Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          2vG5gIjxfPUzL25ttVvnIvRB/aKCP3AWv9sdEeoImOk=
Subject key identifier:   D6:D9:25:CF:25:E9:8E:CE:DB:5F:92:3F:69:BE:C1:E6:89:7E:9A:04
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       01A1697E7286E09F70D17A92733B7CBFF276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          1A4C
Signing time:             Fri 23 Oct 2026 16:00:56 +0000
Manifest this update:     Fri 23 Oct 2026 16:00:56 +0000
Manifest next update:     Sat 24 Oct 2026 16:00:56 +0000
Files and hashes:         1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
                          2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: Ef92X/LND3sPipYz47yd/c6D6ZYLtTP5zWabWpXbh8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:7e:72:86:e0:9f:70:d1:7a:92:73:3b:7c:bf:f2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: Oct 23 16:00:56 2026 GMT
            Not After : Oct 24 16:00:56 2026 GMT
        Subject: CN=d6d925cf25e98ecedb5f923f69bec1e6897e9a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:c1:4f:83:7c:6a:35:f5:20:1c:3a:c0:86:
                    a6:9a:58:9f:b0:ff:6f:9f:83:53:de:4e:5a:a2:ad:
                    30:c6:3b:85:47:9f:d4:f6:17:89:c7:b5:4f:04:08:
                    a0:e3:c3:06:37:66:1f:cb:5b:82:5f:4f:56:d7:9a:
                    d1:07:62:d5:29:11:7a:83:28:bc:fe:09:bd:7f:4e:
                    dd:9b:cf:f3:9e:02:44:47:a1:a2:9f:f9:e6:49:12:
                    df:ea:b7:7d:df:ec:af:89:da:e8:88:3e:17:b6:20:
                    e8:e3:fc:08:48:e3:a3:e4:3c:e1:0a:04:e9:16:1d:
                    3f:c0:8a:49:fa:48:90:43:41:9f:bb:54:5d:06:2e:
                    b5:c2:80:ad:d7:a8:12:eb:58:bc:a8:ad:1d:31:0b:
                    f0:3a:05:9b:41:a1:80:e9:da:1d:cb:43:1b:41:0b:
                    d8:8b:e2:d7:50:59:96:93:97:68:9e:fa:7e:5e:c4:
                    2c:e4:a0:77:d9:9e:6f:9d:a9:7d:1d:e5:9e:76:40:
                    46:f7:49:b6:94:8e:57:2a:37:27:97:1d:85:00:b5:
                    a3:5e:60:c3:ce:a6:45:80:25:44:fd:0f:0f:e9:63:
                    b6:c4:33:12:49:9d:93:f4:0d:62:b4:f4:82:aa:55:
                    65:a6:d7:2b:51:67:22:74:36:78:55:94:fb:61:34:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:25:CF:25:E9:8E:CE:DB:5F:92:3F:69:BE:C1:E6:89:7E:9A:04
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:45:47:fc:68:73:31:9b:2a:38:6d:d0:47:6b:54:1b:3b:
         de:2d:6a:29:77:26:b9:27:27:e9:52:ea:97:3e:25:00:1e:3c:
         c3:29:ac:3b:79:c3:fb:99:bd:12:24:09:8e:eb:b6:4d:8a:9b:
         e6:0e:d8:83:11:aa:80:f3:1d:62:6b:db:b7:2b:e3:bf:48:bc:
         2a:31:28:95:26:6a:9a:6a:aa:5a:25:51:50:52:b9:64:85:22:
         f4:0b:c4:fe:9a:20:ba:b4:92:4c:cc:f1:07:9c:fd:03:03:72:
         aa:19:49:80:d5:74:72:3c:73:32:30:23:80:bf:d4:aa:f5:bd:
         c3:2f:c3:92:62:36:eb:32:91:b0:93:3f:ea:2f:94:9c:3f:d0:
         24:73:04:df:92:b0:46:5b:31:22:06:3b:34:e7:31:f6:bd:89:
         bd:bd:50:62:d7:96:7d:6c:63:ef:f5:1b:0a:3f:6e:b6:26:f6:
         9a:d6:9a:78:fe:70:fc:91:79:e9:30:9c:14:63:d4:3f:33:e6:
         66:ca:1e:50:9a:ca:df:20:14:10:c3:8a:fa:93:fb:0f:1d:48:
         70:50:34:ae:88:5d:8c:13:11:f3:1a:f6:e2:2f:d5:38:e2:c6:
         5c:7e:3b:0e:76:c1:74:58:2d:c2:69:d9:17:32:aa:5c:ff:92:
         df:49:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:05:39 2026 by rpki-client