Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          AoZvENts0/OVO0Udxm7OcWbLIcmoSxY8UeGsDzVFGSw=
Subject key identifier:   A2:06:CB:01:D6:35:2E:AF:3F:2F:07:DC:49:AC:86:05:C7:65:BC:0B
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       019D2C29E294287C991BBBBCD2A6F75E841B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0E36
Signing time:             Thu 26 Mar 2026 22:00:35 +0000
Manifest this update:     Thu 26 Mar 2026 22:00:35 +0000
Manifest next update:     Fri 27 Mar 2026 22:00:35 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: d1Xxd4JzsiotsbEcpgp7Tr/NAZMWI9Ik3mWbHI9SCQg=)
                          2: U1i2p1mwMwcMPAenuBEHdijiIZE.roa (hash: AHlcD8BHVzzh2oESK4HUkXMAua5AnRRE5iMN+WNNbdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:29:e2:94:28:7c:99:1b:bb:bc:d2:a6:f7:5e:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: Mar 26 22:00:35 2026 GMT
            Not After : Mar 27 22:00:35 2026 GMT
        Subject: CN=a206cb01d6352eaf3f2f07dc49ac8605c765bc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:ae:16:86:d3:23:cd:07:e5:a9:11:15:cc:
                    a0:16:11:f8:45:cc:1f:89:b6:02:d7:88:dd:18:82:
                    72:92:ca:a9:81:a2:c5:95:4b:61:a4:ab:67:62:b1:
                    ab:8f:e2:3a:bb:fc:72:c3:96:61:06:80:20:77:6b:
                    10:1d:40:89:b0:0c:ee:0d:15:3f:38:f4:c6:3b:b0:
                    e9:3b:08:3f:49:67:06:fb:0d:4c:6a:9b:96:f9:d5:
                    6d:72:b9:74:d9:c1:45:61:fe:16:a0:8b:d8:85:9d:
                    71:63:3c:ce:14:28:e4:7d:4b:7e:45:09:3c:79:ac:
                    b5:cc:99:fe:9d:dd:72:f8:43:4c:6a:6d:55:51:d1:
                    5e:59:81:b4:aa:a8:60:80:f4:2f:19:27:96:f3:2c:
                    2e:0e:28:c5:e5:f7:cb:24:c3:e4:37:6e:c4:35:2a:
                    4e:07:dc:ea:5b:40:60:05:e9:66:62:38:b4:14:6d:
                    53:01:c8:c6:4c:38:be:96:67:73:f2:e2:17:b4:58:
                    54:52:c8:de:96:25:3d:b9:f1:8c:24:1d:84:d7:af:
                    2a:ac:26:23:c9:4c:99:e9:c4:b3:1c:3a:03:da:74:
                    20:16:13:f4:3a:a4:a9:e6:5b:30:57:df:47:11:11:
                    23:29:76:3d:f9:c4:1b:19:0b:c4:39:9d:49:7e:fc:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:CB:01:D6:35:2E:AF:3F:2F:07:DC:49:AC:86:05:C7:65:BC:0B
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:61:14:2c:55:5c:c4:31:5f:aa:8e:b2:4f:04:f5:10:a4:
         52:40:ec:9b:97:cf:d8:fe:19:8f:04:d0:a7:39:5c:c9:66:c7:
         71:fb:4f:6c:44:98:cf:9b:66:d2:f6:e0:5a:dd:72:83:56:21:
         04:69:74:f9:f9:c6:a5:6a:1f:cf:96:ed:cb:19:83:58:ec:90:
         6f:c0:f0:65:30:ea:5f:1a:cd:a3:94:33:39:63:cd:f5:4f:29:
         b3:a5:be:3c:5b:eb:15:d2:b8:70:ed:b0:2e:90:ef:81:1d:86:
         43:f0:c6:53:e8:a4:20:4c:94:02:3c:d4:4b:7b:d2:18:cd:9c:
         e6:39:b2:eb:27:a4:b4:5d:ed:93:1f:ed:2e:5f:8e:00:2d:e9:
         6c:ee:0e:c2:68:48:57:fc:b1:c0:ba:24:5c:59:23:c4:a6:6c:
         fe:9d:fe:f8:9a:1b:e1:64:cf:7f:a5:56:b4:36:a2:08:22:ba:
         e0:dd:01:65:fc:83:34:28:de:23:85:f0:f9:19:4c:99:5d:21:
         79:9e:f6:ab:9d:29:28:3d:89:db:a5:85:da:89:66:17:d3:21:
         0d:e1:33:26:8a:20:7e:92:98:87:12:4c:b5:5c:f2:fd:60:9d:
         54:e6:a2:a9:aa:7c:38:c1:ad:79:ba:2f:49:b1:b0:0d:78:c1:
         f5:39:81:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sKeKUKHyZG7u80qb3XoQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll
NWJmZDEwHhcNMjYwMzI2MjIwMDM1WhcNMjYwMzI3MjIwMDM1WjAzMTEwLwYDVQQD
EyhhMjA2Y2IwMWQ2MzUyZWFmM2YyZjA3ZGM0OWFjODYwNWM3NjViYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62yuFobTI80H5akRFcygFhH4Rcwf
ibYC14jdGIJyksqpgaLFlUthpKtnYrGrj+I6u/xyw5ZhBoAgd2sQHUCJsAzuDRU/
OPTGO7DpOwg/SWcG+w1MapuW+dVtcrl02cFFYf4WoIvYhZ1xYzzOFCjkfUt+RQk8
eay1zJn+nd1y+ENMam1VUdFeWYG0qqhggPQvGSeW8ywuDijF5ffLJMPkN27ENSpO
B9zqW0BgBelmYji0FG1TAcjGTDi+lmdz8uIXtFhUUsjeliU9ufGMJB2E168qrCYj
yUyZ6cSzHDoD2nQgFhP0OqSp5lswV99HEREjKXY9+cQbGQvEOZ1JfvxzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIGywHWNS6vPy8H3EmshgXHZbwLMB8GA1UdIwQY
MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt
ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4
LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR9hFCxV
XMQxX6qOsk8E9RCkUkDsm5fP2P4ZjwTQpzlcyWbHcftPbESYz5tm0vbgWt1yg1Yh
BGl0+fnGpWofz5btyxmDWOyQb8DwZTDqXxrNo5QzOWPN9U8ps6W+PFvrFdK4cO2w
LpDvgR2GQ/DGU+ikIEyUAjzUS3vSGM2c5jmy6yektF3tkx/tLl+OAC3pbO4OwmhI
V/yxwLokXFkjxKZs/p3++Job4WTPf6VWtDaiCCK64N0BZfyDNCjeI4Xw+RlMmV0h
eZ72q50pKD2J26WF2olmF9MhDeEzJoogfpKYhxJMtVzy/WCdVOaiqap8OMGtebov
SbGwDXjB9TmBzQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:49 2026 by rpki-client