Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File:                     Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier:          LPVEv5LbRk16A3FMFh9ZoWF58OaoY/yABLOIAHrVtc4=
Subject key identifier:   C5:4F:53:24:5B:D9:87:96:CD:D7:60:43:20:DF:A1:C2:3D:67:5E:80
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer:       /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial:       019D273B045DE62F7363D5052A84E8AD4D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number:          021D
Signing time:             Wed 25 Mar 2026 23:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:11 +0000
Files and hashes:         1: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: AGrKZGtNcn3NUkuyf4BLUrcArqXcHJJLhtk6+WZLAIk=)
                          2: ko6ImljslX8xwBeiLCk3I9LplCE.roa (hash: wxQ+AHB8I0TGwqdWlDutPolU/PoZbv8ro+r43WDFBLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:04:5d:e6:2f:73:63:d5:05:2a:84:e8:ad:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
        Validity
            Not Before: Mar 25 23:01:11 2026 GMT
            Not After : Mar 26 23:01:11 2026 GMT
        Subject: CN=c54f53245bd98796cdd7604320dfa1c23d675e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:8d:cc:ed:00:46:af:db:eb:f1:36:8f:7c:
                    81:bf:ae:5d:ce:fe:8f:53:49:fd:3c:14:e3:f0:0a:
                    82:ce:a4:65:6e:9f:b4:4e:f3:0c:04:7a:bd:38:1a:
                    ab:ed:07:6a:8b:dc:05:78:6f:bc:36:70:b5:25:db:
                    c6:88:8e:93:e5:3f:6c:c7:99:92:ea:56:09:25:a3:
                    a8:68:2f:d6:5f:32:cc:b8:0f:03:a6:c1:bd:7d:1c:
                    5f:d4:35:18:c7:ec:fb:ce:45:dc:13:96:60:6f:a0:
                    4c:b3:26:e8:ea:66:14:cd:18:67:59:e5:6d:7c:5f:
                    59:39:a8:a4:b5:50:6e:d1:a3:5b:30:89:d7:fc:96:
                    68:6d:2d:f1:8a:4f:4c:b7:12:ec:7f:8e:01:10:90:
                    93:70:43:d4:0a:6a:12:f3:4e:b5:7e:0a:c1:55:44:
                    b4:ec:01:14:b9:b0:4a:db:43:e7:ee:82:5b:7e:1a:
                    0b:d2:cc:81:a6:04:6e:02:b0:b8:dc:30:95:59:ac:
                    2c:83:ce:bf:4f:d4:1d:3a:04:62:2a:1c:22:49:86:
                    6d:15:3f:6e:d6:2a:cd:ae:31:b3:07:22:68:3e:6c:
                    ce:11:c5:08:2e:61:1f:88:8e:18:01:44:02:83:c8:
                    6b:69:f2:e3:ad:16:dc:cc:cf:6b:dc:30:69:ee:2e:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4F:53:24:5B:D9:87:96:CD:D7:60:43:20:DF:A1:C2:3D:67:5E:80
            X509v3 Authority Key Identifier:
                keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:d6:39:7b:53:ed:6c:63:5d:a5:7c:c3:79:ea:eb:39:ce:
         36:3e:e1:ee:df:c2:fb:a3:93:6e:b0:50:1e:4b:5d:c3:2c:e9:
         a3:69:22:64:36:8f:b0:dd:5b:e7:a8:1f:1c:e5:a7:7a:79:73:
         a6:5e:e9:52:75:c2:b0:79:bb:31:3a:eb:67:e7:ae:c3:90:d0:
         98:e0:0e:fe:78:23:c2:2e:88:a7:e6:f6:bb:5a:67:48:03:c8:
         c8:18:0d:82:f2:b1:ae:be:f7:43:61:68:50:c3:a9:0a:76:32:
         3a:70:44:8d:79:6a:29:50:ff:85:d7:ab:ad:95:55:cd:bb:3d:
         01:6e:db:a5:58:95:b0:f2:07:a3:d6:48:01:f6:6d:f1:56:4e:
         18:c7:28:a6:0e:c5:70:c3:68:dd:c4:3a:95:7a:90:a4:88:04:
         b0:f5:33:a3:d3:72:ad:78:3c:2b:e5:da:12:a1:10:6d:58:34:
         3c:4c:08:61:78:72:4c:1b:23:9a:ef:f6:4f:89:96:f9:68:85:
         01:0a:2d:e1:38:13:db:13:86:06:16:64:0f:43:00:6a:a2:9e:
         e9:ff:f5:71:b0:e8:56:7f:a4:4b:fc:12:f9:fe:28:1a:b3:5c:
         c7:b0:24:db:6e:37:ba:b4:65:31:92:84:6e:33:d0:5d:93:80:
         fd:54:82:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOwRd5i9zY9UFKoTorU1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyMmYwNGI5NDA3OGFhZTAxNWUwMDk1N2IyNzNmZjAz
OGNmMTIwHhcNMjYwMzI1MjMwMTExWhcNMjYwMzI2MjMwMTExWjAzMTEwLwYDVQQD
EyhjNTRmNTMyNDViZDk4Nzk2Y2RkNzYwNDMyMGRmYTFjMjNkNjc1ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL2NzO0ARq/b6/E2j3yBv65dzv6P
U0n9PBTj8AqCzqRlbp+0TvMMBHq9OBqr7Qdqi9wFeG+8NnC1JdvGiI6T5T9sx5mS
6lYJJaOoaC/WXzLMuA8DpsG9fRxf1DUYx+z7zkXcE5Zgb6BMsybo6mYUzRhnWeVt
fF9ZOaiktVBu0aNbMInX/JZobS3xik9MtxLsf44BEJCTcEPUCmoS8061fgrBVUS0
7AEUubBK20Pn7oJbfhoL0syBpgRuArC43DCVWawsg86/T9QdOgRiKhwiSYZtFT9u
1irNrjGzByJoPmzOEcUILmEfiI4YAUQCg8hrafLjrRbczM9r3DBp7i5RDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVPUyRb2YeWzddgQyDfocI9Z16AMB8GA1UdIwQY
MBaAFDbqIvBLlAeKrgFeAJV7Jz/wOM8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUt
NWMzZjc2ZDExNjA3LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUtNWMzZjc2ZDExNjA3
LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjzWOXtT
7WxjXaV8w3nq6znONj7h7t/C+6OTbrBQHktdwyzpo2kiZDaPsN1b56gfHOWnenlz
pl7pUnXCsHm7MTrrZ+euw5DQmOAO/ngjwi6Ip+b2u1pnSAPIyBgNgvKxrr73Q2Fo
UMOpCnYyOnBEjXlqKVD/hderrZVVzbs9AW7bpViVsPIHo9ZIAfZt8VZOGMcopg7F
cMNo3cQ6lXqQpIgEsPUzo9NyrXg8K+XaEqEQbVg0PEwIYXhyTBsjmu/2T4mW+WiF
AQot4TgT2xOGBhZkD0MAaqKe6f/1cbDoVn+kS/wS+f4oGrNcx7Ak2243urRlMZKE
bjPQXZOA/VSCVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:12 2026 by rpki-client