Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          +q/yNBp7VT8WBcxkVFaVymtWaLsGM8+k+OKTzu01a4o=
Subject key identifier:   15:DE:13:B0:73:72:68:F8:5C:3E:AC:AC:7D:EE:E6:A4:25:FD:99:AE
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       019D28BBC3AB78ACFFFC7797534B7D66393A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0F3E
Signing time:             Thu 26 Mar 2026 06:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:27 +0000
Files and hashes:         1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
                          2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: CdqpM2nsesgELXY8iG5aKYex8bNlf/VfQZPOkfkgvVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c3:ab:78:ac:ff:fc:77:97:53:4b:7d:66:39:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Mar 26 06:01:27 2026 GMT
            Not After : Mar 27 06:01:27 2026 GMT
        Subject: CN=15de13b0737268f85c3eacac7deee6a425fd99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:aa:6c:c6:e0:b1:49:9b:38:92:90:1f:ef:
                    65:e5:38:7a:ce:99:a8:1a:e5:c4:51:98:fa:a7:0a:
                    a8:44:8f:de:c9:22:2e:03:53:8e:c1:21:d7:fc:8e:
                    f2:65:47:cc:49:58:00:d1:3c:d8:1f:f6:34:94:71:
                    4f:05:7b:0f:e1:5b:24:dc:32:2c:c6:20:0e:44:c2:
                    d5:6b:6e:92:f1:41:15:66:49:fe:40:67:f4:41:0e:
                    34:a6:8d:70:b7:db:81:a3:66:19:9e:0c:b6:87:d1:
                    12:27:05:68:75:5f:3b:70:c5:d0:a3:90:98:45:36:
                    06:3f:7a:0a:99:40:82:82:ce:ee:2c:4b:6c:e6:8a:
                    82:c3:33:7c:8e:04:d7:90:bc:39:55:fe:28:31:27:
                    b0:05:5f:0d:55:3c:4d:44:1d:78:91:bd:b6:63:6c:
                    30:19:ef:22:ab:c0:ab:02:bf:88:10:ec:90:33:c9:
                    7f:48:a0:c2:bb:29:1e:02:dc:a8:93:43:ee:88:01:
                    3f:3e:e4:a6:cd:f7:05:67:d4:ff:c4:85:c0:ed:2c:
                    94:a7:e7:52:5e:08:15:7a:b7:77:38:52:ed:ff:77:
                    6d:a8:bc:4f:a8:1d:d9:ba:81:aa:01:c2:ea:07:0e:
                    33:92:b5:0d:8d:8e:16:c0:6c:bd:d9:37:66:80:4d:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:13:B0:73:72:68:F8:5C:3E:AC:AC:7D:EE:E6:A4:25:FD:99:AE
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:5c:30:a0:e8:66:47:c3:cb:ce:7c:9d:61:e1:5b:d1:4c:
         b5:98:fb:45:95:50:d0:eb:c9:f5:bd:72:01:93:51:d6:20:86:
         c1:7e:1d:94:9d:50:c9:79:75:1f:67:0e:9b:ba:08:08:4e:0b:
         20:c9:fb:0b:7e:4b:7c:ba:ac:fa:c7:73:e6:a0:60:1c:94:56:
         ef:5e:82:a2:b3:d0:f3:97:90:de:c9:fe:ee:ba:ec:71:b5:c1:
         cd:a3:7a:88:69:0e:66:81:fe:3e:b9:52:51:df:f5:41:b1:80:
         bd:50:f7:89:d8:9e:4f:e2:af:4f:03:92:43:2c:cd:4f:01:0d:
         20:5c:76:d2:5a:fb:1d:c6:2c:3d:36:de:b3:1b:39:52:70:32:
         82:ce:be:be:c5:a5:29:bd:9c:ad:17:b1:5d:df:47:6f:0e:27:
         5a:47:09:96:69:e9:98:ae:4e:d6:b0:ad:7f:6a:14:79:5e:b7:
         ec:e4:e1:5d:b9:60:3e:b3:79:6b:89:d8:f5:4a:ea:f9:58:f5:
         6b:e3:73:c5:b0:ec:f2:68:f0:69:02:9b:22:90:a2:46:74:ce:
         b6:f5:85:2c:a4:2a:be:4b:0d:55:c5:09:c0:a1:0c:63:50:9c:
         4a:2b:2d:4a:69:7c:17:15:4b:90:61:52:2a:96:e3:bb:cf:ef:
         e6:21:14:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou8OreKz//HeXU0t9Zjk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl
NTU0NzMwHhcNMjYwMzI2MDYwMTI3WhcNMjYwMzI3MDYwMTI3WjAzMTEwLwYDVQQD
EygxNWRlMTNiMDczNzI2OGY4NWMzZWFjYWM3ZGVlZTZhNDI1ZmQ5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yOqbMbgsUmbOJKQH+9l5Th6zpmo
GuXEUZj6pwqoRI/eySIuA1OOwSHX/I7yZUfMSVgA0TzYH/Y0lHFPBXsP4Vsk3DIs
xiAORMLVa26S8UEVZkn+QGf0QQ40po1wt9uBo2YZngy2h9ESJwVodV87cMXQo5CY
RTYGP3oKmUCCgs7uLEts5oqCwzN8jgTXkLw5Vf4oMSewBV8NVTxNRB14kb22Y2ww
Ge8iq8CrAr+IEOyQM8l/SKDCuykeAtyok0PuiAE/PuSmzfcFZ9T/xIXA7SyUp+dS
XggVerd3OFLt/3dtqLxPqB3ZuoGqAcLqBw4zkrUNjY4WwGy92TdmgE0ZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXeE7Bzcmj4XD6srH3u5qQl/ZmuMB8GA1UdIwQY
MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt
MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk
LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlxcMKDo
ZkfDy858nWHhW9FMtZj7RZVQ0OvJ9b1yAZNR1iCGwX4dlJ1QyXl1H2cOm7oICE4L
IMn7C35LfLqs+sdz5qBgHJRW716CorPQ85eQ3sn+7rrscbXBzaN6iGkOZoH+PrlS
Ud/1QbGAvVD3idieT+KvTwOSQyzNTwENIFx20lr7HcYsPTbesxs5UnAygs6+vsWl
Kb2crRexXd9Hbw4nWkcJlmnpmK5O1rCtf2oUeV637OThXblgPrN5a4nY9Urq+Vj1
a+NzxbDs8mjwaQKbIpCiRnTOtvWFLKQqvksNVcUJwKEMY1CcSistSml8FxVLkGFS
Kpbju8/v5iEUzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:52 2026 by rpki-client