Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          0W0zGv9Z2ZDNiap4UkPDiVZvDcQYD5560Q6w0IU+5/E=
Subject key identifier:   74:DA:27:BF:DA:6E:63:06:A7:F5:2F:92:C8:FE:D0:A4:FB:66:AD:DA
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       019D996249F11B0A79FD45E18C3F26020CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          178A
Signing time:             Fri 17 Apr 2026 03:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:48 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: 8R4SYIgTcsXHST1ADY4J5R5fsRRC4eDmRCEEJRajx1w=)
                          2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:49:f1:1b:0a:79:fd:45:e1:8c:3f:26:02:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Apr 17 03:00:48 2026 GMT
            Not After : Apr 18 03:00:48 2026 GMT
        Subject: CN=74da27bfda6e6306a7f52f92c8fed0a4fb66adda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:69:e1:6c:69:08:a7:3e:0d:60:d2:62:43:
                    28:53:31:54:22:ed:c4:c2:35:7a:fa:72:95:5d:ca:
                    df:ee:2e:91:9e:ed:19:d5:88:24:a3:ba:ea:bc:1c:
                    63:31:2a:19:82:d9:06:5f:3b:ab:2e:34:99:7a:fc:
                    41:ca:48:4f:ee:7a:2f:f7:ef:2f:f6:d2:80:a1:21:
                    7f:97:39:d7:2f:77:65:a6:ae:65:7b:e3:66:d3:ad:
                    2d:d9:ec:2e:36:66:17:44:28:6f:76:50:78:c8:8a:
                    93:c1:b0:4a:79:11:8d:5e:1d:4c:e2:02:88:65:f1:
                    1e:b9:8d:84:71:a0:86:e6:53:90:e3:13:5b:08:54:
                    92:6c:8e:8a:c2:79:b7:23:89:d7:b1:2e:0d:f0:0b:
                    27:c1:d2:42:5c:06:9f:ea:33:ac:81:12:a1:6c:d8:
                    2d:25:eb:6c:59:9a:aa:9d:21:a8:a5:5b:d7:73:26:
                    8f:7b:38:2e:69:f1:09:0b:9b:7d:da:ab:0f:b8:5f:
                    80:99:8d:15:e2:96:8e:09:57:90:0a:dd:98:c3:fe:
                    25:35:67:3b:f3:04:26:50:a1:f7:ed:f8:2a:63:e6:
                    95:30:2f:b0:b3:6f:ce:23:d9:14:ff:83:70:09:e3:
                    c5:6e:3f:31:ee:d2:9f:85:05:9d:38:f7:04:74:8a:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:27:BF:DA:6E:63:06:A7:F5:2F:92:C8:FE:D0:A4:FB:66:AD:DA
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:ad:f2:b2:c9:36:00:1b:3e:c9:83:d8:e7:6d:30:ea:2f:
         87:8f:e5:72:58:a9:ce:5d:09:be:89:d2:1e:df:ad:29:21:12:
         2f:4a:4c:8f:4b:fa:8e:0d:18:e0:2b:4b:ad:49:ce:97:76:b7:
         55:83:9f:35:34:4e:d0:03:53:6e:4d:49:3c:84:68:c4:af:12:
         90:10:aa:4c:01:c4:56:08:53:2c:cb:bc:92:42:1e:2b:51:bf:
         4a:1e:21:7e:fe:4e:45:20:85:81:14:ab:3b:f1:f8:65:69:ce:
         51:02:7d:d8:6a:ae:4a:9a:a4:3e:13:f4:07:7a:6a:dd:76:0d:
         f4:42:51:cc:2f:38:d1:2e:51:5f:35:ea:87:99:7c:2c:17:5f:
         9f:2b:8f:e3:3a:6c:a0:49:5e:2c:32:87:35:c3:8c:cd:7b:d0:
         3a:c0:5f:7d:06:e3:a4:0c:ec:40:45:f0:9d:ad:23:a2:b3:38:
         7f:08:a0:ec:a1:f0:42:49:64:ef:78:11:ce:db:69:19:4d:c6:
         36:5c:8f:93:3b:6d:6d:3f:82:bf:57:fd:51:d8:5e:5d:3d:8e:
         dc:8c:ae:64:4d:47:5c:7e:20:49:1d:02:9d:38:0d:6e:a5:59:
         bb:d1:60:f3:be:cb:41:e9:c3:31:85:38:f0:61:89:a3:d2:f6:
         8c:b4:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:55 2026 by rpki-client