Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          7R1jCgcHM0MuhyMv7IvsUd37U5h2ND8O4j0Enh4p7N4=
Subject key identifier:   94:ED:93:D5:1A:30:55:E5:9E:09:E3:F6:40:EE:77:23:75:E9:72:3F
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       01A17B4D79FFBF9ADBB251CBB662D225654A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          117B
Signing time:             Tue 27 Oct 2026 03:00:37 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:37 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:37 +0000
Files and hashes:         1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: poDzv4icTszZyojtzkOVQbYq9/v/MJTHk3A4JeQhLa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:79:ff:bf:9a:db:b2:51:cb:b6:62:d2:25:65:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Oct 27 03:00:37 2026 GMT
            Not After : Oct 28 03:00:37 2026 GMT
        Subject: CN=94ed93d51a3055e59e09e3f640ee772375e9723f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:48:8a:35:07:8c:df:7e:33:3d:bd:33:6c:
                    40:e5:86:9b:65:94:38:d4:f4:06:ac:43:63:72:22:
                    87:bd:64:39:9d:fc:71:a5:63:47:ba:ac:59:d0:ee:
                    79:8f:29:e8:99:45:e3:4b:ad:70:26:17:9e:ab:c2:
                    6f:de:5b:c1:ad:84:80:da:20:f6:69:94:84:86:1b:
                    ee:92:fa:8e:4f:0d:93:9a:9f:5e:bb:74:c2:18:7a:
                    05:d8:84:ee:e6:6b:d4:13:f1:e0:39:b5:78:a7:88:
                    09:d9:f2:8e:94:92:6d:41:ca:58:37:bc:3e:da:6f:
                    af:a3:3b:0a:ea:bf:e0:e2:92:3a:83:ee:0e:e8:02:
                    2a:14:86:ba:2d:45:a4:00:52:5e:83:ba:57:d8:d2:
                    3b:d8:09:98:31:46:1f:9a:14:c8:5d:40:fb:0d:c8:
                    7a:f3:55:ad:33:88:0f:d6:c5:0d:ef:34:74:f5:c1:
                    37:21:6d:ff:f4:00:f4:03:4a:49:c8:30:14:04:f4:
                    9e:6c:b6:ce:66:0d:06:90:d4:1a:1c:b0:9f:94:41:
                    87:4d:23:da:4f:05:85:39:bc:35:9f:21:34:72:de:
                    6d:03:20:a6:c2:ec:1a:8e:9b:6b:c8:fc:0d:81:22:
                    f8:75:89:7e:7b:cd:46:a0:6d:72:26:0f:f4:6f:5f:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:93:D5:1A:30:55:E5:9E:09:E3:F6:40:EE:77:23:75:E9:72:3F
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:34:5e:51:9c:2b:5c:27:c7:54:21:77:a0:c9:d5:84:29:1e:
         7a:bc:69:45:b0:25:94:f3:c6:f4:c1:d6:be:45:1e:09:a7:3c:
         2e:97:43:99:d3:5a:24:8c:b3:58:43:49:d3:0c:ce:1c:15:e3:
         8e:c8:13:9d:98:2e:4b:74:95:23:fa:5f:97:cb:d8:10:c0:87:
         42:06:7c:c6:c6:b5:18:10:a0:fc:5e:a4:61:a0:8b:27:9b:0f:
         0d:ba:58:b4:8e:e6:6a:a1:eb:50:d3:c5:c2:3d:94:97:15:d0:
         fd:22:66:16:fa:8c:c5:05:a6:15:eb:bf:d1:31:e8:ea:a9:b2:
         57:ed:b6:d5:60:49:71:96:1f:cf:66:43:d9:7d:3a:a5:42:73:
         a7:e2:4f:00:d8:cd:8d:0e:45:b8:44:b7:e2:2d:64:c4:06:bf:
         06:4e:97:a9:18:79:d0:84:b9:1a:2a:5b:22:49:84:f7:11:90:
         df:72:e3:2c:a2:78:16:c4:7b:04:8a:bd:fc:68:b0:c7:c5:e2:
         b4:d4:44:9c:e6:ea:e5:33:d9:19:51:8c:98:eb:9c:67:70:4e:
         4d:af:a1:81:9a:0f:1d:39:37:05:47:75:05:d3:b7:b0:9e:07:
         c4:b3:e4:82:c9:e9:2e:73:d8:cb:3c:ed:41:8d:81:87:2c:ef:
         fe:dd:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:21 2026 by rpki-client