Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          PQe8Rja1z/nrmJycBqaw08shE0i/occZC2rY+zWyP8U=
Subject key identifier:   D3:FC:63:41:BD:DF:C2:4D:DA:67:EF:51:44:E9:DB:05:0B:41:84:21
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019CABD99C9E18EB9B209DC7B47037CD238E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          1827
Signing time:             Mon 02 Mar 2026 00:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:31 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: 5Z/sM5JuHK5SSvJX911x2uF0PjZ1jmkvrDg0RW+k1d4=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:9c:9e:18:eb:9b:20:9d:c7:b4:70:37:cd:23:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Mar  2 00:01:31 2026 GMT
            Not After : Mar  3 00:01:31 2026 GMT
        Subject: CN=d3fc6341bddfc24dda67ef5144e9db050b418421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:95:4f:26:de:83:63:10:1b:1e:58:e3:60:
                    4c:73:83:a3:93:db:09:74:49:01:2b:2e:31:91:59:
                    da:f8:53:30:0b:bb:07:59:dd:51:46:bd:0a:86:d8:
                    f2:83:ce:f6:8b:50:81:c1:11:83:45:7b:f8:3a:a1:
                    b6:84:40:74:01:21:29:c2:58:e3:ed:f9:3a:5d:ad:
                    74:16:da:f4:b6:c0:c2:52:5a:b9:69:9e:5f:bc:e2:
                    f6:e8:b8:b0:0b:ac:61:ac:d4:b5:69:7f:db:2e:e0:
                    cc:bf:92:67:05:6f:28:51:99:29:36:bf:e4:89:38:
                    e2:aa:ef:22:0a:46:e4:c4:6d:9c:24:29:cd:7a:b0:
                    7b:da:70:a3:16:d7:9d:a6:59:e6:3a:8c:93:8e:31:
                    22:70:35:14:b3:2e:da:d8:b6:8d:63:c3:eb:61:aa:
                    bf:39:c3:bc:ac:c1:34:b5:ee:fc:a6:6e:16:b4:96:
                    6c:8f:aa:6d:41:2f:3f:70:78:b6:2c:e1:bc:dd:df:
                    0f:61:61:3e:64:98:65:f0:a9:f6:36:af:22:b8:5c:
                    94:45:1f:2d:1c:67:e1:ed:8f:98:7e:ec:59:b7:41:
                    4f:06:a1:08:10:1b:ac:4b:4d:e2:3b:28:83:cb:05:
                    f9:79:b9:a7:26:3d:5b:03:af:89:3d:53:f0:7a:26:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:63:41:BD:DF:C2:4D:DA:67:EF:51:44:E9:DB:05:0B:41:84:21
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:31:26:f7:8a:cc:2c:e0:b6:a7:30:2c:89:87:6d:cf:38:
         91:95:44:bf:22:55:f8:64:a0:bb:22:82:8d:44:c6:6b:ff:b4:
         f2:2f:ff:12:2b:34:ce:20:e6:1f:c2:a6:da:79:5d:82:2b:8a:
         b5:4f:d4:47:41:b6:cd:69:07:74:ec:dc:2f:90:19:42:00:5d:
         70:e1:11:87:0b:09:bf:5b:c2:fe:4e:0a:a0:1b:06:98:8c:0d:
         40:a2:f2:ea:13:14:bc:07:95:54:ba:77:66:a1:58:4b:57:77:
         e3:b0:cb:ff:d3:d9:e1:0b:9f:e9:23:1e:fe:b3:84:ad:e3:d0:
         b2:b2:dd:b4:be:ed:80:2c:19:8b:86:e5:e9:14:24:bf:c9:5e:
         64:64:2a:30:c5:53:91:64:7d:3f:a9:66:0a:26:4f:24:ee:ce:
         d1:d3:77:8f:58:8e:2c:e5:5a:16:1a:30:43:63:16:c2:31:8c:
         64:b5:e7:48:7f:8f:19:4b:78:cf:70:51:1a:49:6a:9b:39:1f:
         1f:da:d1:33:1a:b9:a8:fd:34:f9:94:dd:3f:24:2a:7e:ab:35:
         28:92:b7:c3:81:7f:bd:e4:c6:36:a8:62:72:7d:67:4f:c5:b3:
         7c:e7:77:6f:13:8f:f3:2a:62:e9:89:e2:e8:01:58:80:a3:6c:
         f8:b4:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:26 2026 by rpki-client