Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
File:                     Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft (raw, json)
Hash identifier:          UU43wIGf+n16WcwPflLD7t4fnfYJIlFrFhw/3j7tszk=
Subject key identifier:   D2:7D:23:53:6C:4D:8E:6A:19:F3:66:DF:4F:19:D2:83:A4:48:AF:4B
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Certificate issuer:       /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial:       01A18C41A4CD189224C23EEF0D929B82F219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
Manifest number:          029B
Signing time:             Fri 30 Oct 2026 10:01:14 +0000
Manifest this update:     Fri 30 Oct 2026 10:01:14 +0000
Manifest next update:     Sat 31 Oct 2026 10:01:14 +0000
Files and hashes:         1: Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl (hash: RwjUDunLt1FYi52IFMjG58ZS84YBDzTueGwcmkRnPPs=)
                          2: dQ4WjMy4TxNDyfRXN9e9OZ7Q0ow.asa (hash: 6UfZTssvTMuJE1n9BqkIqHu/TDRWDmzg39I0dyncJs4=)
                          3: sQjE4Ryf3azGzRpKF8iTxt9fGjI.roa (hash: sCZDZUEpHkq2HyKQrO/C9pxfE8YHa827nuwFp5PQA2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:41:a4:cd:18:92:24:c2:3e:ef:0d:92:9b:82:f2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
        Validity
            Not Before: Oct 30 10:01:14 2026 GMT
            Not After : Oct 31 10:01:14 2026 GMT
        Subject: CN=d27d23536c4d8e6a19f366df4f19d283a448af4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:b5:42:8b:a4:55:77:09:2a:fb:42:f5:52:
                    92:34:00:5d:14:98:00:58:1f:b1:e2:aa:b3:74:51:
                    dc:70:9e:b5:fd:46:2a:8e:eb:ee:95:bf:18:93:66:
                    72:ac:f8:6b:4d:39:ab:82:22:03:74:1d:74:d8:03:
                    c9:17:b0:d7:1d:e4:42:f1:52:04:2c:5f:4a:5b:1b:
                    16:bd:d1:2b:ce:a9:cb:25:63:0d:d4:ad:7f:2e:94:
                    ff:3f:c1:11:20:15:0a:cc:f9:88:90:8d:95:5e:32:
                    f1:9e:e3:f0:9e:b4:a9:fc:85:54:29:49:46:61:57:
                    52:1e:43:ed:75:cb:a7:83:8f:e0:af:8d:82:e0:2d:
                    ab:fa:0b:a1:d6:f7:08:08:29:64:54:4d:8d:de:12:
                    35:97:e7:0b:cd:04:a8:46:98:94:f2:f1:cc:2a:5f:
                    77:f4:9a:ee:61:27:44:10:de:ec:43:c0:28:76:9a:
                    f1:b2:bc:11:9a:10:bf:ea:9a:36:df:91:d4:72:a2:
                    1f:d6:26:9b:8b:5e:a8:fa:65:62:e5:e5:f2:3d:d1:
                    9a:ee:4d:1b:57:a6:25:5a:35:c9:e1:34:f6:72:99:
                    d5:4f:77:20:bc:0c:98:48:0b:82:33:a6:bf:57:6c:
                    cb:ad:4a:0c:cc:c4:43:8c:34:df:b4:1a:1c:72:c4:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:23:53:6C:4D:8E:6A:19:F3:66:DF:4F:19:D2:83:A4:48:AF:4B
            X509v3 Authority Key Identifier:
                keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:6b:8a:f9:1c:2a:ec:c2:d8:9e:f6:77:34:e4:6d:04:62:
         5a:82:fe:93:a4:b7:7c:aa:18:03:36:53:b3:94:35:a8:0c:87:
         16:7b:55:b7:ce:ca:44:a6:5b:58:3d:2f:28:1c:48:90:d1:0a:
         54:79:34:bf:c5:93:01:ca:66:7c:90:58:bc:eb:c9:55:87:42:
         28:7f:97:db:42:4a:0e:af:89:e7:90:f0:56:25:fd:b6:34:90:
         40:94:6b:84:0b:fd:a5:b4:80:c0:1f:b2:1b:f3:f1:ca:d1:7f:
         d7:fa:84:8f:51:09:5a:45:d6:f3:e1:8b:7d:6d:82:96:3e:f8:
         c0:ff:d4:de:60:8a:13:f8:f8:a9:23:17:38:ba:ee:20:7c:c6:
         5a:4a:1e:d6:53:d0:38:44:18:e1:8e:94:4f:54:df:54:eb:07:
         7b:89:42:1b:dc:f5:b1:26:eb:78:f5:52:2e:6b:02:70:92:e8:
         2f:d4:c8:00:95:68:ef:b5:5e:3b:fa:c4:fb:1a:27:cb:6f:2e:
         12:e2:f5:a8:ad:8c:9f:41:db:f2:e3:bb:f8:e6:88:92:2b:86:
         89:2e:01:26:b5:71:7d:e1:9e:cb:c7:c6:2f:52:28:42:f1:fa:
         b1:55:c6:7d:2f:59:c0:05:4f:40:8e:be:e8:4c:fe:f1:b0:57:
         b8:d2:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:24:52 2026 by rpki-client