Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          aNFmNvdPRDS/PHTUq+LhE2Ny+2eaY1MscSY/AsTlpyY=
Subject key identifier:   43:8E:15:82:AE:26:54:DA:8B:0D:D5:FC:DB:9D:E0:C8:01:6C:3F:A7
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       01A08BD6700ADE54746CD2199C29529D6DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          10FF
Signing time:             Thu 10 Sep 2026 15:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:21 +0000
Files and hashes:         1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: hvlfj+ahrJVjpbfWuu9EeAFfjzgUDbZrf+27UK2R+mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:70:0a:de:54:74:6c:d2:19:9c:29:52:9d:6d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Sep 10 15:01:21 2026 GMT
            Not After : Sep 11 15:01:21 2026 GMT
        Subject: CN=438e1582ae2654da8b0dd5fcdb9de0c8016c3fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:a0:ee:7c:dd:70:68:fa:97:de:d6:3f:f7:
                    cc:ef:8f:13:a1:30:86:60:37:1f:c6:8f:de:7a:2b:
                    fc:76:57:f9:3d:54:a1:5c:6b:04:68:bd:a3:fd:f1:
                    22:58:8f:79:1b:7f:50:ce:09:a4:bb:50:db:e1:36:
                    3f:17:dd:a8:d7:d2:19:3f:d8:a8:04:95:ca:96:e3:
                    62:73:5a:43:13:67:b5:07:f2:82:23:89:90:a3:cb:
                    77:7d:14:c4:a4:80:2e:1d:08:a3:a5:1d:31:e7:99:
                    16:b7:a9:d2:af:ad:66:70:21:02:68:da:45:02:10:
                    fe:d0:5b:9d:7f:03:cb:5e:3d:88:42:70:41:bc:15:
                    6e:50:36:7c:b4:0c:0e:77:93:ae:fd:09:3d:a3:cf:
                    08:dd:be:5d:1b:25:1d:b8:1a:6e:cb:f6:9a:d7:e9:
                    a2:d4:9c:7b:3d:f9:b2:d7:50:50:78:0a:13:3d:25:
                    c8:91:9e:6e:2e:e4:8a:4e:e1:59:30:3c:97:45:12:
                    a0:29:22:89:11:87:25:17:3e:77:87:c0:0d:10:d8:
                    52:da:bd:fd:c9:85:93:a7:8e:07:75:43:e2:61:e6:
                    5d:c0:94:af:62:c3:12:27:72:d3:96:e3:b0:a0:05:
                    7b:03:26:ea:78:99:2b:a6:1e:54:eb:59:81:5e:90:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8E:15:82:AE:26:54:DA:8B:0D:D5:FC:DB:9D:E0:C8:01:6C:3F:A7
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:26:4b:9b:c9:49:c2:cc:33:55:ca:56:27:39:9b:64:e9:0e:
         4c:4d:f2:df:13:af:17:41:7b:ca:40:49:f3:f9:d6:8e:4a:e8:
         49:14:3d:f3:c5:c8:90:28:bc:e8:13:88:2e:af:08:a9:29:64:
         55:c5:d8:4c:ea:b9:21:4c:22:09:59:d4:56:04:a8:df:62:e8:
         0d:e2:5e:d3:15:c7:57:ea:fe:5c:97:ce:71:e0:a4:48:80:0c:
         a6:c1:08:10:9a:3f:ea:76:72:68:57:bb:f0:03:23:31:12:8d:
         22:ab:90:52:44:80:dc:22:94:5c:72:fe:76:54:45:d0:61:58:
         c1:08:fa:f3:93:c8:8a:7d:6a:53:ab:0c:a8:45:c3:ac:8b:ca:
         b3:da:3f:c6:06:bf:0a:4c:04:df:87:2d:cd:fe:74:80:16:60:
         b8:67:8c:82:96:be:8c:a3:66:25:cc:79:3c:64:7c:a6:5a:b3:
         91:6c:67:a8:1a:f8:92:75:97:36:c4:d4:8f:4f:80:4e:fa:c4:
         77:6f:37:b8:de:7d:2b:5e:72:4f:31:cf:df:8c:62:4a:8a:fc:
         f9:0a:eb:99:7b:8c:4b:3f:59:c6:2f:64:d1:b0:97:44:00:5b:
         2d:d2:ce:5d:3d:0b:29:47:a1:24:73:bb:c7:c5:97:8b:d1:19:
         1d:0e:fe:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1nAK3lR0bNIZnClSnW3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl
NTU0NzMwHhcNMjYwOTEwMTUwMTIxWhcNMjYwOTExMTUwMTIxWjAzMTEwLwYDVQQD
Eyg0MzhlMTU4MmFlMjY1NGRhOGIwZGQ1ZmNkYjlkZTBjODAxNmMzZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSg7nzdcGj6l97WP/fM748ToTCG
YDcfxo/eeiv8dlf5PVShXGsEaL2j/fEiWI95G39Qzgmku1Db4TY/F92o19IZP9io
BJXKluNic1pDE2e1B/KCI4mQo8t3fRTEpIAuHQijpR0x55kWt6nSr61mcCECaNpF
AhD+0FudfwPLXj2IQnBBvBVuUDZ8tAwOd5Ou/Qk9o88I3b5dGyUduBpuy/aa1+mi
1Jx7Pfmy11BQeAoTPSXIkZ5uLuSKTuFZMDyXRRKgKSKJEYclFz53h8ANENhS2r39
yYWTp44HdUPiYeZdwJSvYsMSJ3LTluOwoAV7AybqeJkrph5U61mBXpB8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOOFYKuJlTaiw3V/Nud4MgBbD+nMB8GA1UdIwQY
MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt
MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk
LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSZLm8lJ
wswzVcpWJzmbZOkOTE3y3xOvF0F7ykBJ8/nWjkroSRQ988XIkCi86BOILq8IqSlk
VcXYTOq5IUwiCVnUVgSo32LoDeJe0xXHV+r+XJfOceCkSIAMpsEIEJo/6nZyaFe7
8AMjMRKNIquQUkSA3CKUXHL+dlRF0GFYwQj685PIin1qU6sMqEXDrIvKs9o/xga/
CkwE34ctzf50gBZguGeMgpa+jKNmJcx5PGR8plqzkWxnqBr4knWXNsTUj0+ATvrE
d283uN59K15yTzHP34xiSor8+QrrmXuMSz9Zxi9k0bCXRABbLdLOXT0LKUehJHO7
x8WXi9EZHQ7+qg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:03 2026 by rpki-client