Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          w+uvKAJ/NCcx4WEJxytpIKEX/p2GyV+TG553VwYZ6d8=
Subject key identifier:   60:30:95:82:E8:D6:29:54:AE:99:A1:1F:A2:9B:46:70:29:23:A0:50
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       019D2771B7DC87CD04234BA771A7CC35DB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          08C0
Signing time:             Thu 26 Mar 2026 00:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 00:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 00:00:57 +0000
Files and hashes:         1: HpNoPyQg0FUOf8oxwArXB82edsU.roa (hash: 90HgYD+gZxel+odW0C1ibu7Dxis/Nvml6GTHNV4NnPc=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: 1PVNNM5Cy7VcuSAsgYmNMfYII8vwZSul4RJp3GMLzr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:b7:dc:87:cd:04:23:4b:a7:71:a7:cc:35:db:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Mar 26 00:00:57 2026 GMT
            Not After : Mar 27 00:00:57 2026 GMT
        Subject: CN=60309582e8d62954ae99a11fa29b46702923a050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:d0:a7:78:23:12:3b:6f:09:5b:af:c6:1f:
                    ed:bf:09:55:2a:04:db:e7:04:1f:bb:8b:87:86:ae:
                    d6:08:dc:20:9d:73:d5:18:e3:10:79:26:0f:82:a7:
                    59:39:3b:ea:7e:31:d5:29:a3:9c:7e:a9:f8:35:6b:
                    2b:04:c0:75:b5:2d:db:1e:59:f5:15:fb:cb:c6:58:
                    86:ec:4d:49:47:44:d1:3c:ef:bb:3f:71:16:fd:74:
                    68:9d:d9:26:91:ed:bf:53:62:b3:64:c0:81:f8:51:
                    f9:99:c3:cd:1b:89:0b:f1:61:b0:3c:76:ef:50:6e:
                    10:bb:0d:3f:df:26:7f:be:59:ec:01:17:a4:87:0c:
                    6f:64:0a:bc:80:67:e6:d8:3d:27:9d:50:8b:e7:63:
                    41:72:41:09:71:95:47:26:f0:01:df:3a:cc:d5:54:
                    fc:2d:fa:c3:95:19:9a:ca:48:ee:70:ec:56:b2:42:
                    4e:b4:fe:18:0e:6b:fc:f7:6f:2d:4d:13:52:57:55:
                    7f:e5:48:3a:eb:24:27:b9:49:7a:d5:ed:09:3f:4e:
                    8e:c0:13:8a:33:00:22:9c:6d:43:dd:17:5f:42:96:
                    01:b6:2f:97:3f:7a:3b:34:08:4a:16:30:94:8a:41:
                    46:b1:81:64:a4:e9:cf:1b:33:5c:b7:77:b5:62:6d:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:95:82:E8:D6:29:54:AE:99:A1:1F:A2:9B:46:70:29:23:A0:50
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:55:55:92:2c:ed:38:60:a8:ca:14:7c:e0:43:7b:89:99:e6:
         60:e6:fa:d9:4e:e8:2c:03:d2:0d:80:aa:85:b7:8a:82:9d:1b:
         14:0e:54:17:94:84:ad:4b:0b:01:8b:a4:41:3d:c0:10:49:0e:
         48:a9:85:99:51:fd:ac:af:3d:af:dc:f3:dd:9e:20:63:35:36:
         af:1e:0f:c6:fb:47:d9:c2:83:48:19:1a:9f:62:0b:fc:fb:77:
         30:a7:e1:00:c2:c2:22:8c:3d:70:25:3b:24:6f:ee:06:6c:ff:
         53:81:48:9d:e7:d3:6e:46:1b:dc:11:39:8d:d5:5e:cb:00:29:
         8c:e5:10:fe:5f:1a:07:09:e0:73:49:d0:f0:1d:85:89:9b:04:
         51:70:d6:20:e5:22:bd:c0:45:13:e3:d8:e8:e1:2e:01:27:53:
         8d:e6:11:f1:f4:b7:6d:15:cb:0d:87:43:97:22:74:69:79:71:
         cd:59:54:33:e2:fb:44:0c:06:8f:2b:54:22:ec:0c:b1:43:72:
         2d:2e:c9:55:3a:fb:49:a9:4e:e5:80:06:3c:01:61:e8:ff:dd:
         4d:da:a4:d4:eb:d3:dd:a1:48:6e:96:6d:ff:be:cc:6e:92:91:
         3a:c1:8e:87:b7:05:bb:3c:93:70:3a:36:5b:d3:fe:1c:5e:f5:
         6b:52:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:11 2026 by rpki-client