Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
File:                     N1GNGAkjp_PABlPsErxwK5WquQc.mft (raw, json)
Hash identifier:          Q0HFssykTe5DiA6k/VAiOyLxsvFIEkTH6NxUhUkmgwA=
Subject key identifier:   EE:DC:2F:09:4C:45:B2:47:ED:D6:45:55:AA:F3:5A:F6:8D:6E:EF:85
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       01A10693C1D1371A2E43FB12B2BBD89B8D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
Manifest number:          1AA1
Signing time:             Sun 04 Oct 2026 11:01:48 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:48 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:48 +0000
Files and hashes:         1: 0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa (hash: 2m4aESs63czxZo2vYBxVfxjVRvdupB8O8l9lQzPEA2w=)
                          2: 3CA_xjbJ1P6YXHfVVsGWVFB4gCs.roa (hash: zK8LXwDOyf59NDDJq+8xmskZSra40GHGNPkRZli67vg=)
                          3: 75TrWgQIlP4CMecW1OW7UU9IZMo.roa (hash: caNbijAZLi+KtVhBcZ3qPnTJXoTzawiulVXu3JLB6A4=)
                          4: 85N61DY6T0inNnrqVUCM6sTdgKU.roa (hash: E7jLGUVgfvH6Bf9X/Tr/dhAmN2pO8jtzEzXDclGZ/hs=)
                          5: CNdTcBzMZ55u24gOy0glWWhQMdE.roa (hash: fQE0tHwQADszHQqZQ+JcSAxWLmF+OAK+cl5iGPTYTxg=)
                          6: HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa (hash: MVzp8ZvGYuZNln5avY/Y22gCx9uhBZy1j2SBpcL+mbQ=)
                          7: K5YDcjKsp2dVL85kNUc99-8H_LY.roa (hash: 37fbBMQozX0Gt+Mp8SZBctlx7YgLy/vQjPxsGo+QI+s=)
                          8: L5ffTq-Y_Dj_BVtQB0jbN6KDgdA.roa (hash: oGlqQpGh9aDvO0SynzIgcKUn5dQ1LFONoLWbjoUFleQ=)
                          9: N1GNGAkjp_PABlPsErxwK5WquQc.crl (hash: Rr82FE01UOVbG8vx5qEGhHTSDYAgyBgvdzsmlgLlP0Q=)
                          10: RvptlRoz7dZNI68IZdvH7mBm8PU.roa (hash: nI8eU+z3PKdFC5KvRGewvpft+ZymJe98NoJQga4wo3w=)
                          11: VJgdfznTsn_f_xZjZ51umHkL6uw.roa (hash: 7xW2Iyq3pVc6CY0RorN4xdkGeO++KUCDdJjl3w/fvMI=)
                          12: WLeIUds8vGLhz-4s-M2BUqMdUmA.roa (hash: hglr/CP7f/n2MjswXZoxd8g6eFdOlqFrzVobwOixbnE=)
                          13: YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa (hash: 2GiCR9DrlMnPAIy8JqmZChy4i3F7srvzAZEvAEhTiWk=)
                          14: ZZFgkpJb9-3d5H0yyE1CKj2kAS4.roa (hash: bcEpefxe5eIkjGbIKLrqQ4v0mW0lK/ne60fxBZti+7s=)
                          15: ZsyhHZQApYC324IX6deHBquFOzM.roa (hash: qfjSzNtNlBUdGcFpcHgtoCXLli6zy7XMntKKNqRhvaE=)
                          16: _jxRz5ghYR51tj3YSDdV5TBQiG8.roa (hash: K4LNK7CDIvQy9c2kyItt4EUemEz66wPe77r3oLdb6Qw=)
                          17: b6Erm_E0JfoTsx36MNYwRzVz07g.roa (hash: NfV3UCMt2Glm5Jb7jtkUpB797/TB6fH7J8w06K6ZAwc=)
                          18: bpIa_6QT4jOvr8TOIwvNvhew4dg.roa (hash: okk5Z1OnKJ0iOg84L9exCXciriDbnMhF7qnppEc2wAo=)
                          19: cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa (hash: fnltLcL3o2MOvIVD/pEogcufWVK0PUMmaW5TTkBQQB4=)
                          20: cGw142_-GllO3MDD7QsEH_yskO0.roa (hash: Jv+m0/8ldgJ6xCnUTzb6i9bHjcbA9I/OI6d3NEkAr20=)
                          21: egLaVoMxZdFX5v4UfbEqT7bGdhY.roa (hash: qjp68O26qQszJgWkRCQw2i4Ca5i0MtzroG8izPNHpng=)
                          22: ehMi1MpsSos50ixSq-SkgktFubA.roa (hash: v7e/pMK4iqvprYrX1lZ4kmFd9T3x8khwvouPRxKbv04=)
                          23: fX_omxDUI3xGZOv2xdP1AbphA0g.roa (hash: Z9dBfI9Iw28D8Sqmdj3pQsbSgNBX6YnHt/oYPvO8FtA=)
                          24: fiuDAzI4SIRR_2g3FzHMddSJC80.roa (hash: 95Ucai10ikxenExMaTkLAinB4oSN/m/1cjRDEudlYp0=)
                          25: k4QCd5iCeexS9s3XqEzybIiHXIk.roa (hash: OJ7jYAORVNCUq35Pop73cpRqTyITR/U1sh48mQsiFMM=)
                          26: qYT1lK9TKcXREDGysvCStyVZoVM.roa (hash: HV21dCEh4WPHo/n/QApiPaUdx//e/gqwbQPEK+93u+0=)
                          27: qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa (hash: waXhpbDhDQFEFQ+gAIGqGi8goRYcv+WaYeskXKbjrdM=)
                          28: sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa (hash: aA8zSHT5VSnqP+d0FtT5slL3SDhnzQhEgfOiya9p+Rw=)
                          29: x9pDA55suOaHe2WUqjOleSj0g7g.roa (hash: bgqabssPBjJKwPTFU4cVx8DILsuXbxQh3ehqIdNlubE=)
                          30: yB4JrGbbLBahpCVqUjQ5JMPEoy0.roa (hash: MYbJ3F7lniFZJDJqwCVH0LjInv8BOiDXulKMz+nU15A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:c1:d1:37:1a:2e:43:fb:12:b2:bb:d8:9b:8d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Oct  4 11:01:48 2026 GMT
            Not After : Oct  5 11:01:48 2026 GMT
        Subject: CN=eedc2f094c45b247edd64555aaf35af68d6eef85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:cf:5d:3f:ac:d4:97:9a:a1:1b:46:6f:af:
                    3f:11:05:16:d6:c5:21:a7:ba:7b:8b:f9:95:36:0f:
                    c7:df:7a:e5:aa:d2:0f:e6:bc:b6:56:95:4c:6d:12:
                    d3:34:30:cf:54:58:32:72:97:b8:3e:bd:e5:df:9a:
                    e9:5c:b7:e5:22:e5:5c:37:6f:7f:f2:95:c3:4e:0a:
                    e1:51:c4:8b:a1:28:42:0f:fa:45:09:b0:c9:94:09:
                    ec:55:af:bf:c7:13:3c:40:15:54:b3:aa:e6:04:23:
                    1f:f2:61:f0:a5:cd:56:00:f4:8d:3a:65:df:8d:75:
                    5f:24:a7:a5:27:0d:56:0e:d2:e0:ca:f2:7b:0e:c7:
                    ee:d5:4f:1e:13:ad:86:87:2a:9e:d1:80:54:05:14:
                    d9:19:50:4e:a7:6d:51:06:c4:e5:a8:58:85:62:d6:
                    dd:d6:ed:bb:59:c2:b0:47:0e:b8:ce:24:42:f1:bb:
                    c3:2d:34:c0:cc:8c:ed:f7:e3:2c:8f:fe:fe:ff:10:
                    46:a4:02:ea:f5:d1:81:b5:3e:f6:49:46:ca:22:41:
                    b8:c2:d8:7a:47:20:1e:99:6a:0a:e1:e8:7c:9d:4e:
                    fb:13:69:0f:1a:c1:2e:9c:ce:a7:9c:5e:9f:ec:a3:
                    cb:2c:bf:8d:c1:6f:f2:15:ff:ef:4c:13:14:7d:10:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:2F:09:4C:45:B2:47:ED:D6:45:55:AA:F3:5A:F6:8D:6E:EF:85
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:7d:33:6f:44:f4:02:d8:1c:c1:32:a9:8e:23:29:bb:36:
         a8:a0:35:9d:7d:f2:0e:fd:f1:70:20:34:68:21:68:39:8c:8c:
         6f:bf:be:44:27:c9:82:af:ae:65:06:00:0f:93:2e:ff:f5:4a:
         56:4a:85:c0:79:b0:36:12:ab:61:49:7a:59:71:88:1f:81:a7:
         35:1a:85:ff:19:bf:dc:09:09:fe:75:fd:33:2e:5d:82:85:84:
         e5:a8:81:86:64:27:3f:09:d1:cc:a1:ac:c5:85:b1:5f:d6:51:
         6d:45:c0:a3:07:eb:c0:62:cb:f3:87:13:77:68:4f:69:05:2f:
         5b:46:a9:30:7d:79:5c:b8:d4:d5:ab:92:0d:a0:33:b5:fc:48:
         88:44:72:6f:76:c6:f1:cc:4c:7a:94:dc:f8:4b:d4:5d:a0:13:
         71:79:7b:b3:2c:1e:6f:19:f3:57:6b:74:c3:88:38:3d:16:6a:
         4c:15:84:5e:ac:60:82:f2:5f:5b:c7:53:3b:27:32:c4:ff:4e:
         fe:fa:f0:bf:70:d0:73:df:af:8f:64:c7:3e:64:df:bf:4d:db:
         51:69:2a:74:96:12:1a:6a:16:1e:79:38:6e:09:2b:ec:62:ce:
         6d:96:52:08:8b:4a:04:d2:6b:5f:36:ae:d7:bf:91:4c:7c:d2:
         93:17:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:56:02 2026 by rpki-client