Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
File:                     NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json)
Hash identifier:          /U5wkOFNpmYa0OAddLJNHxLLYGvSeoLwlWKhKqlPsV4=
Subject key identifier:   15:6E:A3:48:B8:C3:A0:20:5A:72:50:D1:75:FF:E0:16:4D:30:F2:CA
Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
Certificate issuer:       /CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Certificate serial:       019D33088D8DF25F3DCDE47AB621A5F2E71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
Manifest number:          1887
Signing time:             Sat 28 Mar 2026 06:01:31 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:31 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:31 +0000
Files and hashes:         1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: pg+oSdf45dyA9vEWV4Vf+PrDDGK7nsFsrRTeaAfmtog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:8d:8d:f2:5f:3d:cd:e4:7a:b6:21:a5:f2:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d
        Validity
            Not Before: Mar 28 06:01:31 2026 GMT
            Not After : Mar 29 06:01:31 2026 GMT
        Subject: CN=156ea348b8c3a0205a7250d175ffe0164d30f2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:c2:ba:95:85:a7:9e:80:29:27:2a:06:f3:
                    ad:d7:6c:f4:f3:99:8d:59:a6:f6:47:89:c9:c3:60:
                    68:f5:7f:95:d1:00:a5:71:e4:7e:a0:9b:fb:57:11:
                    f4:25:5a:a9:96:62:96:0b:b1:82:50:c9:c0:3e:36:
                    fd:14:0d:43:c5:3a:77:44:cc:a2:f7:0c:35:3d:d8:
                    61:70:29:b8:33:e3:17:4f:a2:64:34:d1:31:68:91:
                    58:08:a3:5c:77:9d:b3:cc:3f:b4:95:19:49:b2:ed:
                    27:49:85:90:f6:0b:c6:80:ec:7e:d4:04:65:0f:a4:
                    9a:22:73:93:e7:fc:04:3b:18:db:70:cb:e9:02:87:
                    50:52:0b:29:57:1f:62:02:e2:67:9f:25:1f:9f:52:
                    f5:76:66:7c:59:db:a3:90:b6:aa:6c:0a:ca:e3:0f:
                    ce:15:d3:a7:7e:39:be:d1:dd:5e:39:f1:16:51:68:
                    61:87:bd:a4:86:8c:47:1d:d4:d5:55:cc:d5:1c:f5:
                    1d:30:97:2d:9d:c3:d8:91:c5:6d:d7:ef:94:97:70:
                    ab:3e:19:f7:da:bd:d0:9b:cb:de:58:97:45:78:48:
                    ae:a6:65:95:8c:bc:5e:28:eb:9e:40:05:d6:97:40:
                    8e:b4:8d:82:db:9c:25:fa:48:b8:4d:a5:3b:60:31:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:A3:48:B8:C3:A0:20:5A:72:50:D1:75:FF:E0:16:4D:30:F2:CA
            X509v3 Authority Key Identifier:
                keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:39:d4:67:a4:ed:63:d1:dd:c7:b7:ed:c0:0e:8c:64:bd:
         29:4c:02:7a:33:e9:ed:7d:3c:b1:76:fb:fb:09:84:b1:21:ab:
         41:e2:9a:0d:94:6b:b2:31:6d:49:4f:54:36:ad:dc:21:66:4c:
         23:aa:e9:91:ca:41:98:2d:6a:70:2c:1a:ea:40:65:bd:cd:10:
         54:eb:b9:0a:fa:00:21:e1:ad:7b:a9:60:a4:82:fe:fa:0d:dd:
         3b:23:dd:26:a9:c4:2f:02:9c:4c:f5:32:7d:04:3d:0d:b3:7f:
         bc:18:33:2c:a3:82:bc:6b:db:de:1f:9f:90:8d:81:03:9a:17:
         cb:99:2f:33:2f:68:90:c0:0b:b7:e7:67:08:10:9c:3e:da:cb:
         e1:ef:54:62:3b:e6:23:c1:00:ae:83:7a:12:77:fd:51:b0:9b:
         06:32:8a:5b:88:28:e6:49:1d:0f:38:a1:95:16:56:ab:02:31:
         0f:7e:bf:3e:f6:32:39:84:ad:5d:5c:c3:f8:2d:a0:94:76:67:
         b4:a1:f5:42:e4:bb:76:f8:49:ca:f1:92:b9:fd:e9:1f:82:a7:
         b4:97:c3:4b:3b:61:67:2b:3f:3e:35:ae:4e:7c:c2:ba:03:4b:
         39:10:75:22:3d:c9:b1:94:f8:9a:ed:d4:2e:d0:11:46:66:6d:
         4c:c2:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----