Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          2itW+ZTD8QYyct8492IMxbdq0LD/PyA9MS6nkO4F0uo=
Subject key identifier:   CA:6B:97:1A:30:24:3F:C3:3B:96:73:AA:29:45:D8:BC:2D:4E:D2:7F
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       019CAC7E35211F27D94E5D479B8CC4F81729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1604
Signing time:             Mon 02 Mar 2026 03:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:18 +0000
Files and hashes:         1: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (hash: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk=)
                          2: 8vxStV176PVhHBrk8PFYjrws9_k.roa (hash: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: 2SC0yucc+/pzZv7kWrgHQdYoOEqK0WF9qEK0cwDeBMo=)
                          4: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (hash: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA=)
                          5: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (hash: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:35:21:1f:27:d9:4e:5d:47:9b:8c:c4:f8:17:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Mar  2 03:01:18 2026 GMT
            Not After : Mar  3 03:01:18 2026 GMT
        Subject: CN=ca6b971a30243fc33b9673aa2945d8bc2d4ed27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:64:95:f1:98:81:12:91:57:a8:a7:8c:82:
                    6a:1f:57:21:fc:64:39:44:f0:1a:80:c2:52:c6:33:
                    bb:8b:05:d2:2f:84:03:e4:49:5e:22:f7:0e:b4:b7:
                    fd:4f:8a:a1:10:de:61:87:3e:0a:92:fe:49:47:02:
                    46:96:35:88:96:b6:3d:33:16:cc:e0:1e:0f:ba:cb:
                    b5:b7:d0:df:21:e5:75:4e:90:d7:5e:8e:a7:fe:b1:
                    16:b0:f2:81:ed:e9:97:fa:6e:b0:b8:4e:a1:18:67:
                    b5:65:6a:82:c0:17:94:3b:43:da:25:f5:ce:7d:ea:
                    d8:78:e4:7c:6d:2b:2d:15:db:bc:d6:38:06:e2:bc:
                    5e:fe:53:d5:3f:14:ff:b5:1b:f8:04:82:8e:65:6b:
                    89:82:e8:01:ae:90:f1:49:b3:7f:7d:67:11:9a:78:
                    fe:3d:90:d6:d1:3f:c0:e3:14:8e:37:f3:16:1d:66:
                    46:2f:c6:a3:c9:0a:bc:88:4e:a4:22:f8:3c:65:dd:
                    c2:a9:0e:94:30:f7:d9:60:dd:8c:11:84:ec:ba:23:
                    7b:9f:b6:81:32:ef:a7:39:a5:4b:c3:75:ea:a7:34:
                    c0:d8:21:8f:1d:e5:25:f1:44:65:2a:2d:c6:7e:36:
                    42:d5:90:54:7b:6c:57:3b:32:5e:3a:84:33:0d:4e:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:97:1A:30:24:3F:C3:3B:96:73:AA:29:45:D8:BC:2D:4E:D2:7F
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:6f:40:0f:dc:c6:ce:cc:28:e6:9b:bf:6f:5b:99:82:d3:f1:
         eb:57:40:22:25:cf:f3:ed:b3:7a:ee:3d:83:e5:46:03:b0:54:
         3e:e5:0e:6b:d5:31:56:42:bc:6e:32:ea:19:33:16:58:8f:56:
         13:ae:7c:92:8d:53:50:9a:5f:97:76:b5:7c:87:e2:fa:d0:0a:
         b7:13:16:ee:6e:fd:0d:37:dc:73:07:3a:de:9c:d9:5d:78:ce:
         a9:b9:b1:55:ad:8d:6e:3c:27:4c:01:46:b5:5c:de:85:3c:2b:
         ac:ee:b0:1c:cd:98:53:03:6a:a0:60:31:8c:90:05:d4:c6:5a:
         47:7c:b3:3c:02:dc:4a:a0:a6:42:28:50:c8:68:b8:fd:e2:d4:
         b0:79:27:f7:af:b7:a0:bf:c8:08:a6:07:39:5c:7c:eb:1f:85:
         1e:04:6b:62:10:da:d9:b3:32:3d:64:2a:72:6b:c3:7b:49:4c:
         55:ac:bf:80:de:66:1c:5e:b9:4b:a4:7d:fe:2b:86:70:13:b4:
         99:fd:fb:ab:6e:27:7a:f4:51:f7:f2:85:14:1f:fe:8b:8e:4f:
         68:86:e7:ee:c4:43:a6:24:88:a3:65:a3:f4:e7:bb:ec:80:6b:
         ec:54:27:6d:50:b4:32:85:44:ad:94:45:f3:c5:63:e8:8f:e7:
         78:4d:2e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfjUhHyfZTl1Hm4zE+BcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjYwMzAyMDMwMTE4WhcNMjYwMzAzMDMwMTE4WjAzMTEwLwYDVQQD
EyhjYTZiOTcxYTMwMjQzZmMzM2I5NjczYWEyOTQ1ZDhiYzJkNGVkMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSJklfGYgRKRV6injIJqH1ch/GQ5
RPAagMJSxjO7iwXSL4QD5EleIvcOtLf9T4qhEN5hhz4Kkv5JRwJGljWIlrY9MxbM
4B4Pusu1t9DfIeV1TpDXXo6n/rEWsPKB7emX+m6wuE6hGGe1ZWqCwBeUO0PaJfXO
ferYeOR8bSstFdu81jgG4rxe/lPVPxT/tRv4BIKOZWuJgugBrpDxSbN/fWcRmnj+
PZDW0T/A4xSON/MWHWZGL8ajyQq8iE6kIvg8Zd3CqQ6UMPfZYN2MEYTsuiN7n7aB
Mu+nOaVLw3XqpzTA2CGPHeUl8URlKi3GfjZC1ZBUe2xXOzJeOoQzDU6qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMprlxowJD/DO5ZzqilF2LwtTtJ/MB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx29AD9zG
zswo5pu/b1uZgtPx61dAIiXP8+2zeu49g+VGA7BUPuUOa9UxVkK8bjLqGTMWWI9W
E658ko1TUJpfl3a1fIfi+tAKtxMW7m79DTfccwc63pzZXXjOqbmxVa2NbjwnTAFG
tVzehTwrrO6wHM2YUwNqoGAxjJAF1MZaR3yzPALcSqCmQihQyGi4/eLUsHkn96+3
oL/ICKYHOVx86x+FHgRrYhDa2bMyPWQqcmvDe0lMVay/gN5mHF65S6R9/iuGcBO0
mf37q24nevRR9/KFFB/+i45PaIbn7sRDpiSIo2Wj9Oe77IBr7FQnbVC0MoVErZRF
88Vj6I/neE0uXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:33 2026 by rpki-client