Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File:                     NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier:          I8JdZxLZ16KriVh8nE1WI2uBzvKVS77Ye6cJOl82Y48=
Subject key identifier:   0E:15:3F:E1:14:8E:03:B1:C0:A7:29:DA:54:2B:0B:51:9D:29:4B:48
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer:       /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial:       019D99CFF416E01A757882D63F03DE01B3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number:          149F
Signing time:             Fri 17 Apr 2026 05:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:35 +0000
Files and hashes:         1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=)
                          2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: CGZXZftMKnnen55LbfHlVBspAZaGej6qX5i8QBbMPDY=)
                          3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=)
                          4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:f4:16:e0:1a:75:78:82:d6:3f:03:de:01:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
        Validity
            Not Before: Apr 17 05:00:35 2026 GMT
            Not After : Apr 18 05:00:35 2026 GMT
        Subject: CN=0e153fe1148e03b1c0a729da542b0b519d294b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:da:f0:07:d0:a6:6d:3d:c5:92:c7:fb:52:
                    4f:fb:9b:b2:4b:37:4e:c5:e6:e5:91:51:f8:31:21:
                    a8:f9:dc:25:4a:ca:f9:3c:c1:96:02:ee:27:19:e6:
                    ef:dc:12:56:e0:14:62:eb:54:d2:63:70:01:f9:b1:
                    d5:0e:44:a2:9d:d3:2a:75:95:66:01:3c:7a:0d:f5:
                    30:da:3f:ec:b7:2e:69:c8:64:ff:30:39:73:14:25:
                    3a:12:3e:5b:57:74:6b:55:f9:81:8f:69:e6:bb:67:
                    74:c1:4a:49:65:64:0a:77:74:bb:2d:9f:34:92:30:
                    4b:da:89:09:2f:59:3b:f4:d6:21:ba:9d:bb:6a:d1:
                    df:73:35:3d:1c:81:0c:d4:43:99:b1:c9:d8:99:5f:
                    42:04:b0:5e:74:c7:f6:4f:14:05:97:7e:2b:8d:5a:
                    01:1f:46:99:bd:94:78:1c:e1:7f:cc:bb:33:fd:d1:
                    f7:de:b1:e5:91:85:77:5a:a8:6b:f0:a7:91:3d:cc:
                    db:1d:d8:3b:6d:8c:bf:7c:7c:67:38:7b:46:31:2a:
                    5c:be:d8:c9:84:be:ff:8d:bc:1f:7f:df:19:c9:04:
                    9f:03:d5:70:77:d4:66:4a:79:ff:e6:42:28:f0:56:
                    d7:16:07:d2:e9:be:0a:23:fd:cd:43:30:45:dc:7c:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:15:3F:E1:14:8E:03:B1:C0:A7:29:DA:54:2B:0B:51:9D:29:4B:48
            X509v3 Authority Key Identifier:
                keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:f3:72:b1:3a:72:63:2f:a5:ec:5e:de:ee:66:97:ef:89:
         b9:22:c4:71:65:ba:f3:f1:29:6b:82:8e:ba:af:09:10:91:7c:
         64:1b:5d:e0:4c:0d:f2:85:34:4e:5d:21:4b:90:87:7f:d3:4a:
         9c:89:27:af:f8:ec:6a:37:01:91:28:10:80:59:46:aa:45:40:
         8d:2d:19:e4:4e:e3:18:87:4b:7f:0d:ab:b7:cb:97:86:8b:a1:
         99:5b:a0:37:87:d2:9f:aa:1d:55:75:42:36:c2:a4:36:4a:3f:
         b5:8c:1e:25:69:a4:e1:5a:f0:ff:c3:8a:7e:f6:3a:c9:d7:c1:
         96:52:dd:fb:9e:5b:41:ee:30:2b:7b:84:aa:2a:75:08:01:1d:
         06:89:05:f0:6c:44:19:16:86:54:6c:ff:14:3c:68:63:9c:b8:
         71:74:d5:78:5c:b7:4f:8f:d8:d3:e9:ad:db:4b:94:38:da:0c:
         8a:95:97:b7:4f:50:79:69:3e:30:25:80:6f:25:96:04:05:2c:
         72:37:37:e6:ed:59:95:bd:f3:31:73:90:9e:fb:14:35:81:49:
         3b:b1:9b:11:d9:dc:65:a6:72:e1:a4:a7:d9:3e:a0:ba:70:00:
         b7:25:91:2c:cb:3b:fe:29:4c:94:61:c4:37:3c:29:40:e0:0d:
         e5:29:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:00 2026 by rpki-client