Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File:                     nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier:          HhXodOAJgWXbDMcLYCkV9NCI77McgXMdfq62r4n8OFs=
Subject key identifier:   35:DD:78:E5:D3:7C:C2:0B:BF:57:BA:E9:EF:4E:4C:CB:E0:39:68:C6
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer:       /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial:       019D29295ACE0F5E4891B1E996700E3AD6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number:          0845
Signing time:             Thu 26 Mar 2026 08:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:09 +0000
Files and hashes:         1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
                          2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: VnRdLkNCMuH5NvzW3x6tTGNmu+/Jz6vb7Cpcf0BC13g=)
                          3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:5a:ce:0f:5e:48:91:b1:e9:96:70:0e:3a:d6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
        Validity
            Not Before: Mar 26 08:01:09 2026 GMT
            Not After : Mar 27 08:01:09 2026 GMT
        Subject: CN=35dd78e5d37cc20bbf57bae9ef4e4ccbe03968c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:59:aa:83:b0:39:2f:6f:ba:8e:2c:36:61:
                    64:de:19:5e:71:65:bd:49:43:d2:53:86:bd:26:1e:
                    93:db:ed:2b:54:28:45:6b:48:d8:be:e7:f2:ab:b0:
                    72:7b:39:3b:1e:db:a7:e7:33:f6:3a:29:05:95:b9:
                    b3:79:4b:22:8e:34:77:36:49:36:2c:19:22:64:4a:
                    77:06:13:e3:c4:57:a7:f5:41:fd:c8:0f:d4:32:28:
                    cd:6b:5a:70:27:9b:81:8e:4c:b0:6d:0f:c4:3c:b3:
                    11:99:ff:dc:cc:71:48:6d:37:39:ae:cb:d4:7d:19:
                    61:2e:71:e2:72:d4:ff:3e:f5:9f:dc:48:c6:b8:96:
                    99:b0:8c:0e:22:ad:2e:43:6f:1a:fa:f1:03:aa:28:
                    49:55:c2:9b:d7:e3:3b:02:6e:5a:b6:d3:04:ef:49:
                    d9:df:d3:00:5f:86:8f:4e:6a:db:64:97:ec:1b:4f:
                    78:a6:2b:20:7b:68:eb:ab:50:3d:e3:d6:36:33:3b:
                    d3:d2:7b:ba:e4:bb:6c:a9:55:53:5f:ce:b5:84:1e:
                    a2:7e:dc:71:4c:fb:51:f9:bc:f8:cf:a0:92:23:08:
                    30:26:a5:9e:cb:70:7a:94:14:a5:a7:b3:aa:c1:b8:
                    4a:42:cc:03:9e:b0:98:78:49:3b:d4:39:a6:05:80:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:78:E5:D3:7C:C2:0B:BF:57:BA:E9:EF:4E:4C:CB:E0:39:68:C6
            X509v3 Authority Key Identifier:
                keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:8a:fe:0b:2b:81:5a:e2:56:0c:88:cf:d4:af:8b:18:63:
         8a:66:88:d5:83:3a:f8:e8:b3:f5:a9:52:b0:83:33:50:8e:8c:
         7b:97:94:ee:46:c2:b7:12:4b:d4:24:20:2a:f7:11:45:29:ba:
         96:08:e0:63:62:9e:98:2e:5c:dc:ca:88:e6:a3:3e:c3:4d:43:
         13:88:e5:6c:fd:a6:4e:c1:72:14:b4:0c:4e:f3:3f:32:65:3d:
         fb:96:8d:6c:b2:a6:7a:ca:e5:76:cd:59:31:30:2e:80:80:ec:
         24:c1:ec:21:bb:a2:09:ef:6a:f1:5a:61:9f:53:cd:59:37:09:
         af:66:ac:cb:ca:09:5e:cb:bd:12:e8:96:05:a5:ab:65:8b:33:
         01:5b:ff:41:1b:9b:98:27:75:f0:9b:c9:b7:92:73:b9:0b:ca:
         59:58:6e:03:7e:96:db:73:f7:fe:36:c6:cb:b9:55:0b:b5:90:
         4c:0d:06:b1:fa:e1:2f:50:47:4a:0b:e5:0d:a7:55:05:3f:be:
         dc:af:1d:74:b8:68:7c:c8:13:4b:90:bb:f9:86:7a:a1:e9:fc:
         5d:70:e7:26:5d:80:f3:b1:2c:0b:87:19:db:59:37:f5:d7:63:
         35:35:85:c4:80:75:e0:fe:66:2d:31:29:e6:7d:8d:ab:c6:c9:
         08:fb:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:37 2026 by rpki-client