Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File:                     _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier:          fPmXCbx7qkWJEQ5/LrY3U4BhsfBa4KMYV+DNRC0MNiI=
Subject key identifier:   36:F4:87:5F:D7:98:8A:CF:EF:1B:50:E7:48:58:11:5A:B9:E7:A0:20
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019D26965B56203D13DA7EF172C15F63EC11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number:          159B
Signing time:             Wed 25 Mar 2026 20:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:21 +0000
Files and hashes:         1: 5EVB14c1Wp9DUMGncO8dMnhYewQ.roa (hash: 1+PPE2vwCT1DcBSpKhNOM70ibVxoJXlF1C7YdpbIQkU=)
                          2: HfW4Jiyf53p7x5-Kb1-uc4hpoGM.roa (hash: ItbBsidfK75EByPpSVV1rRPrzshBhT0F7TIXOQLP7jM=)
                          3: JptumZK_o26NVGZw2bJJ29wzj98.roa (hash: SmAhkDSWvGNAUul7qwEsVxdhO2v2bdTfJVR8jW5J3l8=)
                          4: R7Cay2ueq0WnTCeL2uX-2wJUHco.roa (hash: GQcuyMDby4kskPuI7EodSnNGXQ1UXDDiaDHBI1s2tqA=)
                          5: VTWYM5_h2r_wOOam9C7I8csXqsk.roa (hash: WSCVM2YwK2Bau1T7dP/pHh4RPax7RnffqIsFUaM96+w=)
                          6: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: CNnEdleE6n72VP0TIR1r2hJ2lwJ30lsyMGOfMdr4T3A=)
                          7: yhnnUlHPho1nYO-dZwOKzIeaEJk.roa (hash: rmW7wcZhu2IUsjlBMz6pwL3ALA5wovd1jow+J3zxFQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:5b:56:20:3d:13:da:7e:f1:72:c1:5f:63:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Mar 25 20:01:21 2026 GMT
            Not After : Mar 26 20:01:21 2026 GMT
        Subject: CN=36f4875fd7988acfef1b50e74858115ab9e7a020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:88:71:f9:12:36:6a:49:b4:dc:0f:eb:02:
                    d4:1c:cb:e9:ba:b7:b4:38:91:38:6b:57:bd:28:bf:
                    f0:88:5f:f3:f0:d1:59:e0:09:b2:03:a4:3b:64:dd:
                    27:ef:db:bd:39:20:f7:97:a4:d9:81:58:41:aa:b9:
                    63:03:be:8d:07:b1:0f:b2:13:ea:d9:7c:43:50:a6:
                    1d:9a:29:ee:fb:c9:7b:ec:b8:1e:29:a8:66:6f:79:
                    4b:95:43:1d:ad:d5:b1:c7:92:3e:c4:67:55:74:8c:
                    4a:37:e9:f7:a0:ab:00:35:93:90:47:99:08:58:87:
                    fe:73:0f:be:e0:b1:24:bd:e8:66:cf:10:f7:be:97:
                    7f:49:3f:40:90:7e:cf:b0:9a:b1:3a:1d:6d:14:ed:
                    14:e0:ce:d0:25:e3:10:91:59:af:3a:f3:50:2a:9c:
                    7f:99:c8:f9:7b:1a:bb:e4:10:3a:c1:77:d9:30:63:
                    c3:72:47:69:dd:6f:1d:ae:60:0a:b9:59:c5:6a:72:
                    9f:04:0c:12:c9:1d:b2:c9:22:ec:13:7b:f0:1f:12:
                    37:4f:9b:1a:f0:aa:11:4c:0d:bb:18:7b:94:8a:db:
                    8d:15:d0:c5:5e:69:ed:33:d1:e0:c8:41:ba:20:0b:
                    34:6d:38:44:7e:12:50:0b:35:80:68:79:c9:2c:85:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:87:5F:D7:98:8A:CF:EF:1B:50:E7:48:58:11:5A:B9:E7:A0:20
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0b:0b:9a:12:e8:7f:e0:37:27:9f:81:70:29:38:d8:07:f9:
         e1:8b:b9:d6:73:76:3a:b4:c9:2d:c3:79:3c:4d:61:a0:21:27:
         1c:a1:a1:dd:d6:74:ed:1b:c4:9c:18:3c:a8:35:ab:b3:0e:76:
         fb:45:1e:72:38:92:7e:9e:95:f4:fa:ec:a3:3c:35:7b:fa:9c:
         d7:d6:be:11:16:f3:16:a6:a1:cc:95:09:10:89:c3:ba:81:9e:
         fa:c9:ec:48:d6:34:c9:6c:e8:e5:3c:80:93:f3:df:dd:9e:6e:
         30:70:d5:46:bd:e0:47:cc:b0:95:30:65:1e:3a:32:82:0e:4a:
         7b:d2:b0:d1:31:5b:fc:70:ac:0b:55:cb:7c:02:22:9f:0b:65:
         b6:44:55:c6:8c:41:aa:32:45:0d:f4:82:e7:43:50:e2:7e:73:
         aa:47:89:d5:de:39:37:7a:81:c2:f0:84:4f:25:4c:8e:02:a8:
         c9:35:f9:9d:2c:7a:f7:ba:e1:8c:42:c3:8f:12:32:38:00:c2:
         de:a2:42:9e:86:12:4a:86:83:45:50:84:6a:4a:a3:1f:90:50:
         0d:9e:f8:e3:8e:09:b8:b2:6c:77:a7:1c:8b:bf:f6:3b:74:15:
         18:23:7f:f6:7a:25:3e:c0:b4:c5:5f:4e:09:a7:9b:45:fc:2a:
         5e:ba:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:12 2026 by rpki-client