Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File:                     NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier:          WhRalVFX9cV+qNsHU9Cao3hJYDN26MAm88FteVVM9Hw=
Subject key identifier:   4B:18:06:4C:F0:A1:AB:A0:AA:2F:6D:5F:60:37:D2:FA:A2:7C:48:31
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer:       /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial:       019CADFE42EB14D03FBF6A0A780BD762F6DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number:          0FBF
Signing time:             Mon 02 Mar 2026 10:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:47 +0000
Files and hashes:         1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: cfZiPdYEzg+jAwEhAZ4uuZCgtOM1+TdQqrs8F1AtlaE=)
                          2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:42:eb:14:d0:3f:bf:6a:0a:78:0b:d7:62:f6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
        Validity
            Not Before: Mar  2 10:00:47 2026 GMT
            Not After : Mar  3 10:00:47 2026 GMT
        Subject: CN=4b18064cf0a1aba0aa2f6d5f6037d2faa27c4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:b3:7f:67:57:7a:6c:02:72:cf:4b:15:cb:
                    af:ba:75:f1:c8:52:d4:8c:6d:0f:5f:d6:7d:cc:24:
                    ed:02:50:65:63:64:cf:9d:63:17:81:19:4a:72:ae:
                    72:18:c8:b8:b6:0d:5d:3b:e3:35:e5:9f:4d:04:1f:
                    0e:ca:8e:41:ba:98:41:47:72:70:3e:62:b7:32:45:
                    02:fe:89:31:90:a1:ca:3f:11:0e:18:45:a2:52:03:
                    16:73:8f:92:17:a7:46:72:5b:14:69:14:b6:d1:74:
                    c3:76:cf:9f:86:53:4b:08:d1:69:23:21:68:37:82:
                    a0:8e:2e:4f:8d:05:89:92:75:7b:eb:3d:5b:a7:73:
                    3b:1f:18:15:fb:5f:cf:5b:aa:09:b3:df:c1:1a:3c:
                    bb:a1:79:74:58:60:32:3c:4d:7f:99:f8:77:19:d0:
                    b9:40:75:a2:12:97:28:bf:91:47:c0:2b:65:b0:bd:
                    92:26:33:85:a9:28:58:7c:5e:03:2e:0d:3b:65:d8:
                    f5:99:3d:d1:e5:56:5b:b7:c2:16:0b:41:16:c7:36:
                    1c:ed:ee:d8:fe:3d:07:36:e0:15:23:35:7d:83:38:
                    8f:64:5c:28:18:2b:89:20:e6:28:ba:d2:7e:86:f7:
                    96:6b:07:9c:ee:fb:af:ff:6f:b1:25:ed:40:4d:83:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:06:4C:F0:A1:AB:A0:AA:2F:6D:5F:60:37:D2:FA:A2:7C:48:31
            X509v3 Authority Key Identifier:
                keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:1b:c3:80:22:69:b2:8f:fb:7e:dd:f1:7b:a1:30:c7:18:
         cd:ec:f7:41:9a:9a:2e:f0:53:f1:16:78:40:3d:4b:c2:9f:f4:
         50:f1:c3:c1:54:3e:25:54:0c:b3:8e:fa:64:25:2c:0e:40:a7:
         e0:c4:95:c0:44:21:57:48:8e:10:8f:ff:7e:8e:62:0b:dd:d9:
         30:38:d0:5e:16:42:a7:65:b2:d0:97:c6:12:6e:0d:35:75:14:
         96:18:c5:7f:70:95:a9:7d:9f:8b:9b:e1:43:9a:9b:ee:f4:13:
         7d:97:bd:85:d2:49:c2:6b:eb:a8:d2:33:21:e3:15:3f:1c:78:
         71:65:e3:a1:5c:88:33:42:54:61:cc:a5:89:f4:48:71:d7:ad:
         1f:f2:d8:8e:6b:3e:39:0e:a7:c8:86:7a:ac:8f:6d:06:32:76:
         63:6a:96:ea:c6:ca:5d:38:2c:5b:7d:ec:af:e4:ba:3b:d4:56:
         30:47:bf:0c:6c:be:cc:d8:9b:67:9e:52:90:cd:12:e8:e2:9a:
         b9:9e:03:c7:35:b1:2f:93:24:16:5e:e5:71:8f:49:c5:6b:c3:
         17:ce:07:6f:75:b8:1b:01:44:6f:ff:e4:81:af:16:2f:1c:58:
         d5:76:59:cd:b1:8d:83:4b:5b:20:d6:75:0a:ea:8e:b2:49:51:
         26:8d:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:30 2026 by rpki-client