Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          sgjEgndU6XFZICEDuz8SfPtHRIFf46x7uNTozDFG/es=
Subject key identifier:   16:95:EB:3F:DE:61:20:2E:44:E4:EB:CB:75:E3:5B:46:28:B7:92:FA
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       019CAEA31F80B30FD8FFD3934B62023A47BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          07F1
Signing time:             Mon 02 Mar 2026 13:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:51 +0000
Files and hashes:         1: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: 5XH/o15ZArHaEyzmiOabpwSQUmQBiysmLE7/KPDUG6g=)
                          2: jVkKuhLBgjcxgmZ4JbZooBHVJTA.roa (hash: l52OV0jVhno5nCt35UFaMCMSSD9pL5Av6xQOaLd6nNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:1f:80:b3:0f:d8:ff:d3:93:4b:62:02:3a:47:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: Mar  2 13:00:51 2026 GMT
            Not After : Mar  3 13:00:51 2026 GMT
        Subject: CN=1695eb3fde61202e44e4ebcb75e35b4628b792fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:21:b6:30:7e:62:b3:0f:35:ff:fe:ee:5f:
                    8e:39:40:ce:60:d4:d5:9b:37:a0:73:60:64:ff:cc:
                    88:9d:29:d3:83:22:17:41:fd:b1:0e:93:39:27:c1:
                    37:5e:4a:f7:00:70:86:26:3f:f2:ce:3b:c7:44:04:
                    5b:0a:81:d6:36:76:f5:e0:83:21:4f:93:5f:0f:4e:
                    41:b9:f7:bc:61:12:3d:07:12:c1:45:8c:1f:1d:ec:
                    22:2f:0c:48:05:ca:2f:1e:ad:d9:a6:9d:c3:a2:34:
                    bd:de:94:ca:8a:d3:90:9b:5d:9a:6c:47:02:8f:23:
                    da:54:e3:d6:1a:2a:28:4e:42:4b:41:11:a9:61:e7:
                    5c:9c:59:f7:e8:6c:13:b0:4a:86:29:dd:eb:ab:ae:
                    fe:a9:75:65:e1:9f:0e:4c:50:25:70:5f:00:43:46:
                    87:43:6a:25:ab:89:47:a0:46:cd:27:aa:8c:d8:97:
                    85:cb:64:b2:ed:be:ad:0e:e6:59:dd:77:cf:76:de:
                    5f:1f:69:9a:83:b4:13:b8:42:c9:3f:47:66:cd:91:
                    1b:b7:e5:56:36:62:2d:65:7f:17:a0:5e:5e:70:33:
                    55:94:cb:1a:02:fb:e5:76:13:0e:26:e5:69:b1:6a:
                    34:fa:b3:22:2f:e1:12:5e:5a:aa:6b:63:2d:1e:ec:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:EB:3F:DE:61:20:2E:44:E4:EB:CB:75:E3:5B:46:28:B7:92:FA
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:94:4d:b2:bc:3d:85:0a:09:98:1c:5e:21:6e:9a:79:ac:
         ea:5b:5b:13:38:de:26:67:23:a3:cb:62:98:91:fa:cb:01:85:
         15:c0:26:a7:26:89:08:cb:ca:fb:f2:f9:f3:db:b4:89:3e:7d:
         1d:3a:1f:10:db:17:59:1b:09:04:b8:be:80:47:c7:ad:a7:d6:
         f7:b1:c1:72:70:aa:c2:b7:3f:e1:b3:8f:f4:c3:81:49:c2:c2:
         1b:72:8d:84:9f:55:66:00:0a:74:1a:06:aa:e3:39:7e:16:e9:
         2b:63:2c:f1:01:c2:7b:7a:a6:77:cf:3f:74:67:69:d9:be:c5:
         cc:97:a1:16:d4:7c:b5:8f:11:cc:37:42:85:b3:fd:b8:af:81:
         95:6b:e7:f3:8c:e6:8a:d0:07:41:90:0e:70:a2:19:43:41:77:
         f4:81:82:35:f5:68:73:4a:c7:8b:51:82:6b:77:14:ed:97:d1:
         2b:23:96:0f:0a:07:71:7b:f8:ae:21:80:af:50:57:e6:22:65:
         e2:63:fc:e9:2d:c9:a8:fb:45:7a:58:d4:0e:b3:fc:9f:ad:6e:
         35:d2:25:2b:86:5f:f5:fd:e4:21:1a:e7:2a:18:aa:42:84:04:
         a3:73:c6:24:4d:ca:e9:fa:9b:14:8e:a0:71:c3:b3:1c:a5:0d:
         f9:5e:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:24 2026 by rpki-client