Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          nRE1f3+Rd5Payw3Y3+IoknNo+4gePS3DB1ZynL4q68s=
Subject key identifier:   8C:57:D1:21:F1:55:50:3D:D4:C1:5A:35:F7:9B:0C:91:8D:65:8C:70
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       019D265F9A0E87C1418299BBDBCD1CB28BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 19:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:32 +0000
Files and hashes:         1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
                          2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: U4cWvYJ1zMGH3rOh1lnkr2jbOkJn4RzurOnCC77bsbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:9a:0e:87:c1:41:82:99:bb:db:cd:1c:b2:8b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Mar 25 19:01:32 2026 GMT
            Not After : Mar 26 19:01:32 2026 GMT
        Subject: CN=8c57d121f155503dd4c15a35f79b0c918d658c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:9e:6b:f6:7e:39:cd:9e:e2:80:ca:47:c2:
                    ae:01:fa:71:af:59:3b:ab:1e:d6:1e:69:66:ab:13:
                    28:6d:bd:0d:6b:1b:0d:45:15:05:a0:96:76:4f:88:
                    36:33:8a:42:2c:d0:bb:ba:b4:73:fb:28:5c:fe:a9:
                    f9:84:e7:dc:6b:46:96:c4:0b:36:1a:b4:16:7e:39:
                    c5:54:3e:c6:68:25:3f:d0:88:cb:8f:c3:e6:95:28:
                    39:2d:17:27:a6:73:92:2f:20:7c:8a:2e:f2:8e:b3:
                    7d:67:4a:0a:f4:b1:a4:56:c1:f7:7a:eb:19:96:7c:
                    5b:37:8d:0c:b9:f9:99:ff:6c:41:ec:81:91:a0:d5:
                    91:21:6d:c3:be:94:90:de:6e:29:c2:0b:d1:9d:ca:
                    b5:9c:36:79:2b:be:2e:f0:aa:52:1b:88:70:84:50:
                    c2:ae:fa:dd:cd:73:c0:69:8f:23:a5:eb:de:01:ea:
                    07:ff:41:e8:bd:4d:33:76:50:c7:6c:a4:4d:9f:9a:
                    05:32:83:70:81:28:b5:73:e2:35:ef:6a:98:af:ee:
                    36:bb:f4:74:ec:97:ff:86:5f:e0:2a:3c:37:47:80:
                    7a:16:88:11:7d:88:3a:6b:e8:84:29:69:65:38:b2:
                    5a:40:e4:0d:6c:9f:2c:1b:fe:bf:0f:69:df:55:7a:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:D1:21:F1:55:50:3D:D4:C1:5A:35:F7:9B:0C:91:8D:65:8C:70
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:48:f7:5a:12:bd:f4:00:c3:55:f2:8b:1c:5c:f0:83:f0:
         a9:4a:26:3b:8b:4b:27:2f:d7:a4:97:2e:cd:9a:94:36:b0:5c:
         ca:5a:a4:06:1d:ae:7f:74:1a:f2:57:d7:5c:39:ff:f5:1c:03:
         da:6f:2e:a8:ef:e9:58:4f:05:3f:8a:e1:44:35:63:5c:e2:52:
         77:f3:37:8e:fb:ac:de:4b:89:36:d3:f4:3b:3c:4a:89:e4:49:
         14:fd:31:b1:53:16:b8:39:4c:fa:63:e5:a7:64:5e:fa:f4:09:
         de:84:a3:83:90:5b:ea:08:74:35:32:24:91:78:33:0b:04:70:
         25:0a:12:42:90:2b:b6:69:3b:ff:11:35:b4:21:79:57:f2:5c:
         1e:f0:35:f6:8b:5a:b9:a3:30:5d:38:1d:2f:c0:3c:b1:e7:da:
         fc:f8:b4:f6:a5:af:7d:39:27:ba:70:35:3f:27:26:9a:ba:66:
         26:2c:7f:e7:0e:da:69:ab:4e:c6:cc:98:99:e7:e7:96:b4:aa:
         34:d4:eb:93:f5:3c:92:71:d6:82:7a:73:05:ef:54:ae:1d:3a:
         9c:93:b4:00:6b:df:30:8d:e7:a3:f0:f8:04:87:19:cc:57:d8:
         89:26:86:af:b0:27:e8:37:9a:75:a6:d6:d8:d9:4a:b7:2a:04:
         93:7e:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:52 2026 by rpki-client