Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          Bx/A34zU2aRyOq4cu+jEPWIeyQVSt7ZE6u+9WiBLYic=
Subject key identifier:   EC:FC:59:62:C2:89:06:C9:26:B5:0A:47:11:68:E6:E1:C6:7D:37:82
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       019D97AB2097E786D846A4C027E5B22833E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          18C9
Signing time:             Thu 16 Apr 2026 19:01:07 +0000
Manifest this update:     Thu 16 Apr 2026 19:01:07 +0000
Manifest next update:     Fri 17 Apr 2026 19:01:07 +0000
Files and hashes:         1: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: iD33OfdDHnhFu8dNtzsu89rdazXKV1oGSlUTqPgbWAQ=)
                          2: UWmASN11Y1EhPU_qW1cmmLip81g.roa (hash: kuez9D7n3XS4aPJ21EYpdRS5Q3Qzu3GjOt1Zw0lXo4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:ab:20:97:e7:86:d8:46:a4:c0:27:e5:b2:28:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Apr 16 19:01:07 2026 GMT
            Not After : Apr 17 19:01:07 2026 GMT
        Subject: CN=ecfc5962c28906c926b50a471168e6e1c67d3782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:02:6d:85:97:54:ba:8e:8b:c8:34:4d:8d:e4:
                    58:08:44:17:ff:15:4f:ab:2f:44:57:b5:64:88:fc:
                    21:9a:0f:7a:a8:13:e1:8d:e6:30:89:8c:fc:a2:cc:
                    ce:8a:1f:87:ea:ca:b4:0c:5f:b7:a2:ac:a2:00:1d:
                    60:9d:5c:7a:7e:18:06:0e:92:b9:0d:d9:ff:ef:80:
                    aa:ee:d4:96:b4:26:7f:49:c6:f1:8b:61:ea:c6:fc:
                    d4:06:ba:11:9a:98:ce:3e:42:e4:ab:b5:4e:0b:f9:
                    38:5e:80:65:dd:8f:e4:d7:6f:34:2d:67:7a:f5:b9:
                    51:1e:36:00:da:e1:54:df:33:74:d3:e1:86:99:e2:
                    71:5f:2a:2a:cf:6d:ed:03:28:70:98:8d:47:14:81:
                    41:0e:84:63:d4:a8:11:a7:9f:a2:8b:cb:12:9a:b3:
                    6a:b6:22:86:fa:73:c7:7d:f9:e7:09:69:c0:1b:b7:
                    68:0e:26:b5:fc:58:d3:59:80:20:e9:b7:5e:ab:88:
                    8d:95:ba:bd:0b:c3:8c:88:d6:34:f7:f1:32:1f:40:
                    da:0b:d3:42:8f:0f:6b:fb:d6:71:07:fa:c8:b5:ce:
                    b6:09:f9:ad:08:6b:b4:89:33:d3:7d:38:2b:c2:18:
                    66:b6:01:e9:b4:99:98:eb:58:3e:c4:87:56:22:5d:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:59:62:C2:89:06:C9:26:B5:0A:47:11:68:E6:E1:C6:7D:37:82
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7d:3a:67:00:60:c8:7e:cd:da:a1:be:dc:04:68:7d:7c:3b:
         59:ed:cd:94:49:1e:a2:4f:72:36:eb:41:d1:c5:e6:d1:92:aa:
         96:7e:b2:d1:c4:09:99:4f:db:de:21:63:96:dc:47:83:e4:1a:
         a4:c1:a2:19:f6:4a:f5:34:eb:9b:a5:34:f4:83:f1:0a:12:e9:
         c5:a7:86:fe:17:15:5c:c9:89:05:de:12:01:71:a7:f9:0b:23:
         b3:18:1f:b9:e8:46:9b:d6:4b:24:f7:39:74:67:6a:e9:fe:ae:
         65:40:20:f0:71:fd:e7:59:56:c9:e4:6b:92:08:48:cb:73:1c:
         34:cb:83:89:dd:fa:54:7d:76:6f:ed:a4:0d:97:67:1c:33:e6:
         5f:78:79:91:bf:71:88:27:af:72:e2:46:85:a8:14:b6:18:01:
         73:98:fd:df:9a:6b:7c:f5:b5:8d:d4:91:48:d2:b8:22:c1:1d:
         ce:8c:1c:bb:6d:c4:e4:5b:ff:2d:aa:87:c1:d1:20:a0:7f:24:
         d1:ac:09:f6:3e:0e:9a:b3:82:4f:94:44:db:a3:f9:ab:f6:41:
         53:b2:4b:d7:19:fc:81:90:de:a1:b0:c1:fa:f1:6f:99:ac:a8:
         ee:50:0d:1a:37:e6:f7:23:a2:98:db:a4:5d:50:10:9a:12:52:
         67:85:58:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqyCX54bYRqTAJ+WyKDPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5
MjZlZTgwHhcNMjYwNDE2MTkwMTA3WhcNMjYwNDE3MTkwMTA3WjAzMTEwLwYDVQQD
EyhlY2ZjNTk2MmMyODkwNmM5MjZiNTBhNDcxMTY4ZTZlMWM2N2QzNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QJthZdUuo6LyDRNjeRYCEQX/xVP
qy9EV7VkiPwhmg96qBPhjeYwiYz8oszOih+H6sq0DF+3oqyiAB1gnVx6fhgGDpK5
Ddn/74Cq7tSWtCZ/Scbxi2HqxvzUBroRmpjOPkLkq7VOC/k4XoBl3Y/k1280LWd6
9blRHjYA2uFU3zN00+GGmeJxXyoqz23tAyhwmI1HFIFBDoRj1KgRp5+ii8sSmrNq
tiKG+nPHffnnCWnAG7doDia1/FjTWYAg6bdeq4iNlbq9C8OMiNY09/EyH0DaC9NC
jw9r+9ZxB/rItc62CfmtCGu0iTPTfTgrwhhmtgHptJmY61g+xIdWIl034wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz8WWLCiQbJJrUKRxFo5uHGfTeCMB8GA1UdIwQY
MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt
ZWVjNDZjYTgyYTMzLzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz
LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwX06ZwBg
yH7N2qG+3ARofXw7We3NlEkeok9yNutB0cXm0ZKqln6y0cQJmU/b3iFjltxHg+Qa
pMGiGfZK9TTrm6U09IPxChLpxaeG/hcVXMmJBd4SAXGn+QsjsxgfuehGm9ZLJPc5
dGdq6f6uZUAg8HH951lWyeRrkghIy3McNMuDid36VH12b+2kDZdnHDPmX3h5kb9x
iCevcuJGhagUthgBc5j935prfPW1jdSRSNK4IsEdzowcu23E5Fv/LaqHwdEgoH8k
0awJ9j4OmrOCT5RE26P5q/ZBU7JL1xn8gZDeobDB+vFvmayo7lANGjfm9yOimNuk
XVAQmhJSZ4VYuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:32:48 2026 by rpki-client