Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          VhMFcEmBTt5fRqN0NEyEYNJJypyKWNbFuNdhGDA2owg=
Subject key identifier:   BE:4A:68:42:74:27:F9:50:54:83:CA:9C:59:3E:D2:EF:AA:8A:82:D8
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       019CABD9D1726B1957768D6B18F04281D784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          170F
Signing time:             Mon 02 Mar 2026 00:01:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:44 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:44 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: eXBbAtNUtYg5aTWdE4r/PCiVWyqd9pSnqvo2pjWEJRs=)
                          2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d1:72:6b:19:57:76:8d:6b:18:f0:42:81:d7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Mar  2 00:01:44 2026 GMT
            Not After : Mar  3 00:01:44 2026 GMT
        Subject: CN=be4a68427427f9505483ca9c593ed2efaa8a82d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:b7:0e:50:8f:3f:74:b4:e8:25:76:57:10:
                    bc:92:9e:74:db:5f:5b:0e:ee:5c:fa:77:b4:00:11:
                    52:75:98:6b:d9:b4:b6:0d:a2:64:73:7a:9e:c6:f0:
                    c7:f0:72:31:7b:78:f8:a1:14:ea:1e:4f:91:36:72:
                    a9:4e:34:ea:d7:91:6d:da:dd:88:bd:9c:c4:4d:a7:
                    1e:58:5d:ff:9e:b8:05:1a:7a:63:45:db:fc:5c:a3:
                    c8:d7:00:44:f7:2f:e5:9d:80:4f:ac:df:63:b9:8f:
                    a6:30:20:69:9b:74:df:4d:fd:75:32:96:b8:41:57:
                    af:80:0f:fa:03:cf:9f:da:a2:db:79:a9:c7:ba:f2:
                    29:f5:92:aa:31:4e:44:96:b6:9a:c0:49:29:37:5b:
                    77:68:45:ac:93:1f:9e:ac:54:81:22:93:80:2a:52:
                    0e:37:82:47:8a:a8:b4:a4:90:15:ef:51:8c:b7:16:
                    73:7a:03:b5:7f:ff:9b:f5:c9:22:46:8f:d1:dc:86:
                    c8:3b:31:87:7c:33:55:f3:cc:db:bc:5c:45:71:03:
                    30:63:c2:2a:cf:0c:f4:1c:71:2e:44:22:20:21:7e:
                    d0:56:61:06:1d:77:62:46:d1:bb:93:bc:be:e3:2d:
                    a7:a5:a1:36:5a:10:c8:c0:76:6b:cf:85:47:38:fb:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4A:68:42:74:27:F9:50:54:83:CA:9C:59:3E:D2:EF:AA:8A:82:D8
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:30:12:b0:99:eb:4b:ee:c6:5c:52:dc:59:97:fa:bb:b3:
         a9:c3:d7:8c:26:9a:f0:f3:88:b6:de:0a:22:8f:03:b5:ed:7f:
         91:50:c9:2b:85:5d:46:e8:f4:21:19:05:e1:69:c8:df:33:c9:
         b2:98:0a:0c:42:6b:df:32:c9:13:0c:00:05:e1:b8:c8:34:00:
         a3:0e:99:60:8e:88:0d:59:f8:12:39:7f:dc:cd:e8:b6:84:f6:
         9b:51:1d:d4:e6:40:6d:e5:23:fc:fb:40:f2:81:e9:81:d0:fb:
         19:5b:11:da:93:55:32:c9:11:a2:9d:05:15:b7:f1:78:11:dd:
         08:a8:da:00:72:25:1d:78:cf:b2:e4:87:fc:32:85:c7:13:2e:
         5f:49:54:bb:de:b4:ee:a6:b8:87:e2:fa:ae:c6:6c:db:59:d0:
         09:96:3e:63:0b:54:bc:cd:6e:17:9e:5d:64:ab:50:d9:c7:89:
         44:ef:35:87:93:70:07:67:c4:31:9d:9d:e4:99:3b:43:bf:5a:
         ba:cb:ee:5f:b8:b2:c8:b1:1d:59:e3:2c:36:68:c8:e3:ce:d4:
         a6:8f:4d:35:bd:0e:84:24:c8:6c:2c:96:ea:be:34:a2:6d:74:
         1e:ea:c5:7e:1e:47:ad:f3:1e:cd:fd:f1:85:0e:b3:ab:54:41:
         aa:7d:b1:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dFyaxlXdo1rGPBCgdeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx
OWRlNTUwHhcNMjYwMzAyMDAwMTQ0WhcNMjYwMzAzMDAwMTQ0WjAzMTEwLwYDVQQD
EyhiZTRhNjg0Mjc0MjdmOTUwNTQ4M2NhOWM1OTNlZDJlZmFhOGE4MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouK3DlCPP3S06CV2VxC8kp50219b
Du5c+ne0ABFSdZhr2bS2DaJkc3qexvDH8HIxe3j4oRTqHk+RNnKpTjTq15Ft2t2I
vZzETaceWF3/nrgFGnpjRdv8XKPI1wBE9y/lnYBPrN9juY+mMCBpm3TfTf11Mpa4
QVevgA/6A8+f2qLbeanHuvIp9ZKqMU5ElraawEkpN1t3aEWskx+erFSBIpOAKlIO
N4JHiqi0pJAV71GMtxZzegO1f/+b9ckiRo/R3IbIOzGHfDNV88zbvFxFcQMwY8Iq
zwz0HHEuRCIgIX7QVmEGHXdiRtG7k7y+4y2npaE2WhDIwHZrz4VHOPtdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5KaEJ0J/lQVIPKnFk+0u+qioLYMB8GA1UdIwQY
MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt
NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2
LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzswErCZ
60vuxlxS3FmX+ruzqcPXjCaa8POItt4KIo8Dte1/kVDJK4VdRuj0IRkF4WnI3zPJ
spgKDEJr3zLJEwwABeG4yDQAow6ZYI6IDVn4Ejl/3M3otoT2m1Ed1OZAbeUj/PtA
8oHpgdD7GVsR2pNVMskRop0FFbfxeBHdCKjaAHIlHXjPsuSH/DKFxxMuX0lUu960
7qa4h+L6rsZs21nQCZY+YwtUvM1uF55dZKtQ2ceJRO81h5NwB2fEMZ2d5Jk7Q79a
usvuX7iyyLEdWeMsNmjI487Upo9NNb0OhCTIbCyW6r40om10HurFfh5HrfMezf3x
hQ6zq1RBqn2x1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:26 2026 by rpki-client