Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          hY1BhmzGSglJ7fP2LkknMG87M3lYUtJITmHwGyf8ihc=
Subject key identifier:   87:DF:2E:C5:50:1E:3B:3B:14:2B:89:07:10:63:CF:E8:A3:C8:14:02
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       019D2997997C0108A6C9BCEE93F6D03EC262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          0B11
Signing time:             Thu 26 Mar 2026 10:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:34 +0000
Files and hashes:         1: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: 2NotUF3y5PbaOAz6cYzxQBSuoMnrSROxcTU0UxN4kZs=)
                          2: P9oU8l4hJSdNb2cRdixd2FnzViw.roa (hash: CgDo7X7BhUNB3k1XMsCieKRq+wkse0U7IlgpY0Oyr+4=)
                          3: X30d4L9HwoFcQSCZOPGT8fzFSUk.roa (hash: RqJT0G3LIofj7mqU4OcHwIwo8yHwTlkJsfy4x6YteKE=)
                          4: YTl2wkQfDFdQtN71h5K-qw3EztM.roa (hash: z25IOf5DaazAZ0jaAF7FfOCUfonWoXfC3l+JaU4GRgc=)
                          5: fBEXs-dTnmKjIiNwEfni1rhj8-0.roa (hash: tYbmFJdA3qGjmuXRVTxySeGXojO7ROAd1nbv5cqUyhg=)
                          6: p1I2kvjqE5zJEHuXqLKtGgN2Fls.roa (hash: vehfkPlYhyK0yYpwudREOkhweLKXbX+0n9mqb4hiUck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:99:7c:01:08:a6:c9:bc:ee:93:f6:d0:3e:c2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Mar 26 10:01:34 2026 GMT
            Not After : Mar 27 10:01:34 2026 GMT
        Subject: CN=87df2ec5501e3b3b142b89071063cfe8a3c81402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:0b:ad:7e:08:73:df:62:4e:d1:17:09:2d:
                    9e:76:b3:b5:51:c2:ec:39:0e:ed:75:8b:cf:75:b7:
                    b3:12:47:15:e3:71:5e:13:ac:ed:d7:d6:29:36:df:
                    93:0d:b4:d7:7a:c3:74:fc:5b:22:4c:cf:ae:29:32:
                    58:b1:7b:da:95:ca:3a:63:51:cf:52:9a:a1:5f:fb:
                    55:5d:e8:21:20:fc:aa:b0:f9:c9:97:fa:1d:2e:53:
                    04:46:c5:0e:a5:b8:93:db:4e:b0:77:7e:3d:42:97:
                    50:f0:14:e7:32:a5:e7:99:b3:93:26:21:78:b8:13:
                    6a:1e:04:3e:8d:4a:b5:13:9d:de:f0:be:62:e6:3e:
                    d2:29:17:67:50:6c:c1:b7:f2:13:55:2f:c8:95:45:
                    5a:fa:c4:8b:7b:16:8d:de:b1:24:14:96:15:20:e6:
                    a6:c3:26:4b:52:a2:aa:ed:0c:b8:a0:cb:4f:a5:e3:
                    a9:24:c8:b2:59:1e:87:9d:88:a6:28:9d:40:e5:5a:
                    95:2f:e3:0a:5b:8b:c4:28:2c:38:73:45:b3:df:04:
                    07:4e:b3:a3:0c:4a:2c:bd:c3:ae:e6:38:d5:13:64:
                    6f:7f:bf:3b:e3:85:6a:fb:bd:d7:ed:cd:bd:be:52:
                    a6:af:b0:e5:4a:81:37:1d:a1:05:78:99:48:57:3c:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:2E:C5:50:1E:3B:3B:14:2B:89:07:10:63:CF:E8:A3:C8:14:02
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:71:29:98:38:c3:89:15:9f:52:40:28:36:d9:06:c3:1f:
         17:d1:24:ee:61:c4:c2:37:de:fb:c4:9f:23:d1:08:16:23:5f:
         95:4c:bc:62:a2:c8:c0:8a:5c:af:50:79:59:a8:14:2a:d3:84:
         ba:c5:f0:4a:ba:55:e9:19:79:42:d8:23:fe:86:b8:1c:30:46:
         91:26:00:6c:d7:a7:40:ac:25:3f:f7:ca:b5:f2:34:4a:ec:b2:
         08:49:a7:10:1a:27:f8:27:9b:4b:c2:46:98:09:1b:f4:00:ec:
         5e:d8:cd:7e:f3:97:d2:84:f1:b3:a4:df:f7:0e:a8:2d:93:7c:
         54:77:41:0b:f4:0e:af:1a:41:69:1f:1b:2d:5a:79:d9:c1:47:
         fd:78:b6:d7:36:0d:ac:fc:1f:e1:23:e0:69:9f:f0:b6:44:53:
         fc:95:ba:2a:2e:08:c8:8e:ee:e5:06:ed:c0:1a:31:cd:2a:d4:
         b1:c3:e0:e9:73:ef:45:54:6c:ce:0b:eb:e1:da:78:5d:16:b3:
         20:9e:75:17:0f:56:e7:64:97:e1:c9:dd:eb:9b:9b:e8:f1:5d:
         ba:db:83:5c:19:41:25:a5:44:07:60:24:34:66:72:50:c6:40:
         56:47:eb:57:d4:09:37:ba:f9:df:b2:da:50:57:51:c8:59:b0:
         9a:ed:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:34 2026 by rpki-client