Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          6nOSAoxGXTy1vnDxUlFKNYvt6oU1ccFt024w4c/taZ8=
Subject key identifier:   A1:D1:2E:5B:94:18:A9:D4:6C:D4:97:DD:CC:AC:0C:E4:D6:E3:50:AA
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       019D99CFBDA3759FCF4B0872577DF7B369FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0A7D
Signing time:             Fri 17 Apr 2026 05:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:21 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: Ync188YS1VzWbFIYYlCKNB8hiP5AfsszbMNATXR4W5k=)
                          2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:bd:a3:75:9f:cf:4b:08:72:57:7d:f7:b3:69:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Apr 17 05:00:21 2026 GMT
            Not After : Apr 18 05:00:21 2026 GMT
        Subject: CN=a1d12e5b9418a9d46cd497ddccac0ce4d6e350aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:e5:5d:2b:a2:a7:a6:49:15:6a:78:9f:10:
                    d1:9a:e8:8d:60:54:5b:61:0f:6b:3c:81:ac:e9:c8:
                    d4:e9:40:4f:d7:89:26:9c:b4:96:d6:ff:69:ff:b4:
                    81:10:a6:6f:72:aa:80:8e:ab:c6:4b:e5:b5:ef:7e:
                    02:6b:7b:18:cf:24:b3:b1:bc:88:34:b1:45:32:ed:
                    8e:c5:46:bd:93:b1:12:65:ac:4d:d8:2a:ed:0c:d2:
                    95:33:4e:de:44:71:8e:c6:86:12:6c:64:ef:d3:0c:
                    64:33:6f:41:f5:34:4d:73:e9:cd:31:96:0e:1b:2f:
                    44:59:34:59:8b:aa:41:f5:41:ff:57:2b:7f:96:87:
                    9c:0b:96:30:15:40:47:e8:cd:96:c8:65:eb:8e:ad:
                    a5:58:2f:f8:91:8e:00:6f:89:a7:16:5c:1b:7d:9f:
                    84:ac:2a:34:12:df:59:54:39:13:40:ae:c0:4e:df:
                    a1:39:1a:b3:5a:88:fd:1d:e6:33:a2:63:49:1c:06:
                    3a:57:44:30:8e:3e:1f:93:5b:b4:f9:51:42:cf:2c:
                    a8:5e:54:10:87:a9:c6:35:80:ed:26:20:c7:b3:8e:
                    e1:d0:2c:8a:65:d5:3a:de:a4:16:b6:90:68:07:f2:
                    6a:27:63:81:fb:2a:8f:f1:05:79:1c:a8:d6:a9:d2:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:2E:5B:94:18:A9:D4:6C:D4:97:DD:CC:AC:0C:E4:D6:E3:50:AA
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:9c:f6:05:8c:9c:c4:4a:dc:c1:82:bd:d1:61:3b:5f:39:
         2d:6f:f2:ad:01:ce:c9:dc:dd:34:54:87:22:fe:f3:ec:2e:33:
         4d:7d:a4:db:55:ae:b7:43:3c:4b:e2:77:cc:be:0e:4e:4f:e7:
         90:1d:76:82:e1:ab:cb:fd:0e:a0:53:4d:1b:ec:d1:b4:80:a3:
         9b:25:18:10:9f:83:89:80:77:1d:7e:ec:11:49:8e:4b:51:31:
         16:c5:aa:39:af:75:70:5b:b3:95:09:e4:75:dd:57:c0:f4:c7:
         e1:dc:24:23:fc:5d:e7:49:95:29:71:4d:9a:11:34:17:d0:6d:
         81:5e:d5:91:77:e6:8a:d7:4b:93:ff:8b:54:fe:07:a5:37:3f:
         d6:aa:dd:95:e8:ef:dd:bb:38:75:6f:df:b4:c7:3d:90:54:85:
         10:7e:e7:51:28:6c:3a:5a:cd:91:fb:71:d3:e1:c0:be:71:46:
         6e:99:fc:03:d9:cd:3d:bb:68:5c:46:e5:23:2f:ae:a3:c3:63:
         f2:56:0d:d8:7d:57:82:91:a9:a6:77:c8:67:bc:27:68:cc:48:
         e8:2e:5b:1c:a3:82:6a:e2:84:5c:3b:e1:f3:8f:d1:9a:45:52:
         7f:1e:f9:d9:ef:6e:2f:eb:55:17:06:07:87:c9:fd:31:a7:cc:
         1b:94:9e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz72jdZ/PSwhyV333s2n8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjYwNDE3MDUwMDIxWhcNMjYwNDE4MDUwMDIxWjAzMTEwLwYDVQQD
EyhhMWQxMmU1Yjk0MThhOWQ0NmNkNDk3ZGRjY2FjMGNlNGQ2ZTM1MGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XrlXSuip6ZJFWp4nxDRmuiNYFRb
YQ9rPIGs6cjU6UBP14kmnLSW1v9p/7SBEKZvcqqAjqvGS+W1734Ca3sYzySzsbyI
NLFFMu2OxUa9k7ESZaxN2CrtDNKVM07eRHGOxoYSbGTv0wxkM29B9TRNc+nNMZYO
Gy9EWTRZi6pB9UH/Vyt/loecC5YwFUBH6M2WyGXrjq2lWC/4kY4Ab4mnFlwbfZ+E
rCo0Et9ZVDkTQK7ATt+hORqzWoj9HeYzomNJHAY6V0Qwjj4fk1u0+VFCzyyoXlQQ
h6nGNYDtJiDHs47h0CyKZdU63qQWtpBoB/JqJ2OB+yqP8QV5HKjWqdJalwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHRLluUGKnUbNSX3cysDOTW41CqMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGic9gWM
nMRK3MGCvdFhO185LW/yrQHOydzdNFSHIv7z7C4zTX2k21Wut0M8S+J3zL4OTk/n
kB12guGry/0OoFNNG+zRtICjmyUYEJ+DiYB3HX7sEUmOS1ExFsWqOa91cFuzlQnk
dd1XwPTH4dwkI/xd50mVKXFNmhE0F9BtgV7VkXfmitdLk/+LVP4HpTc/1qrdlejv
3bs4dW/ftMc9kFSFEH7nUShsOlrNkftx0+HAvnFGbpn8A9nNPbtoXEblIy+uo8Nj
8lYN2H1XgpGppnfIZ7wnaMxI6C5bHKOCauKEXDvh84/RmkVSfx752e9uL+tVFwYH
h8n9MafMG5Se0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:40 2026 by rpki-client