Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File:                     nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier:          /sSYPQYq8EGj4UIcGKxuyEWZ9Ru3ZmaU00epRicVfCw=
Subject key identifier:   2E:C5:F3:59:99:E0:38:F5:12:56:A9:07:EF:27:5E:F1:D1:81:90:E1
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer:       /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial:       019D9AABCC119DB8C6209691B40288E90037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number:          E3
Signing time:             Fri 17 Apr 2026 09:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:43 +0000
Files and hashes:         1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
                          2: Cbh9dTp-3Cy4lgTwDmqeWN3sMU8.roa (hash: jNPHrW3n9zuVbl+OCeOvx4EbhDNhT0wqb8YQdUfmVhY=)
                          3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
                          4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
                          5: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
                          6: mgYZGKiZa9mhnK2NqWF8no0GGZ0.roa (hash: 8DYBESplw9uIrtfifuryybJhLMN9+f7eBcLk6GPGqfM=)
                          7: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: 2Ae7b+Wu1Vjic4+lunTZDx2tf+iNpPQQEm64OsYzHZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:cc:11:9d:b8:c6:20:96:91:b4:02:88:e9:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
        Validity
            Not Before: Apr 17 09:00:43 2026 GMT
            Not After : Apr 18 09:00:43 2026 GMT
        Subject: CN=2ec5f35999e038f51256a907ef275ef1d18190e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:46:2c:ea:79:e5:d7:39:44:25:ae:6b:55:
                    8d:8e:f8:77:68:f5:e5:c6:50:9a:42:14:45:98:d7:
                    66:00:7f:d8:93:15:0b:8a:86:c0:fd:d4:96:a2:95:
                    c9:e8:df:dd:0f:0f:79:f3:8e:e4:ef:dc:3b:36:85:
                    50:c1:88:a4:5c:9c:00:90:88:cb:6f:08:ba:00:1d:
                    fc:d2:6a:07:55:c7:c2:9e:bb:25:ce:61:10:54:0a:
                    f9:3d:4a:b2:7f:ed:e5:87:44:97:03:d8:b8:d4:93:
                    ab:6c:26:b6:c9:49:42:43:69:18:c4:be:e6:41:a8:
                    d7:96:78:56:d0:bb:73:1d:5d:94:0a:0e:c0:2f:91:
                    27:3b:ee:59:c2:45:ee:c0:b1:60:6f:48:01:a6:cf:
                    a1:eb:e8:35:0a:0f:e1:ba:b9:14:c6:64:fa:7a:4c:
                    ee:98:50:a8:0a:4e:ff:a8:f5:d3:2d:79:2e:7d:6a:
                    3d:2a:97:d7:8a:90:56:3c:3f:51:7a:57:9f:3e:8d:
                    db:41:87:b4:08:26:40:80:16:21:9a:6e:ac:cf:91:
                    84:b8:b1:75:1a:7f:4d:4c:7f:78:1c:16:31:15:42:
                    39:7b:e2:f1:ec:3d:9a:15:2c:83:81:e3:0e:f1:35:
                    47:14:db:31:29:18:e1:67:45:47:ed:f7:f7:a0:ac:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:F3:59:99:E0:38:F5:12:56:A9:07:EF:27:5E:F1:D1:81:90:E1
            X509v3 Authority Key Identifier:
                keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:26:a6:1e:de:fe:e4:a4:84:9c:53:32:9b:c4:47:51:81:
         d0:29:db:c3:ad:01:ba:f2:64:ba:ea:c3:f9:9b:ff:ce:fc:1b:
         cf:bf:61:20:f6:1f:48:c8:aa:ea:04:ee:72:1c:bb:bc:6b:e4:
         29:ea:80:32:a0:b0:53:92:69:77:b8:9f:55:f7:54:64:7d:05:
         dc:82:67:31:6d:06:c8:57:61:38:4c:ec:4b:45:b8:07:fe:56:
         35:b1:1f:80:15:1f:8c:c1:1a:73:35:96:b3:73:33:55:a4:23:
         fa:09:70:32:02:fd:2c:4c:8f:47:c9:8d:8b:13:00:f3:3c:fe:
         e9:31:41:b2:19:6b:fd:c5:2a:37:80:32:7f:1e:3a:4d:3f:92:
         39:90:3f:42:63:29:8b:86:ec:2d:b4:a5:38:ff:a4:0a:a9:dc:
         a6:da:18:14:60:32:fe:e0:7f:7b:6c:df:bf:80:1e:9a:58:d2:
         4b:cc:c9:e6:16:c9:ee:ea:cf:2b:66:43:e8:46:84:7f:d9:e2:
         62:3a:b0:06:dd:65:f7:77:45:a1:5f:99:9e:09:0d:5b:bd:9f:
         c2:02:68:32:2f:0c:9a:43:6f:2b:1f:27:93:f8:37:d5:54:b7:
         3c:be:fa:4b:87:5f:cf:39:d6:2f:03:64:cf:c0:b1:cd:63:9b:
         7b:8b:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:10 2026 by rpki-client