Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File:                     NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier:          iYqX8U7sIMg+Zq5Q7tW+DlW7QK3lRypjngrYfwtU9lI=
Subject key identifier:   57:2C:8E:8B:EB:FD:E7:14:A6:A9:42:DA:8D:11:CB:50:56:4E:4C:F1
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer:       /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial:       01A17438FFF70A46A461FC797E9A2A8F9919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number:          0E96
Signing time:             Sun 25 Oct 2026 18:00:54 +0000
Manifest this update:     Sun 25 Oct 2026 18:00:54 +0000
Manifest next update:     Mon 26 Oct 2026 18:00:54 +0000
Files and hashes:         1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: HV/GvkM5KnRLk1nfUTzd+mVt3yeKVygiitEl6zciP8c=)
                          2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
                          3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:38:ff:f7:0a:46:a4:61:fc:79:7e:9a:2a:8f:99:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
        Validity
            Not Before: Oct 25 18:00:54 2026 GMT
            Not After : Oct 26 18:00:54 2026 GMT
        Subject: CN=572c8e8bebfde714a6a942da8d11cb50564e4cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:61:51:57:2c:5d:27:d9:9b:96:7b:3d:e3:
                    5a:b8:69:d9:24:0b:91:73:3b:91:11:c7:91:2e:46:
                    d7:c5:cf:1f:09:aa:6c:5f:95:73:9e:26:5a:37:de:
                    28:cf:e0:2d:db:e1:45:e2:78:e7:2a:f0:3f:e1:76:
                    63:c6:b4:e0:9e:f1:54:b6:e3:9e:d5:2e:6f:5c:15:
                    76:d8:9b:77:a8:ba:e8:6d:83:b9:c5:10:76:ba:d2:
                    06:2f:d0:17:87:31:52:53:66:71:f4:64:18:9b:e5:
                    1c:f6:b1:c0:b5:12:04:48:73:78:90:d5:b9:23:22:
                    86:d2:39:06:41:59:77:6f:c0:f6:fd:ab:f7:f9:e4:
                    39:ec:0d:cd:c8:a5:7e:93:6e:9a:dc:88:ed:57:9c:
                    e0:7c:12:28:4a:64:84:14:55:dd:e9:ad:ea:6b:01:
                    c6:60:92:33:57:c4:ab:9b:27:53:ba:63:7e:98:e8:
                    a5:2a:c4:26:55:98:0f:8e:ee:9d:a6:bc:b2:30:b4:
                    f2:6a:80:1e:1e:4b:f7:8b:1c:e2:1b:e7:34:6b:a9:
                    10:db:da:52:f4:8c:a3:18:b4:61:df:4e:91:a2:a5:
                    c4:a8:8d:17:47:2e:64:5e:ba:7a:2b:3c:d4:53:ca:
                    13:5a:70:58:26:22:88:7c:ed:71:fb:67:fd:8b:a8:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2C:8E:8B:EB:FD:E7:14:A6:A9:42:DA:8D:11:CB:50:56:4E:4C:F1
            X509v3 Authority Key Identifier:
                keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:bc:f1:e2:65:7c:b6:92:fc:53:d5:86:25:54:6d:36:c5:
         24:30:2d:23:e4:02:b2:a1:5b:8f:a6:14:54:49:75:c1:59:ec:
         e9:a8:94:b7:5e:c1:0a:02:8a:d4:3c:40:03:5b:08:57:2a:6b:
         cb:cf:94:b9:af:15:dd:58:30:1b:5b:d9:bd:c5:b9:6b:c9:57:
         c4:3f:a4:03:c0:dc:20:7d:c7:5f:dd:db:c1:e5:56:37:81:42:
         1c:79:f0:32:47:2f:b4:d2:74:5a:a1:5b:61:29:fd:8f:78:24:
         6f:1b:e7:2f:ed:46:2d:3c:e5:c6:30:01:15:f4:62:24:05:45:
         c5:5e:af:ee:dd:2b:09:12:a7:45:d1:54:ef:c5:44:aa:78:33:
         d9:e7:7c:15:83:75:cb:f1:0d:58:d8:2f:cb:32:ea:86:1d:4f:
         19:d0:b1:e4:3d:27:83:24:98:07:d3:3a:da:18:30:5b:29:cc:
         04:87:33:13:2a:4a:32:9c:88:65:5d:e7:e0:54:e0:d0:b6:36:
         06:48:7e:ac:74:05:e8:2e:d9:10:32:8c:99:63:c5:ed:24:e1:
         48:2b:ad:82:d7:48:e4:41:c7:8c:42:0e:76:a2:b8:13:b6:31:
         2a:86:a0:6f:27:56:0e:ce:d8:7d:48:94:7e:ed:aa:56:a8:21:
         46:b0:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:04:10 2026 by rpki-client