Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
File:                     Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json)
Hash identifier:          V4rSk1Fkepy5t2MdnIWR2BAzDjfNFt4XwkarnLgCqhk=
Subject key identifier:   DF:3D:37:B3:C4:04:5E:5F:A1:2B:9D:F5:50:B3:F8:62:FE:F5:FB:01
Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
Certificate issuer:       /CN=363e145387eda5b08aa300d63b4fc35e598364fd
Certificate serial:       019D33085B376C5970B5C3CA558C643BEE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
Manifest number:          0DC4
Signing time:             Sat 28 Mar 2026 06:01:18 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:18 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:18 +0000
Files and hashes:         1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: HJVBLw8cl/S0ZYoMMX/ROeqgDeMTN4JeLn4pcxVrZn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:5b:37:6c:59:70:b5:c3:ca:55:8c:64:3b:ee:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd
        Validity
            Not Before: Mar 28 06:01:18 2026 GMT
            Not After : Mar 29 06:01:18 2026 GMT
        Subject: CN=df3d37b3c4045e5fa12b9df550b3f862fef5fb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:c7:30:8e:e3:73:2f:6d:a4:5b:38:15:c0:
                    33:f9:2b:ab:23:90:8b:2d:0f:de:51:9a:8c:64:fb:
                    7c:2b:be:b8:b4:9f:1d:67:73:cf:14:4b:3a:86:2d:
                    85:5c:3e:fd:0d:7b:a5:fd:25:76:8a:a7:cb:76:e0:
                    dc:dd:7f:4f:0b:0e:1b:43:bb:89:15:2e:8b:6d:21:
                    ab:bb:bc:bb:9b:b5:b9:c1:dd:dc:1c:a5:f5:93:b7:
                    bb:0a:02:ad:c2:25:89:a7:0f:7c:81:6f:ed:d8:56:
                    6c:8d:94:6e:ee:32:8b:7c:10:a0:f0:cc:66:cd:c4:
                    c5:8b:e9:14:cf:1e:b0:24:ad:45:fc:2d:62:74:c6:
                    4a:62:13:b9:b8:9b:67:a8:4c:0b:c5:e9:77:3b:fa:
                    51:f1:f2:be:6b:12:1f:ac:3f:03:cd:6e:46:c9:83:
                    12:e8:e1:42:6d:5b:33:7b:ca:71:ec:6b:9b:aa:4e:
                    bf:96:c3:13:df:66:88:ea:d4:bb:c2:d8:0e:af:f3:
                    4d:a3:ee:0d:85:04:16:2c:52:27:01:ea:a2:33:56:
                    21:61:19:e1:44:41:05:bb:da:32:27:7d:ec:98:54:
                    14:e7:c3:68:09:fe:be:7a:16:6a:9d:b3:d9:8f:4f:
                    03:43:f7:d2:fb:76:67:ac:4d:a2:26:84:dc:4f:1d:
                    13:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3D:37:B3:C4:04:5E:5F:A1:2B:9D:F5:50:B3:F8:62:FE:F5:FB:01
            X509v3 Authority Key Identifier:
                keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:3f:5a:eb:1e:f0:80:33:e2:d7:a5:5f:02:93:95:47:da:
         58:e5:55:cb:69:e5:65:84:90:a2:de:ba:1c:02:8f:23:95:6b:
         f6:05:28:72:72:c9:78:54:38:25:35:b2:6e:93:07:2a:4e:e8:
         04:98:0f:2d:cf:8f:a1:16:df:99:22:1f:5b:60:05:10:79:48:
         35:51:d8:bb:42:11:a0:67:c2:0c:ac:d7:b1:65:da:3f:12:d1:
         ad:68:d3:d7:64:a9:e2:cf:c6:75:38:ae:62:f3:a0:d2:d4:e5:
         f8:a9:25:0c:e4:0e:12:43:7b:78:8e:25:da:51:87:f1:1d:53:
         8a:4d:e5:f4:23:9b:b3:14:1c:c5:55:83:00:e0:c8:ec:70:88:
         a2:e1:0b:9c:43:3a:a9:8c:ba:30:41:e4:2b:6b:3a:87:e3:12:
         fa:00:ec:98:2b:19:72:5c:a8:75:e4:c3:04:5e:07:9a:8e:05:
         d7:2f:97:26:75:13:9f:02:90:e8:8e:21:b6:6b:4d:f7:06:5a:
         97:af:75:26:82:71:54:0b:d5:1c:79:74:13:8c:79:20:04:10:
         f8:01:9b:68:8e:c2:24:34:fd:b9:89:97:c1:73:54:9c:83:65:
         39:51:58:2a:e9:03:33:45:0b:13:23:b9:7c:73:4b:83:d4:8a:
         a0:f4:ef:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCFs3bFlwtcPKVYxkO+6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2UxNDUzODdlZGE1YjA4YWEzMDBkNjNiNGZjMzVlNTk4
MzY0ZmQwHhcNMjYwMzI4MDYwMTE4WhcNMjYwMzI5MDYwMTE4WjAzMTEwLwYDVQQD
EyhkZjNkMzdiM2M0MDQ1ZTVmYTEyYjlkZjU1MGIzZjg2MmZlZjVmYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUnHMI7jcy9tpFs4FcAz+SurI5CL
LQ/eUZqMZPt8K764tJ8dZ3PPFEs6hi2FXD79DXul/SV2iqfLduDc3X9PCw4bQ7uJ
FS6LbSGru7y7m7W5wd3cHKX1k7e7CgKtwiWJpw98gW/t2FZsjZRu7jKLfBCg8Mxm
zcTFi+kUzx6wJK1F/C1idMZKYhO5uJtnqEwLxel3O/pR8fK+axIfrD8DzW5GyYMS
6OFCbVsze8px7Gubqk6/lsMT32aI6tS7wtgOr/NNo+4NhQQWLFInAeqiM1YhYRnh
REEFu9oyJ33smFQU58NoCf6+ehZqnbPZj08DQ/fS+3ZnrE2iJoTcTx0TpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN89N7PEBF5foSud9VCz+GL+9fsBMB8GA1UdIwQY
MBaAFDY+FFOH7aWwiqMA1jtPw15Zg2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgt
ZWMzZDAwZTMzYmNhLzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgtZWMzZDAwZTMzYmNh
LzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxs/Wuse
8IAz4telXwKTlUfaWOVVy2nlZYSQot66HAKPI5Vr9gUocnLJeFQ4JTWybpMHKk7o
BJgPLc+PoRbfmSIfW2AFEHlINVHYu0IRoGfCDKzXsWXaPxLRrWjT12Sp4s/GdTiu
YvOg0tTl+KklDOQOEkN7eI4l2lGH8R1Tik3l9CObsxQcxVWDAODI7HCIouELnEM6
qYy6MEHkK2s6h+MS+gDsmCsZclyodeTDBF4Hmo4F1y+XJnUTnwKQ6I4htmtN9wZa
l691JoJxVAvVHHl0E4x5IAQQ+AGbaI7CJDT9uYmXwXNUnINlOVFYKukDM0ULEyO5
fHNLg9SKoPTv+g==
-----END CERTIFICATE-----