Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          Be/UcRNlSJL1LkjCkWUfOaRUuyzfZ8Q3k0gCRaVtTkw=
Subject key identifier:   45:DF:AB:0C:78:6B:AD:2A:CF:A7:76:8B:FA:52:8F:66:EF:99:E7:4C
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01A18FB03EC40C13E8C3B389CD55CACFB5EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          1ACE
Signing time:             Sat 31 Oct 2026 02:00:54 +0000
Manifest this update:     Sat 31 Oct 2026 02:00:54 +0000
Manifest next update:     Sun 01 Nov 2026 02:00:54 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: xotFL8fgZTwf1at6tqbLXYS46czA56+MNHJIe6/cLWE=)
                          2: ahNLR_0oS-0t1YKVBOVdbZiSYPY.roa (hash: fNNDUa3v8ykCEP/CD6DhZGRwmawCEdvB1zOAi4jYge0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:b0:3e:c4:0c:13:e8:c3:b3:89:cd:55:ca:cf:b5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Oct 31 02:00:54 2026 GMT
            Not After : Nov  1 02:00:54 2026 GMT
        Subject: CN=45dfab0c786bad2acfa7768bfa528f66ef99e74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:f1:5b:bd:a4:7c:eb:f2:0c:14:25:e8:b8:
                    d7:9e:8a:ad:4a:59:c7:86:1e:f5:b6:ee:ea:94:35:
                    cd:0b:dd:e9:1b:79:7e:2a:02:4f:61:75:4d:83:26:
                    b2:41:f2:75:60:d7:03:c5:7b:39:41:3d:7d:36:13:
                    c1:de:ad:2b:b5:0e:a6:71:65:07:d7:d3:26:09:6a:
                    74:e7:74:22:11:f6:79:e5:45:e1:24:59:f2:d3:aa:
                    ff:7c:c4:57:4d:36:21:f1:c2:83:46:ba:1b:39:40:
                    52:1e:35:00:4a:e9:b0:c1:8d:19:fc:40:bc:37:6e:
                    8a:62:9f:2a:94:8e:18:9e:dd:45:87:62:1c:b3:5c:
                    f3:5b:27:95:0c:e4:a1:b8:7e:cd:9d:38:98:7f:82:
                    ac:f4:09:8c:a2:8d:c1:82:a7:4c:e8:00:59:31:45:
                    b9:2e:74:1a:6e:e2:c1:af:41:fd:f3:76:07:ba:ec:
                    e2:b7:b6:a6:e9:3e:dd:e3:cb:28:7c:36:2b:43:92:
                    74:a2:be:9d:a4:eb:fa:63:3b:1c:52:d5:dd:dc:d1:
                    81:6d:bf:e3:3b:ef:ee:4f:9c:71:21:2c:d4:26:fc:
                    61:4c:6c:e7:0b:a8:fd:ac:30:4c:67:58:da:74:a0:
                    62:e8:48:b6:44:72:95:45:b6:88:9e:a1:d7:9f:28:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:AB:0C:78:6B:AD:2A:CF:A7:76:8B:FA:52:8F:66:EF:99:E7:4C
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:56:e4:54:39:62:fa:d8:eb:3e:75:8c:fb:f6:2f:ce:c3:
         49:25:6a:3f:42:50:58:f5:ab:69:a4:f2:8d:44:1f:49:ff:e0:
         de:a9:e7:78:bc:b1:c8:d0:38:7c:7f:f7:67:cc:14:88:ba:ab:
         ba:6c:63:89:28:dd:cd:80:a8:f0:10:87:91:c7:f5:5a:08:72:
         68:bf:0e:88:3d:10:dd:86:be:ec:15:d6:c9:18:c4:b8:45:f0:
         2c:5a:ff:35:92:e8:8a:db:df:59:13:35:62:5e:bc:80:61:cc:
         14:e6:fe:f0:ad:62:54:81:cb:b7:ca:65:89:bb:e6:1a:75:2e:
         06:22:09:2d:de:b9:40:f7:1c:da:92:10:dd:47:38:79:41:74:
         91:9d:70:05:e1:14:79:cb:7b:33:92:de:22:db:a9:25:e7:54:
         3d:0c:9f:89:6b:d4:9d:09:56:f9:ae:e6:6d:87:eb:51:51:8f:
         ac:aa:ea:9c:ce:55:ec:47:ad:9c:1e:76:1a:2e:aa:55:99:d3:
         b4:b1:85:b4:f3:5e:25:de:08:9c:32:e3:98:1f:01:d4:43:9c:
         64:9e:9b:7f:c3:a9:b8:c5:91:f7:55:cb:19:6b:33:fd:46:66:
         3f:19:a0:38:8b:14:32:7f:1d:c1:7b:70:7b:8c:f2:43:ef:7a:
         da:11:f5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPsD7EDBPow7OJzVXKz7XqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NmZhNjRjMmJiYWE3MjVhYzI2YTRmZjYxODAyNjZmYWVk
MjA4YTMwHhcNMjYxMDMxMDIwMDU0WhcNMjYxMTAxMDIwMDU0WjAzMTEwLwYDVQQD
Eyg0NWRmYWIwYzc4NmJhZDJhY2ZhNzc2OGJmYTUyOGY2NmVmOTllNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5bxW72kfOvyDBQl6LjXnoqtSlnH
hh71tu7qlDXNC93pG3l+KgJPYXVNgyayQfJ1YNcDxXs5QT19NhPB3q0rtQ6mcWUH
19MmCWp053QiEfZ55UXhJFny06r/fMRXTTYh8cKDRrobOUBSHjUASumwwY0Z/EC8
N26KYp8qlI4Ynt1Fh2Ics1zzWyeVDOShuH7NnTiYf4Ks9AmMoo3BgqdM6ABZMUW5
LnQabuLBr0H983YHuuzit7am6T7d48sofDYrQ5J0or6dpOv6YzscUtXd3NGBbb/j
O+/uT5xxISzUJvxhTGznC6j9rDBMZ1jadKBi6Ei2RHKVRbaInqHXnyiz0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXfqwx4a60qz6d2i/pSj2bvmedMMB8GA1UdIwQY
MBaAFDZvpkwruqclrCak/2GAJm+u0gijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjIt
OGRkODIxZmFjNmM4LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjItOGRkODIxZmFjNmM4
LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACExW5FQ5
YvrY6z51jPv2L87DSSVqP0JQWPWraaTyjUQfSf/g3qnneLyxyNA4fH/3Z8wUiLqr
umxjiSjdzYCo8BCHkcf1WghyaL8OiD0Q3Ya+7BXWyRjEuEXwLFr/NZLoitvfWRM1
Yl68gGHMFOb+8K1iVIHLt8plibvmGnUuBiIJLd65QPcc2pIQ3Uc4eUF0kZ1wBeEU
ect7M5LeItupJedUPQyfiWvUnQlW+a7mbYfrUVGPrKrqnM5V7EetnB52Gi6qVZnT
tLGFtPNeJd4InDLjmB8B1EOcZJ6bf8OpuMWR91XLGWsz/UZmPxmgOIsUMn8dwXtw
e4zyQ+962hH1gg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:18:48 2026 by rpki-client