Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File:                     nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier:          tlM8CGN4GwP+HhnObD/YXCBT1nwXT+2aklzkE/DsyUo=
Subject key identifier:   6E:D3:7C:59:B5:EA:98:AE:26:EA:AF:D5:FC:5A:CE:21:AB:75:E6:4F
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer:       /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial:       019D29CEDEB003F7ADC18932CF1CA740A485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number:          115C
Signing time:             Thu 26 Mar 2026 11:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:56 +0000
Files and hashes:         1: 6qyreawZF4fVMyWkw4FMT5_E4Cs.roa (hash: KqH2FCJeUYV2BaDFAOaLAJqNcjNFt24zga0dBBMyQAY=)
                          2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: jLFKzE/6dxrrWu+8fzWOeck7QJGeTEkXBGk40zeYywo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:de:b0:03:f7:ad:c1:89:32:cf:1c:a7:40:a4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
        Validity
            Not Before: Mar 26 11:01:56 2026 GMT
            Not After : Mar 27 11:01:56 2026 GMT
        Subject: CN=6ed37c59b5ea98ae26eaafd5fc5ace21ab75e64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:5f:65:de:19:a4:b2:b9:e7:97:6d:3d:5c:
                    cf:87:22:3e:8c:ca:c6:6a:f7:d8:17:d3:6e:9d:9d:
                    1f:e8:17:f7:d9:08:de:63:86:c9:f9:9b:07:18:59:
                    f2:41:df:5e:79:f8:65:f8:eb:3c:5d:b9:5f:f2:94:
                    0c:e4:da:83:c0:ec:26:84:6e:1c:a3:41:a5:d1:98:
                    ad:24:b0:f4:25:73:62:85:a5:db:7f:9a:5f:97:db:
                    c7:fe:69:a0:87:79:52:a2:50:59:ab:a9:12:2e:32:
                    87:f3:41:39:1a:19:5c:5d:86:d8:b6:af:97:8d:11:
                    ad:26:a5:74:80:7c:fb:4f:61:ec:59:7f:b8:a2:4b:
                    8a:14:b2:df:e6:85:7c:d2:ab:11:ed:03:f8:a3:23:
                    cd:1d:23:2a:8e:e1:1d:d9:a0:4a:25:50:7a:75:d2:
                    0e:25:cd:fd:b6:0e:a0:82:6f:f8:ed:21:9a:f2:9b:
                    7b:45:99:be:8f:2d:99:08:a6:9b:1e:91:69:eb:22:
                    92:d1:13:a5:cf:42:d2:cf:e5:47:ac:1b:94:f8:a0:
                    a7:54:cf:69:ac:41:39:ee:78:fb:9f:4c:49:eb:18:
                    74:2b:64:46:be:1f:fc:44:98:f2:70:73:66:7e:24:
                    a9:da:8d:5b:f6:da:4f:c6:eb:38:d2:fd:26:3a:14:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:7C:59:B5:EA:98:AE:26:EA:AF:D5:FC:5A:CE:21:AB:75:E6:4F
            X509v3 Authority Key Identifier:
                keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:51:7a:d3:a5:6c:0d:e8:2e:ab:95:55:0c:6a:ef:a5:c5:
         a3:8e:86:af:58:3c:00:29:d1:5c:59:04:57:5c:ba:e1:ce:af:
         60:9b:63:b2:62:39:0c:ff:9c:d7:42:34:d9:db:a9:84:3b:7f:
         93:cf:0c:e6:99:5d:e4:b3:5a:58:b1:9f:33:be:e6:1b:cf:50:
         e7:25:43:33:c0:4a:73:25:75:9e:c2:a6:30:b6:71:d8:18:95:
         5b:d9:53:f3:08:f0:ce:8d:93:d7:7b:87:e3:44:e5:6f:d2:6a:
         b1:e3:8a:b9:6e:fd:00:23:71:b5:a6:d1:24:21:1b:4f:ed:45:
         9c:10:f4:ae:2b:e3:e0:b6:8e:2d:fc:82:35:30:ad:b5:7e:9b:
         01:b0:03:03:f5:dd:e2:42:ea:6d:ca:fc:d5:3a:3d:77:05:c7:
         f1:a0:8b:49:10:38:e0:08:2f:ac:0c:07:35:51:5a:34:0d:74:
         bc:c8:96:59:98:27:6b:da:0b:8f:9f:a8:55:9e:29:79:7b:c5:
         59:c5:a1:2b:59:c9:f0:a3:c6:cc:51:2a:7b:6a:cd:a9:02:a3:
         10:eb:08:f4:f2:18:f8:4f:db:b9:a1:f7:66:ef:1d:6e:6d:db:
         7b:2d:a2:26:6a:f1:96:7e:14:11:64:1c:a6:0f:96:27:aa:99:
         1a:42:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:46 2026 by rpki-client