Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File:                     NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier:          oBTe9fM5spLIMoSUEG3jawOCAFZ08tNieGWrbvqZ8Es=
Subject key identifier:   FB:0C:42:0B:2C:40:88:16:25:E5:5E:09:95:B4:1A:EA:18:F3:EB:67
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer:       /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial:       019D2817061FFFC627FE533C1FFF438BBA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number:          151A
Signing time:             Thu 26 Mar 2026 03:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:30 +0000
Files and hashes:         1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: zhJw6+7GY77MtroysrbCA5GUOiSY+x/A4ykMTpQ9Pdg=)
                          2: QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa (hash: cg/5v5qKfRj2142sZSNTSinM09isCzKzLrAye6kCxYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:17:06:1f:ff:c6:27:fe:53:3c:1f:ff:43:8b:ba:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
        Validity
            Not Before: Mar 26 03:01:30 2026 GMT
            Not After : Mar 27 03:01:30 2026 GMT
        Subject: CN=fb0c420b2c40881625e55e0995b41aea18f3eb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:e3:f2:14:c3:cd:4d:1c:f8:87:2d:92:de:
                    60:da:29:09:bf:2e:a2:00:1d:2a:f7:a1:c4:25:d5:
                    4e:a3:05:40:5e:ad:5c:e3:27:1e:71:8f:b1:b0:92:
                    83:5a:ec:4d:67:04:1a:98:20:ea:d0:eb:fe:14:2b:
                    61:e7:e1:d1:fe:42:fe:92:63:4b:cd:b8:9e:4d:3d:
                    d9:00:87:b0:21:fe:89:ec:22:b3:a6:4a:05:81:dc:
                    da:34:a6:31:c3:c8:e6:9c:cd:aa:ca:99:86:da:3b:
                    03:8a:6b:ba:6e:69:7a:86:e3:dc:00:9e:65:9d:40:
                    5f:90:e5:23:b8:0b:ac:c4:fe:7b:06:f7:5e:96:69:
                    9e:8c:e1:a8:8e:9e:71:36:37:08:91:a2:74:f0:e2:
                    59:45:b9:b9:5d:a0:7d:b0:36:df:5c:fa:ac:c2:25:
                    82:34:87:49:6f:54:64:1d:f5:66:cb:cd:33:b2:24:
                    ed:c3:e5:7a:51:8c:74:cb:fd:8a:15:1b:76:c0:f1:
                    ca:c9:b5:62:a4:d9:21:4f:9d:c1:95:34:d8:d7:71:
                    14:4a:04:81:c9:5f:65:0e:26:c9:e4:66:fb:c3:7c:
                    5a:5a:3f:ae:1b:8a:6f:2f:73:22:b9:c8:aa:c1:ea:
                    c7:07:69:49:3d:4c:89:91:b6:92:ed:ff:17:92:e9:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:42:0B:2C:40:88:16:25:E5:5E:09:95:B4:1A:EA:18:F3:EB:67
            X509v3 Authority Key Identifier:
                keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:da:4e:36:6c:27:c1:a0:f2:dc:20:b7:92:c2:55:83:f3:2d:
         b7:c3:d5:01:be:a9:01:af:ac:c6:71:61:0d:bf:76:25:35:9b:
         61:0c:c1:38:66:ad:11:ef:3c:74:51:cb:79:fa:2a:56:52:b7:
         a6:6f:66:8b:d6:59:fd:3b:9e:5b:b3:6d:4e:96:64:fa:7b:5b:
         28:93:62:cd:bc:dd:8b:f0:be:0c:95:63:36:0d:f7:7e:39:c6:
         75:96:d8:b0:ad:ab:b0:e3:2b:80:72:da:ee:74:6d:6f:b0:c9:
         e8:b0:a1:7c:6f:60:1a:6a:6a:73:32:0b:4b:d3:32:d9:73:8a:
         b5:1a:c8:27:81:fc:11:23:a8:74:85:cd:39:64:fa:b4:71:c7:
         32:e2:55:d1:c5:a0:e7:39:5d:2b:f7:61:b4:eb:88:b7:03:aa:
         52:0c:72:2d:1b:3b:f0:12:b6:91:2f:b7:99:f6:08:78:52:b8:
         94:1a:0e:fe:24:5d:a9:05:b9:0d:16:be:a4:a5:2d:56:ac:04:
         c4:7e:65:66:f5:a2:b0:0c:51:f5:48:78:cb:6f:9e:8b:32:15:
         cd:c6:76:25:62:16:37:eb:fe:6c:d0:84:7a:ce:5a:fd:c4:ff:
         14:ba:f2:41:12:21:d7:d8:37:93:3f:e6:e4:f6:e3:32:99:77:
         3e:77:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:27 2026 by rpki-client