Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File:                     NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier:          BuIXh+G9s51dTYc89HoUxpNE6oDfIA8XIGHAl/Pc7jk=
Subject key identifier:   8D:59:A9:98:0F:BB:EB:78:39:99:E1:72:25:01:41:D9:05:97:F4:D8
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer:       /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial:       019D2816A1DF9838773D4E05829C391976B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number:          0C73
Signing time:             Thu 26 Mar 2026 03:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:04 +0000
Files and hashes:         1: InPFMpdJAXXO_yXbxGZuHeN8kBs.roa (hash: vCdlR4+URzLW/X9eKQ1ExsBHfsRxyqUAmI7ldq8lqGc=)
                          2: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: CCIdB/ijs9+r0PtvAAJrIZ/ut4+GXzTa+O1WIzUoxXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a1:df:98:38:77:3d:4e:05:82:9c:39:19:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
        Validity
            Not Before: Mar 26 03:01:04 2026 GMT
            Not After : Mar 27 03:01:04 2026 GMT
        Subject: CN=8d59a9980fbbeb783999e172250141d90597f4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:fe:ac:40:54:e3:29:d7:93:03:42:f1:31:
                    fb:db:bd:b9:5e:1c:fb:0c:57:06:55:fa:d8:1c:0e:
                    86:72:e8:e2:ea:dc:a0:21:b1:d6:24:3f:62:f2:63:
                    1b:16:ba:39:d9:4a:87:a6:60:f6:ea:2a:ad:f9:aa:
                    c0:15:c3:bf:6c:5c:8d:a5:f0:2a:e3:68:7c:1d:c6:
                    4a:47:1d:6e:a9:80:6f:95:f8:7f:85:27:21:b6:58:
                    e2:df:e8:74:f8:73:4c:8a:61:0a:48:72:fb:e5:93:
                    a6:0e:60:92:4b:43:bf:3f:67:5c:0e:35:de:30:ae:
                    65:48:3c:96:bc:02:d7:e4:4b:3f:e0:90:be:ec:19:
                    8b:b7:d6:c9:68:c0:25:e4:be:cd:73:64:46:8c:17:
                    78:6d:08:a0:52:ee:05:d6:e3:dd:fb:12:77:ce:53:
                    de:03:a3:d8:fc:9d:5f:0b:ff:de:dd:b8:89:7c:97:
                    4a:c2:4b:3b:3a:9f:92:ca:72:f3:78:f7:99:66:8b:
                    e6:13:b5:db:5e:ce:1a:b4:57:38:d4:55:f5:70:89:
                    ee:eb:25:b2:9b:b8:47:59:fc:cf:19:0e:59:3c:4d:
                    d3:89:8c:8c:db:67:89:a8:af:79:50:df:6b:00:2f:
                    85:b6:36:58:d2:8b:8f:55:cd:51:62:8e:88:00:48:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:A9:98:0F:BB:EB:78:39:99:E1:72:25:01:41:D9:05:97:F4:D8
            X509v3 Authority Key Identifier:
                keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4f:9c:16:b3:8e:08:d6:f8:7d:89:a5:89:7d:5e:88:0e:0d:
         52:36:15:b8:07:23:8b:72:0d:f7:6f:07:b3:78:c8:f7:8e:12:
         06:57:63:b5:30:6a:9b:38:86:65:8b:83:95:31:a6:73:6d:8b:
         de:8f:bc:37:ef:83:18:9f:9a:58:c7:98:21:cb:f9:05:e8:8f:
         18:6f:7e:29:ac:8a:30:62:ab:92:75:f8:09:1e:3d:38:dc:07:
         96:ef:0c:93:01:a3:91:ce:62:f4:23:f4:38:cc:9e:6d:54:5c:
         05:55:fe:bb:4f:40:e3:09:b6:2e:f4:d9:19:58:6a:99:29:e3:
         b7:f1:34:d7:b5:a5:60:bd:6b:92:17:44:93:b4:55:16:83:12:
         8b:e9:6a:43:a3:6d:f4:da:d6:14:9e:0d:30:a5:ea:19:4c:17:
         44:14:e1:35:a1:5a:98:93:ea:39:f5:bc:62:d2:49:41:31:6d:
         82:78:a0:79:95:fd:d8:bb:5f:df:9f:39:13:0d:5a:38:de:88:
         d8:75:74:74:35:4c:65:87:80:0f:8a:7f:7c:9d:69:61:d4:87:
         26:a7:42:dc:b6:d6:7c:99:0f:b5:eb:48:5e:cf:f6:42:03:0f:
         68:bf:11:03:36:11:4b:f3:23:a7:c1:1c:93:01:31:1f:a8:b8:
         ff:55:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:02 2026 by rpki-client