Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          8WEeb7433Wg9ZwQk6Nrygd9lyNmnUEYjaY/WEH9gKgw=
Subject key identifier:   7B:E7:DD:7C:8C:9D:42:C6:F0:EC:2C:1D:6E:6D:BB:CC:CA:32:FD:EA
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       019D26CCCB74F9D0A70587D56C7C7E08F5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 21:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:48 +0000
Files and hashes:         1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
                          2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: ibFNdtLCZVDsOO0MPjhmopRTev0eIHPpW4RTy1tMvGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:cb:74:f9:d0:a7:05:87:d5:6c:7c:7e:08:f5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Mar 25 21:00:48 2026 GMT
            Not After : Mar 26 21:00:48 2026 GMT
        Subject: CN=7be7dd7c8c9d42c6f0ec2c1d6e6dbbccca32fdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:42:c5:cb:32:92:89:5b:bd:ae:5c:ac:a0:
                    9f:80:30:55:4d:3a:14:a3:a2:ec:0b:4e:d5:aa:cd:
                    3c:af:bf:f2:a9:7f:eb:e8:3e:51:28:60:c9:05:2d:
                    96:9a:9d:81:6d:41:23:f2:2f:a9:bb:dc:8c:57:24:
                    dd:48:ce:9f:2b:30:03:b7:4f:d1:d8:26:51:88:6e:
                    24:09:42:cf:de:74:c4:08:13:d1:aa:cd:2e:c9:f0:
                    09:53:82:1d:69:57:50:78:69:1f:07:0a:c1:b8:bd:
                    a5:db:c6:b3:8f:a1:55:52:4e:8e:79:e9:53:29:24:
                    49:45:ae:8d:d7:a1:84:62:aa:e9:2f:44:65:8c:4c:
                    ca:05:d6:45:25:bc:c7:a5:f3:3e:db:78:07:a0:14:
                    45:89:71:70:cb:8c:79:55:ef:de:2b:e8:87:39:6d:
                    85:1a:cf:73:6f:fc:04:f2:4a:aa:75:50:23:42:f8:
                    df:77:e1:d8:14:36:62:c1:10:00:e9:79:27:d7:d0:
                    4c:d1:2f:1a:f9:59:4b:d5:b2:b6:0c:72:85:b1:b3:
                    69:51:b0:f3:e2:15:7b:ca:8a:f9:ec:3a:a1:a8:e3:
                    d7:0b:f1:e8:74:80:19:d3:a2:8e:7a:c9:09:bf:29:
                    33:e1:e5:e2:ad:18:8c:9e:32:92:1d:fa:fd:dc:4e:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:DD:7C:8C:9D:42:C6:F0:EC:2C:1D:6E:6D:BB:CC:CA:32:FD:EA
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:37:6e:ec:a4:53:2d:71:8f:b8:dd:8b:88:74:51:95:d7:
         f2:5b:c1:9f:d2:4e:62:80:59:56:88:13:28:63:d9:54:d5:fb:
         86:21:92:46:eb:bb:20:59:11:c1:9f:d9:36:a9:dc:72:e4:9d:
         cd:40:18:52:7a:13:57:43:2f:fe:db:48:37:22:a0:cc:c0:25:
         72:34:5a:b3:32:e4:02:e1:54:00:c0:1c:ad:4c:b3:94:c0:44:
         a0:73:c3:21:a5:e1:29:28:43:9b:f2:d1:82:b2:c9:d6:1a:11:
         e0:43:ac:ea:3c:7a:53:37:49:a3:37:dd:b6:01:76:1a:55:b9:
         27:33:af:7e:ed:55:34:df:2b:39:23:c4:a5:1a:34:53:03:f9:
         66:8d:f2:25:8f:c1:4a:27:de:7b:47:9c:a2:9c:36:a9:55:47:
         70:27:9a:d3:49:fe:f8:62:83:18:55:76:ab:dd:7d:9c:87:b9:
         93:4b:e6:ad:c5:a1:4d:25:9d:b0:4f:73:e4:7e:eb:13:d3:db:
         fd:3c:4e:02:3a:07:98:5d:0d:05:da:02:77:72:4c:f4:31:55:
         33:45:bd:8f:00:13:99:cc:01:f2:7d:eb:f2:08:6c:9a:9b:b0:
         48:2d:b1:41:27:c5:c8:9c:9e:cc:fc:df:d4:5b:1e:9b:75:af:
         81:07:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:18 2026 by rpki-client