Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          sCmx69ba4Bc+uQSq4348q55j6VyXoCoOTvQyVUp3jG4=
Subject key identifier:   98:35:99:B6:06:A9:1B:FF:84:D1:82:B0:69:81:91:CC:A7:EE:A8:45
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019D25F1A88E8F5B718D72013C833ECBA8CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          03AB
Signing time:             Wed 25 Mar 2026 17:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:27 +0000
Files and hashes:         1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: K69LPrVp2/Vcpl85fkdhWJISxm/sQaRTAzAsOv+o9KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:a8:8e:8f:5b:71:8d:72:01:3c:83:3e:cb:a8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Mar 25 17:01:27 2026 GMT
            Not After : Mar 26 17:01:27 2026 GMT
        Subject: CN=983599b606a91bff84d182b0698191cca7eea845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:c5:40:4d:95:cc:ae:0b:19:10:04:94:93:
                    03:a3:5c:84:54:45:f3:66:8a:1d:16:8e:c7:1b:11:
                    6c:6d:dc:22:36:5f:38:50:22:5c:81:f5:d5:9c:fd:
                    86:e7:e6:24:9e:51:5a:4a:aa:2b:34:97:c1:db:77:
                    13:91:7c:27:1c:4a:bd:70:78:6b:16:55:25:4b:70:
                    9f:e7:8e:97:7c:89:62:97:60:d4:f6:8b:b7:c6:85:
                    5e:f6:04:91:09:e9:3a:ea:2d:db:e0:aa:73:6d:82:
                    0e:ed:4b:0c:d2:0e:ba:07:47:d5:99:89:fb:24:c8:
                    8c:d4:be:e9:31:91:33:b8:78:c4:b8:85:36:e3:cb:
                    fc:bf:dc:7e:dc:f2:09:d6:ab:b7:1e:64:fd:7d:a9:
                    4b:58:f9:47:2f:c8:14:18:de:e2:cd:bc:0d:83:b8:
                    21:b6:e7:66:63:c9:7c:b2:6b:29:58:3d:c9:a1:40:
                    83:1d:d3:30:f3:dc:45:6f:3f:56:05:af:2e:73:65:
                    d2:0e:58:a3:b6:ec:10:77:26:a3:39:c3:7d:37:c5:
                    61:09:7e:af:ef:26:7a:24:24:3c:96:d2:d5:60:1d:
                    2e:c3:26:58:7b:45:49:99:6e:d7:6b:1c:25:24:ac:
                    d4:f3:49:1a:d7:1f:bb:e8:9b:7e:81:2d:44:ea:16:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:99:B6:06:A9:1B:FF:84:D1:82:B0:69:81:91:CC:A7:EE:A8:45
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:2a:d4:16:59:0e:3b:f7:11:ce:ed:3d:16:f7:f0:5c:7a:
         94:23:ef:46:d2:c9:9e:ee:77:ff:3d:4e:17:ad:4f:46:9c:b4:
         81:14:42:c8:5a:17:82:7b:94:4a:9c:11:6e:00:7c:ae:55:d4:
         1d:c1:1b:cf:4b:a0:d2:c1:69:69:c4:f2:71:2e:f5:3f:e8:63:
         b7:01:14:a0:0a:ce:00:be:d3:74:55:3f:eb:f6:11:88:cf:c9:
         98:12:9e:6b:91:97:4f:70:f3:81:1e:1d:fb:51:c0:43:eb:82:
         5c:2f:95:a5:1b:dd:f7:dd:68:35:d9:55:ed:9d:10:21:92:8e:
         76:a9:a9:65:23:06:2f:c3:ac:36:d0:1e:4f:8c:62:6a:bd:33:
         2f:04:48:77:54:a0:93:76:60:0f:6a:58:29:a6:46:13:fd:a5:
         dc:5a:1e:33:ef:86:1f:24:eb:bf:ba:13:44:24:79:c3:1e:df:
         5c:7f:03:c9:b0:d3:21:6c:bc:5f:c2:e2:1d:77:01:be:9a:53:
         f5:2c:8c:10:fc:06:19:ff:54:9c:22:73:95:4a:22:1e:07:c5:
         85:36:bd:56:7f:93:21:1c:c0:d3:7f:09:fe:a2:4f:49:5b:42:
         86:e4:9f:6e:4c:75:5e:15:61:2b:d8:97:02:e6:52:a1:92:34:
         63:95:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:09 2026 by rpki-client