Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          PLA4gKYgXxN8TYuTzacGKJ7XRXx5iUJzE+RqzzP/EF0=
Subject key identifier:   02:7F:57:B7:11:0A:F0:86:71:79:37:42:4C:59:2D:53:32:02:93:93
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       01A17C292374E6768814828A5C236A049832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          0D4E
Signing time:             Tue 27 Oct 2026 07:00:33 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:33 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:33 +0000
Files and hashes:         1: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: gXynzR80hxt/O++QtIMIpweNH8stBDXjjQXn13+8fJ4=)
                          2: P9oU8l4hJSdNb2cRdixd2FnzViw.roa (hash: CgDo7X7BhUNB3k1XMsCieKRq+wkse0U7IlgpY0Oyr+4=)
                          3: X30d4L9HwoFcQSCZOPGT8fzFSUk.roa (hash: RqJT0G3LIofj7mqU4OcHwIwo8yHwTlkJsfy4x6YteKE=)
                          4: YTl2wkQfDFdQtN71h5K-qw3EztM.roa (hash: z25IOf5DaazAZ0jaAF7FfOCUfonWoXfC3l+JaU4GRgc=)
                          5: fBEXs-dTnmKjIiNwEfni1rhj8-0.roa (hash: tYbmFJdA3qGjmuXRVTxySeGXojO7ROAd1nbv5cqUyhg=)
                          6: p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa (hash: vehfkPlYhyK0yYpwudREOkhweLKXbX+0n9mqb4hiUck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:23:74:e6:76:88:14:82:8a:5c:23:6a:04:98:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Oct 27 07:00:33 2026 GMT
            Not After : Oct 28 07:00:33 2026 GMT
        Subject: CN=027f57b7110af086717937424c592d5332029393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:70:05:56:49:e1:e6:c4:6e:b9:69:36:4f:
                    c1:59:61:b2:0d:33:23:34:8b:3a:c5:4a:1c:02:25:
                    e7:10:a5:7a:c2:cf:2f:6b:2b:3e:b9:19:4c:81:0f:
                    11:a4:9a:6e:91:0f:15:51:18:dd:51:e1:e0:72:b4:
                    a0:c0:59:60:6b:18:82:ae:9f:eb:fe:cc:66:36:36:
                    5f:67:69:f9:15:8b:9e:87:89:67:69:a9:e2:4f:af:
                    1a:46:fd:dd:13:a2:ee:e0:f1:88:ca:ca:45:df:3e:
                    9e:af:04:50:d1:43:fb:aa:96:04:e8:40:60:50:bd:
                    3b:b1:bc:52:1e:15:e5:00:34:af:d7:f6:53:1e:83:
                    47:55:d9:d6:05:77:69:f0:bd:d6:68:ae:29:9e:5c:
                    9d:13:ca:b5:88:5d:59:7e:7e:d5:ac:94:fc:ca:59:
                    5a:d7:c8:bd:c7:56:f5:29:71:68:16:be:8d:3c:d9:
                    e3:17:a1:bf:f8:99:09:4b:f2:d8:c9:08:ab:b4:15:
                    ce:ce:d5:bc:a2:38:9f:f7:26:a3:12:eb:57:db:d9:
                    58:27:2e:cd:31:5c:da:23:93:0e:b9:e2:d2:34:bd:
                    95:e7:cb:2e:fb:30:33:60:c3:f3:ce:e5:8f:0d:1a:
                    82:2e:70:82:71:4e:57:64:e9:74:05:91:01:ca:6c:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:57:B7:11:0A:F0:86:71:79:37:42:4C:59:2D:53:32:02:93:93
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:fa:ff:0b:a1:9f:08:2e:e8:f3:bd:50:ae:0a:7a:60:4f:
         e6:92:0e:55:bd:9b:4d:49:9a:56:6a:f3:92:6a:f7:2e:ac:16:
         02:99:ae:d2:bc:ff:e5:fe:dd:4a:08:97:1d:4d:ed:b4:37:a0:
         00:12:45:9e:39:0b:7a:7b:41:8f:5d:62:1b:9c:e2:e1:1b:20:
         31:76:e3:b3:0b:a1:aa:4e:3d:f5:d4:a1:34:4f:b5:24:c3:74:
         f8:a7:17:fa:be:0e:df:d4:91:d1:c0:c8:6d:2a:43:4f:45:77:
         7a:78:48:ba:a7:6d:ce:f1:c4:85:0a:7c:5c:6f:3e:3a:ad:7f:
         3f:1d:71:58:bd:b6:02:ce:de:5a:1f:38:b1:c0:b8:da:45:ef:
         b7:0a:a3:dd:c8:c4:ae:0e:09:2e:0b:f9:9f:49:83:b3:67:60:
         85:6e:1f:55:04:4d:bc:0d:20:48:c2:5d:01:7a:23:38:df:d4:
         ad:e2:22:f7:07:07:e6:2e:ab:2e:ae:d3:b6:f7:9a:60:03:5a:
         2c:1f:06:cc:66:a0:04:0a:2b:c2:e8:a0:fe:29:30:de:d6:0f:
         29:aa:80:df:c9:66:10:9b:bc:fb:17:3e:9b:a3:20:9a:21:d4:
         f8:8d:ee:a2:2a:38:f2:2d:8e:61:9e:b8:47:8f:ee:fb:cf:9b:
         d8:af:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:12:20 2026 by rpki-client