Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          Vu1UJj+1gd/veEQivB1W0OKo4GmRMeHY5Mc9BXzz8EQ=
Subject key identifier:   1D:68:77:8A:47:85:FF:BD:BE:92:42:6E:C3:6C:21:B3:86:5E:CB:0F
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       019D2704138264B86970327BE10407101308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          1895
Signing time:             Wed 25 Mar 2026 22:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:11 +0000
Files and hashes:         1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
                          2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
                          3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
                          4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: DIjkdiwqAke+BD/7TYn1W40qQaqWx26gDD4lh3aFST0=)
                          5: q22VxMdSRIy60hnXGH9ZkvEl-VU.roa (hash: zg/MJ8qfVOHy4J7FHOIGJgHJYpom3/1tICP7KNToxU8=)
                          6: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:13:82:64:b8:69:70:32:7b:e1:04:07:10:13:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Mar 25 22:01:11 2026 GMT
            Not After : Mar 26 22:01:11 2026 GMT
        Subject: CN=1d68778a4785ffbdbe92426ec36c21b3865ecb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:df:d1:f5:61:e4:7e:fa:99:1b:a2:77:bd:
                    34:6a:9e:87:b6:b5:83:87:57:76:6c:cf:c9:49:13:
                    1f:ed:52:a0:54:5e:0c:8f:c9:29:2a:95:5c:da:f1:
                    d0:48:46:03:22:42:4a:c4:57:02:72:c3:54:89:8c:
                    5e:dc:9e:97:88:6a:26:6c:ca:c0:f0:09:80:5f:c6:
                    fc:c7:38:38:90:58:d8:47:49:22:f8:7d:51:3f:8e:
                    a3:2d:5c:ec:f6:17:81:9c:1b:5f:ef:92:72:e5:a5:
                    7d:43:11:d7:19:b1:47:9c:f2:b4:99:f8:19:31:5b:
                    c0:c2:ac:4e:ba:5d:f6:f1:9c:55:94:e1:14:ac:39:
                    0b:61:51:57:da:6f:63:13:15:72:bc:be:4e:4f:a0:
                    25:4c:5f:e7:d5:1d:5a:df:02:5f:70:3f:b2:6e:67:
                    80:d4:4b:b9:d6:ad:e9:28:7e:af:88:62:50:1d:35:
                    f7:8e:6e:5b:55:58:44:af:2a:90:c9:cd:4a:40:99:
                    5c:ec:2b:88:06:25:ee:82:21:6f:3a:8f:9c:f8:37:
                    1c:1b:46:f1:1e:c3:27:e8:04:f8:08:d0:5c:2e:c7:
                    d0:2d:1c:3c:84:32:17:06:e8:f0:d0:2e:fa:16:f8:
                    02:5a:4c:3a:fb:7f:45:49:de:b9:17:bc:0c:99:65:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:77:8A:47:85:FF:BD:BE:92:42:6E:C3:6C:21:B3:86:5E:CB:0F
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:2c:e4:37:62:fb:04:13:86:dd:98:50:07:2c:36:51:bd:
         f4:74:c3:eb:c9:a9:c8:94:dd:09:8c:72:5c:5e:09:71:f9:c4:
         6d:7b:5f:07:16:68:bd:a9:0b:fc:f1:96:12:1c:9a:80:b4:4f:
         7c:79:41:0a:ff:26:81:c9:74:4d:d0:1c:61:39:27:96:76:3b:
         f3:11:bc:31:59:da:2c:8c:d5:18:e3:89:5e:83:d1:3d:cf:3c:
         d3:e4:c4:b3:45:f4:82:1c:2c:95:10:dc:fe:46:b1:c1:7d:8a:
         7a:4f:83:5a:b5:3c:9d:06:ea:ec:63:61:3a:47:35:6c:1d:cc:
         fc:23:1b:44:dc:b2:d9:44:45:98:79:99:b8:64:f2:e3:37:70:
         4b:30:b5:f0:84:86:c4:79:20:d2:a6:fa:8e:d8:23:cc:e8:20:
         bc:ff:20:d9:6a:3d:3c:12:da:6a:64:67:dd:8d:63:51:4a:dd:
         e5:4e:37:83:37:52:6b:fd:a4:12:51:7e:2d:17:49:16:ba:cc:
         a1:93:c9:b1:f2:ab:da:db:2f:7f:8d:68:ba:8d:bc:00:98:7d:
         1a:2f:ea:34:28:d7:40:2f:97:bc:61:3b:2b:32:66:7e:73:db:
         b3:55:dd:ff:16:fe:ca:6a:c7:88:7e:e1:18:ce:bd:3c:9f:96:
         dd:5b:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:00 2026 by rpki-client