Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          ecZuCW6R/5rjwHsXV9fXiktSLNwyEwRJecA7M1JSzdk=
Subject key identifier:   37:67:DD:61:A4:7A:B7:28:B1:69:77:02:9D:E5:9C:BF:CD:77:6D:B8
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       01A190550940C3806F7935C687C3C072FC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          1102
Signing time:             Sat 31 Oct 2026 05:00:54 +0000
Manifest this update:     Sat 31 Oct 2026 05:00:54 +0000
Manifest next update:     Sun 01 Nov 2026 05:00:54 +0000
Files and hashes:         1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
                          2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: DIyQEF76rAYfONsoA+KzXT2faPq5M0TNwcAaEcbJT/c=)
                          3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:55:09:40:c3:80:6f:79:35:c6:87:c3:c0:72:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Oct 31 05:00:54 2026 GMT
            Not After : Nov  1 05:00:54 2026 GMT
        Subject: CN=3767dd61a47ab728b16977029de59cbfcd776db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:9b:b5:5f:2a:47:11:15:a8:97:ea:b6:de:
                    53:e4:db:19:bb:ae:11:ce:f9:89:cb:dd:1e:a2:a3:
                    9b:18:25:bd:c0:4b:f9:d2:7f:7a:af:21:55:ed:bd:
                    0c:31:a6:66:76:21:b3:4e:08:56:ed:5f:ea:49:8a:
                    e0:20:61:e2:f0:9c:8f:f3:09:08:1e:01:b1:72:4e:
                    bc:94:e4:fa:41:0a:85:bf:05:cd:c5:30:00:3b:72:
                    d2:bc:9f:2b:85:6b:ad:c4:e5:7d:3c:dc:56:ae:ee:
                    76:9e:83:47:13:67:b5:13:e3:2e:d4:65:7e:3e:bd:
                    51:61:dc:a0:88:08:3c:a1:79:23:a3:13:59:2c:90:
                    a8:39:07:3f:ac:fd:0a:ae:99:28:00:00:25:2c:fd:
                    d2:7d:22:2f:5d:be:06:86:48:d5:90:84:13:09:c4:
                    fe:b3:b8:72:77:a9:5e:36:51:f7:a5:ab:52:a3:ed:
                    a6:dd:cb:4b:ed:93:b6:fe:c4:70:70:c0:01:18:70:
                    d1:ba:79:d8:64:76:9d:e6:23:e3:ff:09:9a:b3:35:
                    3d:d3:c1:46:5a:70:1b:c4:6e:7a:34:98:f7:9c:e9:
                    bb:d3:b4:a2:8b:fe:59:7f:2f:68:d3:1d:7c:44:eb:
                    21:e4:85:61:b6:ef:5a:71:43:f8:d9:31:79:c1:cc:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:67:DD:61:A4:7A:B7:28:B1:69:77:02:9D:E5:9C:BF:CD:77:6D:B8
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:11:1c:de:ce:a4:f5:e1:eb:c5:f0:20:08:e1:02:54:af:2a:
         aa:97:2b:89:e8:ea:70:b4:e4:85:d3:87:80:87:d1:ea:e1:8c:
         f1:b3:cb:fd:e1:1e:37:26:9b:4e:02:de:3c:a1:01:93:08:76:
         d5:bc:7d:4a:b1:30:24:bd:e2:c5:f3:09:5b:10:c1:22:d4:c2:
         d4:47:45:56:a5:ae:39:55:ec:f2:24:92:5a:48:1a:94:41:97:
         fe:fd:f5:ba:57:df:e8:b9:f5:ef:f5:60:b1:89:19:53:9c:01:
         54:d4:4a:bf:29:b6:8c:3b:09:1b:ea:d7:f2:91:44:7a:f8:7e:
         06:ae:6f:92:7a:6f:b0:91:b8:f9:fc:ab:02:1c:f7:54:4a:69:
         20:e2:30:f7:f8:ad:e9:9f:ca:27:f5:fd:6a:19:96:ef:5b:8a:
         28:9a:c2:c3:4f:da:d2:ee:80:ad:45:96:90:ad:c1:74:d5:0f:
         02:27:c7:31:ee:e5:3a:11:40:27:97:79:d9:97:62:70:b1:b2:
         49:ab:1e:40:02:5b:b7:81:31:24:e0:7a:84:ed:5d:a8:82:c0:
         ab:cd:2a:8b:81:56:79:e9:13:a2:e3:7f:0d:9d:fa:7e:18:24:
         7a:a8:6c:e3:de:42:79:eb:c0:06:ff:21:04:22:b1:0f:b2:aa:
         2b:ec:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:49 2026 by rpki-client