Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          HCL4eem+n1sAhCK4jF5svDIlwr2C0Y5+ES46k9Xff1U=
Subject key identifier:   C4:6B:96:70:C4:DE:40:B1:90:DA:D7:84:EB:27:54:E4:AF:74:1D:AC
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       019CA9EAF6C940306E79AE1FAD3554D25074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          0EAD
Signing time:             Sun 01 Mar 2026 15:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:13 +0000
Files and hashes:         1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: g206i4G1fl6NWhqrjELaS+hUshET4+0o08qk/tNOqC8=)
                          2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
                          3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
                          4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
                          5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:f6:c9:40:30:6e:79:ae:1f:ad:35:54:d2:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Mar  1 15:01:13 2026 GMT
            Not After : Mar  2 15:01:13 2026 GMT
        Subject: CN=c46b9670c4de40b190dad784eb2754e4af741dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:20:c1:c3:b8:a0:a9:ca:47:05:82:e8:61:
                    a2:f9:49:5d:07:90:f1:05:df:6e:5f:d6:16:64:64:
                    08:ae:11:2e:0b:51:e3:7d:4a:8e:bd:47:ab:a3:a8:
                    ed:49:ea:54:38:c0:17:f4:cc:e0:30:ad:03:31:5a:
                    84:44:c4:c7:be:c7:ba:55:10:26:98:dd:1c:9f:d1:
                    f3:ac:37:82:63:f7:34:8e:43:a8:00:17:ef:c3:e4:
                    ff:f9:a6:18:4c:02:45:df:19:92:39:25:22:2f:fd:
                    b0:1c:3d:0b:a0:cb:f4:25:72:aa:cf:b5:e0:16:0a:
                    b0:ce:b6:c8:df:3f:7b:cf:a5:56:bf:bf:b7:46:ef:
                    4a:09:d9:9d:cf:22:80:b3:c9:2b:68:ef:c4:f6:0a:
                    8c:bc:5a:f3:e5:cb:9d:17:98:40:7d:10:67:f6:02:
                    64:ec:d3:c2:1c:17:09:7d:1a:ff:2f:b0:4c:72:57:
                    89:30:cb:87:2f:88:39:70:04:d6:0c:4a:f7:d7:38:
                    14:d8:43:ec:1d:d9:2d:14:5a:4a:77:69:cd:2d:0d:
                    4f:0e:23:11:9c:6d:f1:bc:6d:2b:93:3b:21:a7:64:
                    c6:ec:bf:c1:54:12:ab:03:ff:7e:59:75:a8:94:49:
                    a5:ec:b0:9e:f7:ef:5b:30:70:09:c2:f9:e4:04:a7:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:96:70:C4:DE:40:B1:90:DA:D7:84:EB:27:54:E4:AF:74:1D:AC
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:33:a6:a7:40:7f:e7:07:90:54:15:26:bc:f3:e8:42:4c:7e:
         d5:85:3d:4d:d6:9d:51:02:69:7e:32:2d:c7:be:66:5b:65:bb:
         96:46:02:50:f7:70:27:b0:bf:47:4f:95:23:70:d2:46:69:fe:
         6e:f1:2f:6a:fb:4e:48:94:d2:4c:2f:40:83:37:07:b3:de:69:
         2f:86:50:fb:03:87:98:a0:cb:fa:54:e2:23:d3:4d:82:39:c8:
         8e:ce:b6:39:a9:aa:a5:f5:bc:35:db:b8:38:17:d3:72:2c:2a:
         56:8f:6e:b5:91:e9:84:3b:05:8b:f7:77:51:11:6a:56:a5:28:
         fa:6a:37:c4:a4:f4:93:58:89:24:b7:cb:6f:df:a9:ae:82:f8:
         ae:27:e1:91:b6:43:29:f0:5e:e3:72:11:50:97:d4:df:1c:14:
         17:7c:b7:c9:d4:5d:04:71:62:23:82:cb:9f:03:c2:a3:5a:ce:
         0b:48:89:89:32:1d:53:7e:8b:04:5c:5a:fd:cf:53:9d:d1:12:
         58:5c:ef:86:a7:24:47:e9:d7:39:1b:eb:51:35:35:d8:5c:2c:
         ae:9d:6f:98:7b:a3:b0:5d:6d:0d:11:e7:23:85:01:b7:00:24:
         13:16:51:77:a1:37:b3:ee:92:68:68:53:cd:0b:af:ba:54:44:
         8b:4b:58:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6vbJQDBuea4frTVU0lB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy
YTBlZDYwHhcNMjYwMzAxMTUwMTEzWhcNMjYwMzAyMTUwMTEzWjAzMTEwLwYDVQQD
EyhjNDZiOTY3MGM0ZGU0MGIxOTBkYWQ3ODRlYjI3NTRlNGFmNzQxZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx4gwcO4oKnKRwWC6GGi+UldB5Dx
Bd9uX9YWZGQIrhEuC1HjfUqOvUero6jtSepUOMAX9MzgMK0DMVqERMTHvse6VRAm
mN0cn9HzrDeCY/c0jkOoABfvw+T/+aYYTAJF3xmSOSUiL/2wHD0LoMv0JXKqz7Xg
FgqwzrbI3z97z6VWv7+3Ru9KCdmdzyKAs8kraO/E9gqMvFrz5cudF5hAfRBn9gJk
7NPCHBcJfRr/L7BMcleJMMuHL4g5cATWDEr31zgU2EPsHdktFFpKd2nNLQ1PDiMR
nG3xvG0rkzshp2TG7L/BVBKrA/9+WXWolEml7LCe9+9bMHAJwvnkBKdHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRrlnDE3kCxkNrXhOsnVOSvdB2sMB8GA1UdIwQY
MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt
ZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi
LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDOmp0B/
5weQVBUmvPPoQkx+1YU9TdadUQJpfjItx75mW2W7lkYCUPdwJ7C/R0+VI3DSRmn+
bvEvavtOSJTSTC9AgzcHs95pL4ZQ+wOHmKDL+lTiI9NNgjnIjs62OamqpfW8Ndu4
OBfTciwqVo9utZHphDsFi/d3URFqVqUo+mo3xKT0k1iJJLfLb9+proL4rifhkbZD
KfBe43IRUJfU3xwUF3y3ydRdBHFiI4LLnwPCo1rOC0iJiTIdU36LBFxa/c9TndES
WFzvhqckR+nXORvrUTU12Fwsrp1vmHujsF1tDRHnI4UBtwAkExZRd6E3s+6SaGhT
zQuvulREi0tY9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:02 2026 by rpki-client