Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          phWoxprDtJu8eRbBk3YpNt6QvcUwZhDWj5E0eI7AASY=
Subject key identifier:   FC:C8:F8:90:7D:C0:12:0A:2C:E9:DE:F6:E3:7D:B4:4A:CD:31:BF:89
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       019D28BB699E4DFD1EBF7A436EBB89742CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 06:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:03 +0000
Files and hashes:         1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: 8iz9n63OZNvvANXSIS4LfmbehXN8BENgf5pCGvhKioc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:69:9e:4d:fd:1e:bf:7a:43:6e:bb:89:74:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Mar 26 06:01:03 2026 GMT
            Not After : Mar 27 06:01:03 2026 GMT
        Subject: CN=fcc8f8907dc0120a2ce9def6e37db44acd31bf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:21:f1:2d:a3:91:8f:56:22:d2:ec:b7:95:
                    ab:bb:4c:92:88:0d:f1:8f:af:6b:d9:81:81:5b:cf:
                    09:77:ca:5b:21:5b:24:7b:7a:6a:14:50:20:75:aa:
                    dc:78:07:8b:c5:dc:8d:e4:a2:73:3a:d8:68:85:31:
                    6c:a8:b7:e3:3f:44:fb:85:23:ba:eb:31:63:02:a2:
                    16:1d:92:f3:61:ce:43:f5:f8:79:d1:80:5a:01:95:
                    bc:4d:dd:d6:72:3b:7f:75:66:ab:af:cb:92:1c:60:
                    17:fa:43:fa:fc:fb:c7:d6:23:fe:50:c8:97:fb:32:
                    5f:c9:9b:7a:78:c2:6d:03:48:57:bb:5e:d7:c2:54:
                    0d:03:27:50:ae:ae:00:6e:d8:9e:24:76:72:75:d5:
                    43:3d:26:e4:5a:cd:a2:18:98:fa:af:6e:85:d3:c2:
                    03:6d:a9:7c:86:96:99:22:3f:9b:a2:db:b8:7f:4d:
                    1a:b6:9f:64:1d:1b:51:e2:54:30:6a:6e:6f:12:f8:
                    47:1d:a0:8c:51:7c:7e:82:e6:71:3d:f7:aa:f8:2a:
                    49:c8:39:5f:ba:48:c5:e4:30:55:f8:34:e5:2c:e0:
                    88:61:fe:ba:4b:13:11:69:0a:f8:95:8f:1f:7d:72:
                    d8:47:b1:ed:e9:b6:4b:8f:d5:9b:03:ee:71:7f:61:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:F8:90:7D:C0:12:0A:2C:E9:DE:F6:E3:7D:B4:4A:CD:31:BF:89
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:c4:7b:6c:ff:89:05:c0:4d:ba:dd:45:76:0a:95:85:95:
         fe:2d:d3:b2:7f:2f:93:48:04:c6:24:3a:f5:46:20:ec:57:57:
         49:89:15:c6:fa:32:29:c0:0b:f8:87:43:50:d5:4c:a4:00:89:
         07:bf:ea:0e:c4:72:92:79:d7:04:8a:85:0f:b2:ca:9f:60:59:
         b2:57:bf:70:99:b6:5b:f6:36:38:f8:08:87:55:2c:09:d4:e0:
         63:1a:a5:06:0b:bb:4c:67:12:a5:a8:6c:14:94:c3:90:27:18:
         ad:e2:27:ad:f1:02:21:ec:d1:fc:48:25:51:f5:66:b7:99:6e:
         34:a8:ca:c3:b8:2a:cd:7b:0d:04:98:e8:ef:ac:75:d3:75:3b:
         84:24:8d:72:bb:1e:cc:49:a1:ff:3c:6d:c6:3a:56:30:30:b9:
         89:82:76:04:1b:b4:f0:a0:ce:57:b2:88:ac:a2:fa:3b:c8:a5:
         05:ce:02:2d:5d:a4:94:fc:88:6e:2b:b6:4d:a7:c2:37:0c:42:
         36:57:61:60:2f:3f:c6:e1:44:3f:86:15:dd:ff:90:ce:6b:eb:
         13:27:27:59:68:b4:4f:3f:f0:e2:c7:3a:b1:79:b7:54:f0:4f:
         7a:8d:47:a7:5f:35:f3:af:8d:81:24:e7:81:46:3d:36:5e:dc:
         a9:95:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:43 2026 by rpki-client