Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          4W7Sqf4YFkrCRwpa4AqiWWpMy+rV4rbMMnhM/lOEjQI=
Subject key identifier:   CD:21:5B:55:50:38:8F:08:26:78:94:08:CC:74:12:96:0E:49:A9:1F
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       01A17927EC1F4C60E88B6B07E0A72773E4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1AC5
Signing time:             Mon 26 Oct 2026 17:00:21 +0000
Manifest this update:     Mon 26 Oct 2026 17:00:21 +0000
Manifest next update:     Tue 27 Oct 2026 17:00:21 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: 6DWUKME2aw3Cd8H3LwiQWvitcxJaKetC4/CrCfDLIxY=)
                          2: e8LfT7gfSGa2muv0jF7A1t1LYdk.roa (hash: WRAYYzwkRc+Wb2Yiz2tOnruT9Tcor90WcXfJXFu2bXg=)
                          3: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
                          4: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:27:ec:1f:4c:60:e8:8b:6b:07:e0:a7:27:73:e4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Oct 26 17:00:21 2026 GMT
            Not After : Oct 27 17:00:21 2026 GMT
        Subject: CN=cd215b5550388f0826789408cc7412960e49a91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:a1:28:ed:6f:42:63:e9:cc:a8:77:ca:4c:
                    d0:fe:5a:7c:02:78:f4:d1:0e:47:2f:2b:1e:9d:56:
                    06:11:b7:10:4a:b9:5d:a6:3c:a3:d0:0c:26:bc:70:
                    2d:cc:bc:3e:00:31:c8:b9:ae:15:86:3a:13:56:c3:
                    14:29:37:b6:bf:e6:d6:e7:50:21:85:34:25:79:2b:
                    ca:51:c6:47:8d:89:23:08:f5:b8:57:76:e7:92:72:
                    f4:89:0e:25:3f:22:be:e5:f7:7c:46:9d:90:e4:d4:
                    26:14:3d:65:ec:a1:8a:8c:9d:83:e7:97:c5:4d:27:
                    89:52:19:89:87:8c:0d:17:9b:5a:df:0d:de:bb:61:
                    75:12:93:84:d4:38:c7:04:ba:92:09:b6:6c:13:f6:
                    3b:2f:bf:ce:ed:dd:c6:1c:c6:da:63:5b:40:cf:52:
                    fa:14:91:59:2a:23:00:00:9e:a1:27:a6:2e:69:cf:
                    41:76:7a:a2:a1:e6:c7:60:52:85:6c:20:cf:b6:c9:
                    06:ba:83:1b:6c:23:b1:cf:48:d7:ca:90:24:fd:9c:
                    c0:15:98:1d:ae:b2:a5:04:9a:85:c5:58:c6:07:e5:
                    d1:51:b0:4f:93:cb:ab:dc:ac:6c:99:c3:25:20:d5:
                    76:d7:11:d4:7f:65:ec:37:c6:fc:52:1a:bd:b3:e2:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:5B:55:50:38:8F:08:26:78:94:08:CC:74:12:96:0E:49:A9:1F
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:65:90:81:e2:c6:50:a8:4a:83:1d:b0:59:15:5b:d7:75:
         54:c5:79:5d:f6:00:07:eb:77:b6:a7:a4:32:a6:e8:b2:3a:5b:
         f2:51:58:cc:50:fa:53:ef:7f:1d:a9:60:91:4e:6d:32:e6:f6:
         74:b0:03:94:03:a6:d6:53:ef:a3:f1:85:eb:53:8a:20:00:39:
         14:96:a7:19:66:59:d3:fe:fc:4c:2e:4a:f3:dc:14:74:74:3e:
         8f:fa:b4:02:d4:20:db:00:23:41:bb:d5:6d:8e:87:76:e2:13:
         a9:63:15:e0:54:35:02:e7:ac:10:d3:db:88:28:d4:c4:4d:a8:
         fe:8c:ce:b7:95:7a:a3:c1:ce:9e:03:70:fe:f9:cd:8e:a8:b5:
         3d:24:61:25:3f:47:69:a7:64:84:57:b7:b0:8b:9b:5b:b8:e3:
         15:73:cc:76:cc:7f:a1:12:b0:b2:93:28:89:83:ac:84:72:3b:
         94:c1:8b:c4:ca:36:ae:56:be:1d:da:54:f7:93:30:38:13:99:
         80:48:2d:f2:b6:d0:e3:86:45:11:e5:3a:4a:be:67:6e:54:ef:
         0f:16:5e:2f:85:c7:ca:9c:42:a7:8e:6b:e6:90:70:93:39:c3:
         87:cc:df:56:e0:bb:92:f4:d0:ae:61:81:14:82:ac:8c:c7:f2:
         48:e4:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:54:57 2026 by rpki-client