Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File:                     Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier:          PRloe0oun/Jxz3sChhOd9phiFeBcPN/4TX7130BT1W4=
Subject key identifier:   7C:B2:49:E5:2B:62:B5:A8:7F:ED:57:49:D7:A7:9A:8E:41:08:CA:00
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer:       /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial:       019D28BB924AB775485E82DDE3E4326E5A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number:          02B5
Signing time:             Thu 26 Mar 2026 06:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:14 +0000
Files and hashes:         1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: 65LM8h0NkjKYP/SmTpW2QNjAMsDFN1gAIBlU8xOc0mw=)
                          2: iloUVLRqtoal6LUpk2_xa7xOnZg.roa (hash: VBxsjAoKIrvki5mLaeRbqq1p9mC/zepjwgxGu4sJgFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:92:4a:b7:75:48:5e:82:dd:e3:e4:32:6e:5a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
        Validity
            Not Before: Mar 26 06:01:14 2026 GMT
            Not After : Mar 27 06:01:14 2026 GMT
        Subject: CN=7cb249e52b62b5a87fed5749d7a79a8e4108ca00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:77:76:65:96:29:88:22:ef:3c:39:ea:d5:
                    81:bb:5a:25:0b:bd:60:64:a0:98:6f:d3:e5:90:20:
                    f9:95:c8:a2:05:c6:55:6c:c6:66:41:31:33:fb:1e:
                    09:9d:45:28:ed:3d:72:62:f1:0a:0b:7e:22:8a:d0:
                    a0:d0:c2:51:c6:89:6e:32:29:2a:57:7b:55:b9:d1:
                    a2:1e:85:d7:3c:15:91:f7:6b:24:05:7a:58:f1:97:
                    60:0d:aa:0c:73:3b:3c:87:2b:4a:d3:42:c0:9b:58:
                    5e:51:66:c8:52:73:9c:aa:f0:c5:6c:d8:e2:5e:9e:
                    42:cf:5d:68:a8:25:e3:22:a6:24:eb:ef:db:69:b7:
                    ee:fb:61:3a:49:d8:27:43:73:0a:4f:78:c2:61:67:
                    23:2e:21:4b:8c:42:e9:e4:78:bd:f1:4e:80:96:6e:
                    39:7c:58:bd:2f:c0:43:b5:d9:cd:d5:05:25:a2:cb:
                    bd:9f:38:8a:56:14:16:75:10:0d:11:a9:79:aa:1c:
                    cd:4b:6a:48:14:3c:c5:26:c1:4b:4d:29:13:64:54:
                    00:8a:f8:7b:2a:93:7e:bd:33:9f:7b:e3:23:57:b6:
                    87:c4:32:45:dd:f5:2f:ad:12:fe:16:7c:e6:24:99:
                    1a:df:b3:60:e0:ae:5b:64:a5:eb:3f:ba:8d:ac:9f:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:49:E5:2B:62:B5:A8:7F:ED:57:49:D7:A7:9A:8E:41:08:CA:00
            X509v3 Authority Key Identifier:
                keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:40:3a:b9:ff:42:01:12:f0:46:cd:4b:0e:ff:80:06:28:
         7e:17:12:49:35:bc:41:ee:fe:64:a1:5f:24:d1:49:a1:8d:39:
         b8:4c:94:61:4e:37:6e:d8:1a:85:5b:91:26:cd:4f:80:54:ff:
         7a:c4:2b:10:c5:d1:5b:1e:fd:4a:90:7f:de:29:de:67:6b:75:
         e1:31:3e:b8:70:bd:86:b4:61:0a:8f:9e:2f:51:0b:4b:e5:d6:
         8c:4d:8e:a1:c4:fc:30:7a:06:97:55:e9:fb:8a:d4:f7:48:90:
         3b:54:ee:f6:af:25:35:9a:ff:eb:2a:32:f5:38:53:cf:90:0b:
         be:3b:00:dd:50:b6:d9:1f:7b:a1:51:8a:f6:da:4b:92:f1:fa:
         d7:bb:fa:f3:57:60:0f:c4:11:d7:44:53:cb:66:8a:08:cb:61:
         b6:8e:c8:ab:fb:8b:ad:c8:fb:75:d0:2e:9b:15:6f:87:37:d6:
         a2:c3:5b:eb:20:1f:2f:72:39:75:c3:2c:a1:28:ed:ee:0c:07:
         37:be:84:16:63:5e:0f:a0:62:51:a8:de:cb:08:31:45:9f:d4:
         4e:87:d9:a7:c1:7e:b5:35:ae:9c:f1:5c:bf:7b:93:45:f4:38:
         31:35:98:6d:e8:3c:85:fc:1a:ca:37:35:be:22:44:45:ce:dd:
         c8:75:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:00 2026 by rpki-client