Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File:                     N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier:          J8jjqKlNLloKQVFpCZ2LTvPba9lwxaQoXWxNBs3ZfWU=
Subject key identifier:   E3:98:26:39:54:EF:B3:29:97:8C:22:A3:1F:7B:30:C9:67:66:2D:E2
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer:       /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial:       019D27DFF21CFF0662C0BF866D6E63FA69E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number:          0D1F
Signing time:             Thu 26 Mar 2026 02:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:20 +0000
Files and hashes:         1: 4TPc3m07IptozaAS-Sg6u70wBY8.roa (hash: Ub9VBi2JJ0n1uK8GpU4txhHGzf/S6oXYoNYi6ksYIpM=)
                          2: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: 5ZRCmfjs9CjzUZ1jvpVA3/dyK/CMsO76uCM3wFVoUVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:f2:1c:ff:06:62:c0:bf:86:6d:6e:63:fa:69:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
        Validity
            Not Before: Mar 26 02:01:20 2026 GMT
            Not After : Mar 27 02:01:20 2026 GMT
        Subject: CN=e398263954efb329978c22a31f7b30c967662de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:32:09:8d:fb:bc:c7:1e:f2:6e:a2:29:91:
                    e1:fa:e9:2c:ea:3c:9f:a1:56:e9:42:8d:29:3c:dc:
                    3a:36:5d:f3:ca:dd:44:b6:9b:5d:54:54:2f:f7:1b:
                    af:31:35:a4:66:32:41:90:e7:ad:26:17:33:ff:65:
                    33:be:6f:3c:31:d3:61:9e:5e:bd:67:10:ee:24:7d:
                    7e:b4:21:b2:f4:e6:ae:cd:e8:35:2f:72:d3:b9:81:
                    13:39:e2:c1:e7:67:7a:e8:2a:12:37:61:89:ba:22:
                    2c:10:f8:c1:58:1b:90:82:c5:90:9a:5b:1c:c2:da:
                    5c:29:77:3e:49:30:9b:ef:b3:eb:1d:0f:15:0c:c0:
                    9b:07:a8:89:ce:02:e2:94:ed:3b:a6:3b:1f:db:94:
                    8b:37:d3:a9:99:aa:76:3e:98:19:e7:df:23:31:2b:
                    95:56:ba:32:ff:c3:16:b4:c6:5e:6a:33:a9:48:2b:
                    ee:46:16:32:63:67:01:ab:57:e5:80:21:d9:c9:07:
                    48:57:0d:aa:98:bd:30:fd:69:9b:01:0d:b3:94:15:
                    09:dd:bc:57:a4:9e:8a:4e:1f:06:69:ef:82:9d:0f:
                    18:40:7b:1d:c1:3b:c7:02:35:cc:6a:35:88:7f:ba:
                    04:d8:dd:0c:16:1e:33:16:59:4a:65:c7:42:eb:99:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:26:39:54:EF:B3:29:97:8C:22:A3:1F:7B:30:C9:67:66:2D:E2
            X509v3 Authority Key Identifier:
                keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:cf:e1:a7:92:11:92:1e:7f:80:5e:f9:7e:61:cf:08:25:
         d6:8a:86:49:1d:0d:cd:a6:56:02:6f:60:66:3c:e7:3b:a5:00:
         d4:e1:c0:51:5c:70:10:14:9f:20:34:db:10:09:df:3f:76:61:
         f2:8c:0b:22:5c:08:ac:a1:94:49:e8:da:ff:4b:dc:7a:e8:74:
         c0:d0:2d:24:0a:aa:10:36:72:dd:fc:b2:1f:5d:1b:d9:cd:24:
         6d:69:aa:e9:9e:ad:f6:f6:8d:3f:02:9a:62:c4:a1:72:87:b6:
         80:23:29:f0:7b:90:c5:48:6d:d2:da:a9:1c:b9:be:23:e8:dd:
         d4:cd:86:e1:ab:ba:b6:aa:29:0c:7e:bf:d6:92:5c:18:7b:9c:
         57:cc:1c:2d:ac:dd:14:98:3b:42:00:53:a1:2f:80:b7:6b:24:
         be:e5:cd:bd:c5:3a:d2:78:43:41:25:1d:ec:88:85:26:83:e9:
         04:5c:db:04:98:69:d5:f2:8c:ac:47:74:b3:13:fc:81:f7:51:
         20:8c:16:5f:a2:f0:da:99:56:9b:5d:d8:7a:b7:27:56:e5:d4:
         46:92:a2:98:67:55:95:ea:26:1d:6a:d8:4b:8e:af:05:87:39:
         63:86:44:4f:08:24:3d:c7:89:f6:10:32:be:7f:fd:99:bd:ed:
         68:8d:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:54 2026 by rpki-client