Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File:                     0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier:          qynIkuueKRhDmpTTuNK769YMpaMUMaJaBv4X8Z1fiP0=
Subject key identifier:   B0:AD:C3:F1:0B:34:42:FD:8D:74:7E:DB:72:B1:F9:F4:6B:6E:42:77
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer:       /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial:       019D98F443CE5D6BFB267CE886218584D435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number:          0E36
Signing time:             Fri 17 Apr 2026 01:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:37 +0000
Files and hashes:         1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: nK1fHr7/IpzB4pBWUKuPoDs9zt4L+6Ehp7fBRzHiPLs=)
                          2: JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa (hash: LO/2rEaU8NJadCqLNPLOuZLeub0erw3UpacAaLPm6Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:43:ce:5d:6b:fb:26:7c:e8:86:21:85:84:d4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
        Validity
            Not Before: Apr 17 01:00:37 2026 GMT
            Not After : Apr 18 01:00:37 2026 GMT
        Subject: CN=b0adc3f10b3442fd8d747edb72b1f9f46b6e4277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:dd:bc:7d:b3:d4:b0:90:07:4a:4b:cf:21:
                    8e:1c:a2:7e:1d:c2:47:7d:5f:a9:d9:c8:32:87:9c:
                    ba:5a:db:4c:93:5d:9d:0b:64:16:37:be:d7:63:70:
                    70:71:c6:e2:aa:ba:78:0d:b4:fe:f0:69:51:23:42:
                    62:27:f8:67:e1:35:a7:02:7a:14:a1:ed:ad:26:30:
                    bc:bc:d9:ab:36:b0:f8:6c:3d:65:28:44:62:d0:99:
                    47:3e:cc:70:63:6c:57:c5:28:df:73:f7:9e:01:9c:
                    d6:78:fa:8f:51:15:53:ef:12:02:8f:e0:bf:03:dd:
                    58:fd:af:42:5e:0e:9d:51:20:2e:19:d5:c1:9e:f5:
                    01:bc:f9:e8:a3:ab:be:c6:63:82:0e:1f:ba:0e:19:
                    05:d2:51:1c:7a:25:a2:d2:2c:74:b9:5e:91:a0:80:
                    74:7e:45:5d:2b:c9:f3:6e:09:28:c6:8b:10:1d:0e:
                    8c:e7:f7:c7:1c:cc:a7:90:f3:21:63:88:47:30:c8:
                    ce:2d:7c:46:42:a6:2c:be:90:e3:d4:d0:2d:0e:a9:
                    86:11:60:25:3e:78:dc:5f:ab:3b:f5:e2:e7:76:19:
                    5c:d4:43:8c:78:b1:86:9a:71:f8:05:29:2b:fa:4f:
                    0e:af:c3:11:34:d7:ce:2c:cf:9f:58:5b:e9:0a:29:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:C3:F1:0B:34:42:FD:8D:74:7E:DB:72:B1:F9:F4:6B:6E:42:77
            X509v3 Authority Key Identifier:
                keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:4a:de:3f:0e:51:a9:7b:c8:ce:ea:d5:a7:f9:c8:73:36:
         b3:27:67:18:26:3a:2c:4a:1f:e3:51:bf:cd:6c:23:dd:65:b3:
         6e:9c:6f:56:33:62:b9:62:4e:db:ec:b2:65:d7:aa:e5:cf:dd:
         88:9f:b9:55:ee:64:06:ec:c8:d8:e0:d9:11:99:aa:4f:6b:ff:
         57:fa:80:99:a5:8f:3f:98:6e:23:08:ef:a7:48:a7:79:ef:f0:
         4e:d9:a4:ec:46:cd:22:ff:63:a8:b0:99:03:c4:8a:9d:9c:1b:
         b4:40:73:ae:cb:17:f1:60:32:ca:76:3d:fb:19:b6:0d:42:4a:
         1d:05:94:6e:16:f9:0e:12:c8:b6:32:2a:52:d0:a4:5c:b2:16:
         29:03:5e:77:5e:bc:33:64:1a:70:bc:2e:6c:e5:fd:f2:7d:33:
         db:65:31:49:a0:18:d9:04:f7:90:5a:64:a3:54:cd:1c:f0:79:
         1c:16:d9:81:f4:34:c0:d2:17:b4:d0:8b:c5:bb:d4:17:b4:d1:
         ee:ef:ac:c6:1e:51:19:ae:91:d0:16:a4:15:67:e5:f7:cd:f0:
         68:93:5c:3a:d9:b0:fd:62:5a:79:39:a4:f4:e8:c2:87:13:70:
         61:f1:d4:3e:32:9d:98:46:88:1c:41:6b:a8:9a:2f:8d:98:53:
         be:a4:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:24 2026 by rpki-client