Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          ZnS1zCJi0lpVnjq3L8P6pO9ww0uN9+ExRB2Zvc5LQL8=
Subject key identifier:   54:F9:1C:20:58:F2:23:AB:5F:C8:2C:48:BA:BD:36:72:D4:FA:F6:8B
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       019D27042F7F90BEBF140777C5162BE26960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          1881
Signing time:             Wed 25 Mar 2026 22:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:18 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: OpYjJ9Q38xj9z8ZJHGlHBZ8hyFPCsQ0YpSmvz7YuCkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:2f:7f:90:be:bf:14:07:77:c5:16:2b:e2:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: Mar 25 22:01:18 2026 GMT
            Not After : Mar 26 22:01:18 2026 GMT
        Subject: CN=54f91c2058f223ab5fc82c48babd3672d4faf68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:ae:eb:ab:4a:ff:3f:dc:40:56:a6:eb:28:
                    2c:3d:90:84:ac:21:97:68:94:bc:f8:b2:4f:55:6e:
                    9c:ac:28:6a:07:0a:bf:08:8f:dd:04:4f:b7:28:47:
                    f4:52:8e:cc:a5:02:8e:55:4f:35:95:50:1a:cf:bb:
                    1d:9f:29:17:6e:c9:ee:e2:05:78:c0:6a:cd:f9:dc:
                    18:ea:2b:fb:bc:ab:d8:23:48:29:95:4d:39:40:c3:
                    ab:91:73:55:57:14:00:f1:0a:e3:dd:09:15:c7:bd:
                    6e:0d:6c:c8:f2:d9:a0:93:52:d7:ce:e1:1f:98:17:
                    92:36:75:a2:b4:f8:4a:ea:4c:de:6b:bf:70:16:14:
                    b3:2b:84:a9:08:21:22:b4:b6:25:e7:67:30:fc:7b:
                    bf:88:aa:6e:8c:d9:ab:38:cb:e3:29:48:ef:d5:97:
                    94:73:b6:98:69:ff:34:5e:ab:9a:9b:0d:c8:e8:eb:
                    3c:aa:2d:01:9f:38:b7:d0:2b:ba:a2:5c:24:08:02:
                    98:30:b9:24:2f:57:05:fe:dc:bc:56:61:23:f0:b3:
                    56:62:44:02:04:0b:68:b7:2b:25:bf:05:80:e2:6b:
                    ce:cf:61:7e:14:b5:13:66:5d:ea:6c:08:e0:cb:69:
                    79:09:cb:f2:43:41:4d:85:60:23:f3:79:b7:ab:fb:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:1C:20:58:F2:23:AB:5F:C8:2C:48:BA:BD:36:72:D4:FA:F6:8B
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:33:6f:c4:f5:f1:b5:e5:a3:bf:3f:12:0c:4b:22:df:96:
         a5:ff:e0:fb:6c:78:5d:ed:b2:d8:a7:69:78:4c:ea:11:7d:a5:
         d2:a0:9b:65:ab:b2:1a:37:9a:2d:ae:9d:69:a0:30:ab:5c:d7:
         44:8e:a0:4b:65:63:6e:06:41:2a:c8:51:a4:6b:47:a8:5f:e5:
         46:9a:90:c8:ff:74:6c:7c:4a:a6:9d:4d:6a:d2:46:73:3a:d7:
         a2:bf:fe:b5:11:62:b6:e6:34:f5:89:01:18:06:e9:84:1d:9b:
         5d:96:c8:0a:c1:8a:92:47:9f:ad:d5:8d:e1:6b:15:26:22:73:
         18:49:3e:eb:d2:bf:3a:ce:e1:3f:9f:0e:29:a3:f8:ab:52:c3:
         33:f7:d9:22:43:a9:c9:12:b7:be:d9:09:7a:32:28:1b:3c:a5:
         07:87:b2:0f:fe:51:97:25:00:e1:ff:85:a7:38:cd:6b:fe:13:
         e1:4d:6b:a6:13:6b:4c:10:15:75:8c:bf:90:cc:8f:f6:8e:63:
         12:77:2e:2f:82:ae:d0:f9:c2:4e:83:ff:00:9c:80:d4:a6:91:
         c9:b7:58:2f:2d:48:cd:b3:57:f3:27:cc:60:91:a5:b1:f8:0d:
         27:88:d1:40:da:45:b0:33:ef:cf:1e:1e:0e:11:a9:3f:f0:e1:
         a5:48:42:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBC9/kL6/FAd3xRYr4mlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWM2YTZhZDNkNTQ3Zjg1MWQzOWI4NjZmYjE0MDlmYTE5
NzJmYmYwHhcNMjYwMzI1MjIwMTE4WhcNMjYwMzI2MjIwMTE4WjAzMTEwLwYDVQQD
Eyg1NGY5MWMyMDU4ZjIyM2FiNWZjODJjNDhiYWJkMzY3MmQ0ZmFmNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonSu66tK/z/cQFam6ygsPZCErCGX
aJS8+LJPVW6crChqBwq/CI/dBE+3KEf0Uo7MpQKOVU81lVAaz7sdnykXbsnu4gV4
wGrN+dwY6iv7vKvYI0gplU05QMOrkXNVVxQA8Qrj3QkVx71uDWzI8tmgk1LXzuEf
mBeSNnWitPhK6kzea79wFhSzK4SpCCEitLYl52cw/Hu/iKpujNmrOMvjKUjv1ZeU
c7aYaf80Xquamw3I6Os8qi0Bnzi30Cu6olwkCAKYMLkkL1cF/ty8VmEj8LNWYkQC
BAtotyslvwWA4mvOz2F+FLUTZl3qbAjgy2l5CcvyQ0FNhWAj83m3q/uUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT5HCBY8iOrX8gsSLq9NnLU+vaLMB8GA1UdIwQY
MBaAFJ7samrT1Uf4UdObhm+xQJ+hly+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTkt
NjFlZmI2Zjg5ZjBhLzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTktNjFlZmI2Zjg5ZjBh
LzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTkzb8T1
8bXlo78/EgxLIt+Wpf/g+2x4Xe2y2KdpeEzqEX2l0qCbZauyGjeaLa6daaAwq1zX
RI6gS2VjbgZBKshRpGtHqF/lRpqQyP90bHxKpp1NatJGczrXor/+tRFituY09YkB
GAbphB2bXZbICsGKkkefrdWN4WsVJiJzGEk+69K/Os7hP58OKaP4q1LDM/fZIkOp
yRK3vtkJejIoGzylB4eyD/5RlyUA4f+FpzjNa/4T4U1rphNrTBAVdYy/kMyP9o5j
EncuL4Ku0PnCToP/AJyA1KaRybdYLy1IzbNX8yfMYJGlsfgNJ4jRQNpFsDPvzx4e
DhGpP/DhpUhCEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:25 2026 by rpki-client