Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File:                     njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier:          W/aAKZcGIrt2dplxA8CAiQa6x7dce/+G3nAzsKmnkDU=
Subject key identifier:   EF:DA:EB:EB:07:10:A4:4D:1F:E9:4A:92:DA:B3:16:7B:82:EF:FF:8A
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer:       /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial:       019D2DE1E7364E07E27217C1FBE32A8E029D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number:          0A82
Signing time:             Fri 27 Mar 2026 06:01:12 +0000
Manifest this update:     Fri 27 Mar 2026 06:01:12 +0000
Manifest next update:     Sat 28 Mar 2026 06:01:12 +0000
Files and hashes:         1: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (hash: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE=)
                          2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: hX2qj8MRc03GruTbK86a+zfaqNXlLfFiM8rD+yDzOiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:e1:e7:36:4e:07:e2:72:17:c1:fb:e3:2a:8e:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
        Validity
            Not Before: Mar 27 06:01:12 2026 GMT
            Not After : Mar 28 06:01:12 2026 GMT
        Subject: CN=efdaebeb0710a44d1fe94a92dab3167b82efff8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:02:b9:16:83:8d:69:bd:04:30:f6:fb:14:
                    05:14:e2:e9:77:36:a4:3b:4d:75:7a:b3:1a:b5:14:
                    74:2d:0b:43:ee:82:67:2c:52:a0:18:64:c3:62:f0:
                    4c:35:5f:fb:14:da:2f:36:07:b9:23:1b:dd:63:01:
                    09:8e:b9:e3:37:e4:f0:4f:86:a4:e9:36:f0:66:77:
                    0d:5c:39:fa:5d:c0:ae:49:86:29:77:75:25:74:0e:
                    a7:cf:fa:84:4b:2d:f6:2b:8e:0d:a3:1b:dd:43:87:
                    b2:83:f6:72:3a:1a:a5:62:8c:17:21:32:dc:2a:54:
                    78:43:62:f8:a7:bb:69:bc:59:fc:5c:ca:ce:10:86:
                    25:53:90:39:5b:17:13:98:61:a0:87:e3:f8:bc:0f:
                    8e:65:4e:01:1b:dd:73:53:d9:6d:cc:58:93:b5:5d:
                    2b:12:bd:df:4c:eb:0f:0f:13:b7:f5:da:eb:b7:39:
                    58:f9:d9:2d:b6:3c:d8:90:99:26:a0:72:17:25:1a:
                    e9:de:70:0e:23:75:e7:2f:a9:d9:e3:ae:83:f6:7c:
                    d9:a5:d4:97:f3:3f:bc:7c:9d:48:4f:0e:65:25:a9:
                    cb:6a:52:47:8e:b4:30:2c:d1:63:9f:2c:78:20:12:
                    17:9f:ed:f2:09:4f:b5:54:ac:05:87:6d:0c:48:58:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:EB:EB:07:10:A4:4D:1F:E9:4A:92:DA:B3:16:7B:82:EF:FF:8A
            X509v3 Authority Key Identifier:
                keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:fd:18:d0:54:ea:ee:24:45:ab:b4:17:86:55:67:3d:e2:
         4f:4d:3f:66:d4:67:5f:ea:a7:f1:75:06:7c:5b:61:51:cb:45:
         c6:83:8d:52:47:c3:6a:f9:41:b2:66:a3:da:49:5f:c2:0a:d5:
         6c:f1:8b:f0:06:ce:f8:3a:b5:76:b7:c5:e6:1d:97:6f:87:6b:
         e1:bd:b8:9d:7c:71:ec:0c:e7:d8:f3:64:61:ff:37:59:38:2f:
         f8:a8:ac:d8:b5:02:ab:9a:70:9b:18:9f:50:0e:02:b0:d2:3b:
         b0:75:55:6d:fb:86:21:30:b1:c5:a5:c0:29:65:9c:fa:25:36:
         07:0b:6c:f7:f6:14:4b:3c:13:a3:0d:76:68:5c:b0:98:12:c9:
         19:54:9d:66:c7:63:3f:3c:09:79:c1:93:7a:eb:05:17:84:72:
         b1:6f:60:05:95:3c:02:7c:5f:4f:fc:cc:4d:97:5c:3e:26:a3:
         74:5c:01:6c:b1:12:98:af:6b:d9:82:43:7d:6b:ee:6a:fa:d0:
         3a:77:cd:1a:d3:69:73:da:b2:cf:4a:d2:70:ea:8f:1d:03:91:
         a8:fb:59:f1:d4:c4:e8:b4:9f:09:80:58:a8:34:66:e2:56:3c:
         4b:8a:6a:e1:7b:1d:77:30:0f:93:6f:8e:b0:28:5b:87:67:0c:
         76:99:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:38:17 2026 by rpki-client