Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          zu+bfsyoNR4KRFZMn1KTVTcDbl38ibxIiKsKxJbU3yk=
Subject key identifier:   CE:A8:1D:93:3F:10:33:0A:96:77:13:6A:BB:60:69:BE:13:C0:E8:78
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       019D28170F04BC620FEDE5634424CF0E8161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 03:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:32 +0000
Files and hashes:         1: 1xwqrILpCIqTr3NrvJXFQonicxk.roa (hash: I4kCl9DrqBp+BFooy/+ZeCJd5EdWQKuWd+Gl0f/P2zQ=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: r5ZjfGU8PWOpBjP2qmnDcoGnH3NEumyjsmP0utRv/80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:17:0f:04:bc:62:0f:ed:e5:63:44:24:cf:0e:81:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: Mar 26 03:01:32 2026 GMT
            Not After : Mar 27 03:01:32 2026 GMT
        Subject: CN=cea81d933f10330a9677136abb6069be13c0e878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:ad:8a:f7:68:36:96:33:fa:f4:dd:f6:32:
                    d1:bd:2c:cf:4d:08:02:06:28:2a:2e:52:fb:3f:d3:
                    9f:ae:5c:3c:85:53:a4:f4:45:21:eb:aa:20:97:bb:
                    24:49:d8:f0:44:d7:6e:92:55:81:48:89:af:f3:cf:
                    f8:ae:06:43:c4:cf:a5:f3:c9:86:fd:ab:a6:c6:cb:
                    dc:3b:9f:ca:30:5b:fe:51:9c:f1:54:dd:d1:91:f6:
                    49:b1:fe:54:a3:ac:9c:dc:16:b9:60:9a:93:ff:95:
                    47:87:c7:8b:2c:a7:d7:a8:6b:3f:e2:cf:70:ae:ed:
                    9c:10:f7:f3:9c:99:36:43:51:69:56:f9:92:d3:af:
                    f1:b6:ec:ec:bb:69:39:32:75:e9:8b:c9:2e:c0:2a:
                    40:d9:c0:d4:71:7d:22:24:9c:5c:7f:61:dc:a8:76:
                    01:48:e9:c9:0c:4a:58:9d:6c:27:dc:44:ad:4a:e8:
                    41:c2:34:81:89:88:f1:c3:64:6d:56:c8:19:4e:7e:
                    6c:b7:76:90:91:51:2f:c1:75:71:6b:05:04:55:c5:
                    12:e4:d8:1f:b0:5c:4f:1b:b3:e7:0e:a2:da:13:5c:
                    80:16:ca:cd:30:ad:94:75:8f:79:a5:6d:12:65:0b:
                    63:83:74:d8:26:2b:a4:9b:39:97:27:8f:c5:69:04:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A8:1D:93:3F:10:33:0A:96:77:13:6A:BB:60:69:BE:13:C0:E8:78
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:19:99:c0:88:39:ee:d9:4d:e4:26:f2:41:e1:1b:b6:af:0b:
         ce:6e:ab:a0:7d:35:50:fe:83:5a:d6:8c:b2:a8:08:10:4a:d4:
         7d:21:22:fa:3d:92:d9:6f:7b:19:21:bc:63:ac:73:13:0c:8a:
         08:76:60:55:f2:ec:6a:72:37:f1:6a:27:f7:f8:32:96:9f:c5:
         2d:83:55:90:25:0f:f1:dc:00:58:08:17:67:5d:fb:a7:21:b4:
         0f:11:b3:ff:7c:c6:5f:02:c2:62:8d:e7:69:55:6e:63:94:84:
         30:e4:eb:98:12:d5:23:b5:54:51:ac:2d:fd:9c:9e:18:37:27:
         48:a6:c7:0a:6e:d5:54:96:cf:dd:b2:e4:55:b8:c2:9b:14:59:
         c6:ff:f4:22:e6:ba:da:8f:df:ea:c2:41:a4:ac:8e:9d:72:63:
         e5:72:a0:19:1b:3e:a0:7b:97:39:c0:ed:ef:3f:dd:01:5b:c6:
         9b:84:0d:f2:f0:9e:43:ae:65:91:22:74:a1:6e:43:4b:e1:07:
         16:78:eb:53:8f:6a:c0:f4:14:85:c7:3f:9b:07:a1:a2:f2:44:
         03:db:dd:ad:74:7e:30:42:e4:6b:aa:9b:2a:24:3f:12:b1:09:
         43:e7:fa:7c:4c:b0:48:22:ec:32:96:4e:cf:29:47:7a:84:6b:
         2a:9f:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:17 2026 by rpki-client