c9:dd:2a:3c:52:f0:
                    b0:c7:1e:85:eb:d4:a2:25:f8:f0:81:e0:f1:cd:d4:
                    d8:c6:cf:31:a6:bf:3c:39:86:de:dc:3b:98:c2:e9:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E2:E4:8D:44:9D:1A:C4:85:B2:BD:93:78:95:77:96:5F:B4:9B:21
            X509v3 Authority Key Identifier:
                keyid:9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:2a:73:a8:0b:61:26:07:7a:1e:1d:86:45:d6:eb:6d:e7:53:
         06:09:08:b9:9e:7e:96:cc:8f:c8:5b:9a:d8:31:21:0e:13:94:
         ed:f0:b8:09:4f:61:fd:0b:20:29:48:d7:2a:4e:ba:0b:ae:13:
         fb:fc:ce:46:3e:36:54:65:77:8d:9f:67:05:1a:df:2c:53:21:
         27:73:05:8a:81:51:85:51:6b:1e:5c:5d:70:29:41:07:4f:0a:
         0e:cb:0e:5e:13:42:5d:d3:fe:8d:f0:ef:12:75:f6:e6:62:c8:
         e2:0d:f5:d4:4b:35:8a:61:12:55:b8:6e:d3:5b:6f:91:fc:a5:
         60:88:41:c7:af:14:34:3d:04:27:1d:d1:22:20:62:6e:d5:f2:
         03:e1:21:79:fb:66:ce:c7:ad:17:84:b3:5c:2b:a1:0f:93:32:
         0e:e3:9a:52:c0:42:bb:16:3d:7a:30:5b:12:b9:35:e5:aa:f3:
         f0:39:92:cc:b5:12:dc:09:71:88:61:5f:a2:e0:90:49:8a:8a:
         8d:7c:0b:10:e9:e5:65:05:c2:e5:a2:31:71:7b:51:b4:9f:2e:
         0e:2f:b9:c0:ca:29:b1:0e:05:8f:fa:bb:13:d8:b1:e0:79:d6:
         cf:06:c2:36:dc:8d:76:f3:d2:f8:c7:35:28:e4:36:05:e5:a8:
         e2:33:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:44:30 2026 by rpki-client