Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File:                     NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier:          QplU3PlJ7YPUd2PCbRSkxbfRUmG8PVGffREb3kSyQM8=
Subject key identifier:   71:33:49:8C:52:FD:E5:80:EE:35:DC:1E:BD:D7:92:F0:31:A9:3C:CD
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer:       /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial:       019D277280145E1E574B93018AC249C3BA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number:          0A38
Signing time:             Thu 26 Mar 2026 00:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:48 +0000
Files and hashes:         1: Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa (hash: mExfVg4mEZkQfa/o53ZXrQKDJoTaHqGKP/mA0/Gw99A=)
                          2: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: iEc93/+i2KI0Z31iRX9mHE+O3buKBmP1Kj8tQosCq+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:80:14:5e:1e:57:4b:93:01:8a:c2:49:c3:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
        Validity
            Not Before: Mar 26 00:01:48 2026 GMT
            Not After : Mar 27 00:01:48 2026 GMT
        Subject: CN=7133498c52fde580ee35dc1ebdd792f031a93ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:58:2c:16:fa:39:d4:13:2d:27:ed:71:a7:
                    b5:b6:66:97:07:32:96:63:a1:84:17:e6:87:89:6a:
                    b6:85:1b:f9:70:75:4a:09:28:68:3a:71:ca:f3:11:
                    e1:11:0c:49:be:16:32:9d:26:d2:33:7a:16:df:0f:
                    02:d9:eb:df:85:01:5c:1d:60:b1:5d:3f:2a:24:47:
                    30:07:a6:13:24:59:39:4a:1b:7e:7c:0f:69:6f:75:
                    b7:cb:59:af:3d:a7:b9:3f:02:20:8e:1a:2b:ad:d0:
                    aa:5b:b3:20:73:e2:d6:ac:0c:46:31:e5:65:b8:b3:
                    b9:ee:26:80:c3:a8:5e:04:55:a3:fc:36:b4:ce:6e:
                    9a:0d:02:e1:05:0e:10:f7:fe:90:bb:68:2e:1f:db:
                    bf:ff:77:09:a0:e8:a1:c9:0c:15:30:d8:6b:f3:f2:
                    f5:08:bf:91:39:15:b3:ec:2a:21:7e:3d:f9:7f:57:
                    90:2b:06:08:2b:5f:0c:3a:3e:3b:a0:5a:3b:1c:09:
                    db:7b:17:88:dd:49:98:3f:5e:18:a4:d5:f3:ba:b7:
                    e8:16:43:b7:df:4a:e0:15:98:8d:98:42:e2:b7:7c:
                    d8:a3:87:b1:08:c2:8b:cb:5d:22:36:c3:b9:98:16:
                    d8:f7:67:d8:d8:a8:a6:17:47:78:30:7a:25:d9:78:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:33:49:8C:52:FD:E5:80:EE:35:DC:1E:BD:D7:92:F0:31:A9:3C:CD
            X509v3 Authority Key Identifier:
                keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:db:c2:91:e7:0a:7d:8e:aa:d1:6c:de:9f:02:34:32:ea:
         b3:34:4b:02:09:f6:84:20:2e:ac:69:52:d9:a8:8f:ed:59:e6:
         98:89:48:8c:a8:f9:c9:d4:4d:69:d5:18:da:6c:90:98:e6:11:
         c9:3d:d0:ff:5a:8a:fe:fb:b6:8b:1d:3a:c0:a7:e0:c8:b1:06:
         12:bd:97:08:e3:3a:2b:3b:bc:0e:d3:7f:82:a5:e0:b3:98:48:
         bc:60:a6:e0:eb:d6:64:b2:1f:a2:b6:f4:11:ff:52:52:c4:92:
         77:dd:f3:90:7f:52:70:7b:5b:22:fc:c9:b0:17:40:57:f9:b5:
         9f:25:ce:89:ee:1d:94:4f:56:27:fa:2b:48:2e:34:ef:f3:d2:
         5f:f0:52:bb:ee:c7:c9:af:ae:cd:d9:44:cf:38:da:fa:57:4d:
         c4:57:32:ee:b8:37:09:3e:62:bd:d8:64:dd:ca:d0:92:a7:7b:
         83:f2:66:b5:c7:72:ab:cb:67:c0:ed:ee:4f:1f:08:f5:b5:66:
         bd:87:25:aa:75:b4:eb:7c:a2:60:0c:26:bd:51:b0:d8:2e:03:
         da:5a:f2:c6:c5:67:ca:1b:f2:63:ec:6e:3b:30:1f:a6:ae:7e:
         e2:c6:81:5b:8b:4e:93:df:9d:0b:d8:70:dd:e1:07:47:a3:ac:
         00:64:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:34 2026 by rpki-client