Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File:                     NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier:          wqv5HWM50W9cWQE5C2D53HvS9U5P2NfQelr6qFm71GA=
Subject key identifier:   F9:4E:9B:14:F9:24:D4:7F:8E:7E:9B:3B:1C:1C:B9:58:43:CF:D1:43
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer:       /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial:       019D38D3C10699636145818297A4232FB6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number:          0E51
Signing time:             Sun 29 Mar 2026 09:01:34 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:34 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:34 +0000
Files and hashes:         1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: 9xrxA81wSoe+wL/VsDLHdfN9Lovak9/NijlpvIPAbPc=)
                          2: lr150d2XGILiqF-TQMwRxqDTm5w.roa (hash: swf9GzpHqLFrOjJ0Syj99F4hF6OOAJag78U+mc9YBAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:c1:06:99:63:61:45:81:82:97:a4:23:2f:b6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
        Validity
            Not Before: Mar 29 09:01:34 2026 GMT
            Not After : Mar 30 09:01:34 2026 GMT
        Subject: CN=f94e9b14f924d47f8e7e9b3b1c1cb95843cfd143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:14:a3:a1:db:7b:dd:08:09:ca:02:2d:5c:
                    39:31:26:c1:cd:ef:7a:2c:ef:58:1a:e0:d0:a6:c4:
                    a5:45:b1:b6:f8:5b:47:94:a9:ac:89:35:36:51:68:
                    c0:22:f0:c8:e3:7f:e7:9e:5b:3d:06:d3:74:84:06:
                    9f:a3:82:ea:4b:7c:4c:a0:fc:a7:ca:66:f8:49:62:
                    ee:0f:12:5b:37:e6:81:bc:f3:96:7b:64:de:77:a6:
                    03:5a:d4:9e:38:a4:7f:12:d3:78:13:5d:6c:75:0d:
                    51:9e:9b:f4:2c:56:71:d5:47:fb:07:12:1d:75:9b:
                    7c:3b:c4:b8:fe:a7:e0:71:bf:f8:69:7b:9f:94:78:
                    a8:34:81:db:ef:7b:c7:ca:f4:f6:41:90:1e:47:c3:
                    4a:52:44:63:92:cd:82:7f:01:35:6a:d7:92:f9:8c:
                    4d:73:d9:8e:a5:6f:bd:ed:02:b3:20:90:e0:8b:61:
                    8b:9c:d0:b4:d9:f5:54:e1:4c:21:4a:9b:47:d8:13:
                    17:c6:37:11:48:45:12:aa:f6:09:f8:fa:2c:f2:8f:
                    90:2e:2b:97:dc:f2:c3:8e:e8:b8:e7:31:5e:b8:50:
                    86:59:26:fc:7a:7d:7c:16:51:d5:dd:87:27:8d:23:
                    08:6e:a6:b3:50:2e:c6:d4:ad:5e:4a:bc:11:67:bb:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:9B:14:F9:24:D4:7F:8E:7E:9B:3B:1C:1C:B9:58:43:CF:D1:43
            X509v3 Authority Key Identifier:
                keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:8e:23:7c:bf:c0:05:83:73:61:46:a2:5b:80:32:75:6f:
         c9:72:ff:64:45:d2:a7:be:fc:d5:52:4f:66:aa:41:b8:35:58:
         43:10:41:13:6b:1a:c5:03:c5:e0:e8:12:4e:15:78:87:39:4f:
         3b:70:76:df:57:31:4d:d5:61:e0:04:7e:06:36:57:1e:18:4c:
         cd:8a:94:74:18:78:73:05:78:34:05:ca:23:64:76:b5:d9:56:
         86:a1:f5:c3:89:e9:03:2b:66:ad:a8:2f:5d:9d:53:3b:d2:4d:
         ce:33:da:ff:aa:25:f5:46:b9:d0:f1:6d:11:2b:aa:6b:2a:f8:
         fb:5e:68:f2:6f:08:93:23:cb:a9:8f:0b:1c:75:a9:4a:6d:54:
         e2:98:3d:e5:c9:04:42:ac:aa:2e:87:43:17:a3:a9:4b:10:94:
         17:15:7f:e9:72:e7:c2:e1:42:8f:ca:ef:cb:d4:af:7b:78:03:
         e2:89:aa:ee:81:fa:3c:17:5d:0f:82:ae:5a:7b:88:f9:e3:ff:
         40:19:9a:ed:3c:de:8c:08:5f:89:ea:58:a2:e3:27:7c:64:b1:
         75:a4:69:29:ff:53:16:6f:0e:08:ef:b9:96:44:76:41:b7:c3:
         84:36:f4:4f:ed:a8:b4:61:e1:9e:32:75:bd:fa:c9:db:8a:7b:
         2e:0f:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:56 2026 by rpki-client