Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File:                     myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier:          FaeJWm6HCNtgBC4NKHZySmbuGIvHLg5l/TbfThIU6H0=
Subject key identifier:   15:B3:97:5B:AE:09:75:BE:B5:19:E6:23:67:E8:07:A5:80:14:46:1E
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer:       /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial:       019CABD94C56427045549BA63BAA02FA46A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 00:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:10 +0000
Files and hashes:         1: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: riTKw+Zpm5csyQfyLYVpW+59FIFCKz7rrUw4OB1gBX4=)
                          2: ylf5_yxkn6LPt4ZeJuQiy0KaFkA.roa (hash: 0Nce3mcGLsxHxF9BEIwf4WWciMSuNoKxw/P+eNRR6J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:4c:56:42:70:45:54:9b:a6:3b:aa:02:fa:46:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
        Validity
            Not Before: Mar  2 00:01:10 2026 GMT
            Not After : Mar  3 00:01:10 2026 GMT
        Subject: CN=15b3975bae0975beb519e62367e807a58014461e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:ba:c8:53:5a:8b:9a:b0:3b:0c:ed:51:c3:
                    0d:38:da:c2:67:ea:b3:38:4e:be:2d:e1:29:73:75:
                    c8:1a:98:01:00:94:50:33:6c:dc:d3:5b:5c:da:8f:
                    83:2b:62:11:f7:c6:94:45:51:38:6a:0a:21:6f:ed:
                    59:b0:cc:2f:f0:ac:b2:5c:cb:29:49:ad:ba:c8:7e:
                    07:4d:13:4c:90:3e:9f:e1:3d:df:79:37:1f:f6:41:
                    b7:4d:53:be:6c:1e:4d:3a:92:44:b6:af:a6:da:57:
                    31:8c:8f:68:28:ae:ec:06:53:e4:b3:7b:e3:16:f3:
                    c1:ff:09:95:39:e0:c0:8f:69:73:cc:48:74:7e:06:
                    f1:f7:82:4f:15:f5:08:26:6f:12:32:ea:d8:6e:5c:
                    a6:c6:dd:61:f5:f9:a2:75:86:b6:7f:b6:86:1e:09:
                    2c:bb:15:77:9d:ed:5e:1b:d1:60:eb:80:04:b2:11:
                    5e:e5:1d:3c:0c:89:56:bf:13:25:91:6c:c6:96:4e:
                    fe:76:11:bb:3b:e2:a0:5d:59:9d:16:6c:d3:78:f8:
                    e0:d3:cc:8f:fd:72:5a:e6:2a:eb:a8:c1:a0:84:55:
                    fa:95:08:0e:ac:34:c9:25:7e:26:29:3e:ad:7f:ac:
                    46:a3:59:65:39:99:51:c7:e5:3f:ca:7a:0c:03:e0:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:97:5B:AE:09:75:BE:B5:19:E6:23:67:E8:07:A5:80:14:46:1E
            X509v3 Authority Key Identifier:
                keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:47:e6:80:2b:c0:28:73:75:08:49:50:b1:fa:14:0a:96:1c:
         f8:ea:4f:63:d1:35:b9:71:26:7a:23:d2:08:da:b0:22:3e:f3:
         e7:6d:ec:cd:59:da:cf:88:9f:6a:f9:b1:19:6a:d9:80:26:c3:
         88:b3:ce:5e:3c:51:e8:f1:9b:1e:65:5e:05:07:a4:60:0f:4f:
         c8:05:92:50:ac:65:37:d0:db:e6:f4:f0:45:1f:15:27:a9:af:
         55:93:22:3a:03:8c:e0:dd:06:7f:c0:cd:ec:79:71:a0:b3:e3:
         fb:ba:b6:f6:f8:31:96:98:43:2e:a5:0f:4d:15:ab:82:a5:1c:
         d1:07:85:17:31:64:d3:8a:36:f0:ac:99:e6:04:12:56:45:c1:
         53:b7:d7:ef:f4:d4:af:48:20:55:59:5c:e2:b5:bf:26:02:40:
         54:41:86:ae:ca:83:41:fe:d9:b3:12:f0:a7:5e:f6:3f:41:12:
         8e:4c:66:b7:6c:2d:eb:6c:1f:66:2d:e4:cc:d0:9c:e5:c2:b4:
         7a:d7:9c:a3:ff:7e:54:58:4b:32:98:1b:9e:7c:f1:77:09:8b:
         c5:82:8b:dd:e4:9b:90:98:da:cd:a0:8e:d3:25:65:4a:33:bb:
         8e:0a:62:00:fd:46:db:a8:e3:b8:45:64:8f:03:77:8f:6e:dd:
         bc:d9:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:54 2026 by rpki-client