Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          qHm8scZUw9p713tsOrXJHDR6F27mfJ10/AQSgGgdQp4=
Subject key identifier:   0E:5B:5D:A4:17:16:A3:31:C4:F6:AF:A7:93:8D:04:8E:1F:22:A9:72
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       019CE523CE580F6110FC933A20A4EBF9834A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          1871
Signing time:             Fri 13 Mar 2026 03:00:54 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:54 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:54 +0000
Files and hashes:         1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
                          2: 4_3T9oqdjGNdYvgcmhfdmg2_xFk.roa (hash: C4ZhYpcFum0fbS3tRySUhTlzAuq5N1/9WgaAqXp5T1k=)
                          3: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: 3KQIk4hCI4BJNgaLPISk5ZIuyIiFFchALWCwv/3Wpgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:ce:58:0f:61:10:fc:93:3a:20:a4:eb:f9:83:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Mar 13 03:00:54 2026 GMT
            Not After : Mar 14 03:00:54 2026 GMT
        Subject: CN=0e5b5da41716a331c4f6afa7938d048e1f22a972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:d1:33:0a:22:d7:8b:13:af:cf:3c:66:70:
                    06:b2:9f:88:d2:08:b3:00:b1:63:4f:94:6e:c2:18:
                    a7:fb:b8:b2:d6:b1:02:39:67:de:4f:d6:45:32:ca:
                    9d:c7:fc:6f:7e:d6:9c:76:61:03:4a:50:7a:e0:ed:
                    6c:0f:de:21:4a:f6:40:7c:89:da:34:d6:97:2d:14:
                    a0:c7:27:9c:51:68:a4:c2:fa:92:17:bb:0b:78:eb:
                    33:06:50:ab:61:3e:03:f9:c8:5a:e7:fe:f5:6e:cf:
                    09:60:79:1e:11:38:41:95:cc:85:8e:38:21:0a:b7:
                    b1:a8:9f:89:77:a9:db:7a:3f:bf:c0:d8:df:11:7d:
                    f5:e7:27:93:5d:42:85:e6:7f:7b:6b:ad:00:05:37:
                    a2:0f:cc:b9:f2:83:ab:71:5e:20:27:7b:bf:2a:dd:
                    92:6a:ee:98:6e:99:22:f5:b3:f2:7d:a4:20:f0:36:
                    0a:6f:ff:74:0e:13:f0:a4:e9:86:06:05:fc:e9:0d:
                    be:2d:fe:ba:28:b2:9e:c1:4c:66:8b:8b:8d:12:4b:
                    31:d0:14:5b:fd:97:50:83:b2:d1:c5:cc:f7:e2:10:
                    0e:33:ed:0f:66:50:7c:79:93:40:00:a4:e1:ec:59:
                    f7:01:d5:5d:0c:0a:a0:9e:ce:0c:62:da:3f:69:0c:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5B:5D:A4:17:16:A3:31:C4:F6:AF:A7:93:8D:04:8E:1F:22:A9:72
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:dd:f3:a7:34:31:ae:f0:aa:a8:ce:cd:b3:b2:35:ef:f6:
         14:a4:de:44:87:4e:8f:36:72:94:32:9e:04:f4:52:c0:72:1a:
         fa:d3:e2:84:8c:dd:06:9f:a1:13:b6:5a:9c:1b:e5:9d:ff:19:
         b2:bf:4f:6c:eb:a5:9a:ef:52:8e:d1:40:2c:75:db:37:7c:ba:
         6c:b4:ac:04:11:3f:bf:91:c2:63:cd:88:f2:17:a4:86:69:ed:
         47:54:54:e7:08:7d:ae:67:40:a8:d6:b1:dc:19:6f:82:76:e5:
         7a:34:c4:60:5d:f8:a3:ec:86:cf:bf:c9:3a:08:b0:71:37:f6:
         fa:15:50:df:5e:52:6b:86:8f:f4:fe:3a:16:07:0b:40:e9:c2:
         32:a7:c2:9a:53:5f:ac:ad:37:f3:ab:9b:34:fc:b4:5f:3d:79:
         d5:40:1f:3a:85:ef:97:69:ce:9d:04:31:5f:b9:aa:df:e3:27:
         19:81:1e:a0:16:20:51:f0:88:b5:02:32:20:07:e5:65:22:1d:
         be:62:87:c9:f9:fd:e3:57:9f:2a:61:00:c2:e9:9d:b0:62:de:
         bf:0a:b3:d3:7c:21:51:3b:f9:02:64:8b:40:d1:32:2f:47:32:
         58:8a:45:d4:59:26:40:ed:30:ed:b8:31:f4:99:40:eb:db:5f:
         70:c8:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:01:06 2026 by rpki-client