Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          2wKvwhP0izTWGoHQrRoAVDF/fbXyy+QUVHvYAn1jiDY=
Subject key identifier:   29:AB:56:5F:5C:64:35:5B:43:2F:14:E1:9C:70:F9:83:8F:E8:A9:02
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       01A0016F192EF992F87A126E57043FE1372E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          0826
Signing time:             Fri 14 Aug 2026 18:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:53 +0000
Files and hashes:         1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
                          2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: 8VKoy+zCOdy/9f/UIs5e5HLXtzRFYYLmSKzRJROewZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:19:2e:f9:92:f8:7a:12:6e:57:04:3f:e1:37:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: Aug 14 18:00:53 2026 GMT
            Not After : Aug 15 18:00:53 2026 GMT
        Subject: CN=29ab565f5c64355b432f14e19c70f9838fe8a902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:a1:30:93:82:73:c5:55:81:7a:71:df:cd:
                    d5:a6:92:e9:67:7d:74:09:7a:0d:1a:ef:f8:73:c3:
                    29:22:19:de:8c:a7:18:63:e7:47:79:2c:56:1f:f9:
                    78:ee:cd:b2:66:93:33:38:a5:05:43:89:1e:68:5d:
                    21:8c:93:ad:bc:06:6e:7f:99:08:cf:62:d5:92:1c:
                    55:be:4b:64:e1:ae:c8:39:04:e4:ce:be:c6:6c:ec:
                    43:87:08:82:15:c5:3f:42:0d:ec:09:f4:b9:e3:77:
                    76:17:c5:36:8e:c0:00:a5:85:2b:10:f0:32:20:80:
                    35:58:1f:23:84:a7:86:bd:56:0d:f2:c0:b4:8a:90:
                    d4:a3:f0:2e:5a:6e:88:0a:68:25:6b:46:30:3f:f3:
                    d6:e8:ef:55:8c:93:6f:77:7a:bb:03:63:1e:bb:8d:
                    7b:b2:0e:40:98:8f:c7:cc:a1:f5:71:bc:7e:30:56:
                    89:bf:87:c7:08:51:76:1b:16:b5:f9:db:8d:ec:9a:
                    74:4b:7f:e8:35:e7:46:99:cc:63:70:c5:9d:86:0e:
                    90:be:fa:1e:3c:7e:81:b0:a6:2b:c8:79:94:b4:a3:
                    49:d4:db:12:6c:ab:61:82:03:ba:57:6b:08:5d:13:
                    9e:7a:9b:47:4e:5d:c6:7d:5d:35:b1:09:d1:0a:46:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:56:5F:5C:64:35:5B:43:2F:14:E1:9C:70:F9:83:8F:E8:A9:02
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:af:4e:73:54:5b:1a:e6:1e:43:31:ab:88:2f:ba:26:14:
         27:a9:58:0d:41:18:43:e9:b7:ce:61:23:6a:46:23:a1:b9:20:
         22:a5:9a:5d:47:2e:51:d1:61:57:6c:1d:57:3a:d8:90:f1:85:
         a2:b9:bf:49:e1:03:f0:79:d1:11:bf:ba:19:22:96:76:d9:e3:
         fc:34:e2:98:fe:a6:20:89:3f:9d:ab:51:50:69:5c:b1:af:24:
         8f:69:6f:53:80:8e:5a:00:9e:ee:bf:ba:ac:84:63:60:c2:fc:
         e5:f2:ab:ea:c3:30:44:cf:6b:29:8e:ed:24:e9:ea:15:dd:ed:
         59:f1:a9:b2:a9:5b:d3:69:e8:50:ca:84:f0:af:ee:e7:62:90:
         3a:82:98:25:a0:f5:42:ef:ff:bf:5e:50:4f:6d:50:74:ec:5a:
         e6:c8:76:4d:2b:fc:17:84:16:b3:ff:28:bd:1d:73:89:0a:0a:
         58:7a:ec:32:5e:c7:c4:09:77:ef:c6:50:91:61:79:4d:4b:c9:
         de:71:b9:d0:fe:fd:33:65:54:f4:0f:d6:43:1c:70:11:1f:4e:
         79:b7:9f:23:e1:c4:b8:0f:0c:4f:c0:f1:33:27:93:6a:d2:ae:
         07:23:a5:e5:37:03:30:54:74:1d:4c:e1:49:2d:de:a7:43:66:
         59:51:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:06 2026 by rpki-client