Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          zRw4OL7VsMcoPPt2K9nHHOVWmRCgjoPi1rMFdxPIgQQ=
Subject key identifier:   9B:07:E0:89:89:D8:A7:3E:73:DF:91:4C:AB:93:8A:38:B0:AB:91:46
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       019D39411190165AF3C6AA8BC328EDE884AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 11:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:58 +0000
Files and hashes:         1: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (hash: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4=)
                          2: McecUEUwqKunvtzepCez6bQQUBk.roa (hash: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E=)
                          3: XqoE4QEKfS73tFedkyMBR2t2Chw.roa (hash: 7QBQTr9lxf/H18imnUvnw9PKGfAGMos7jRs0YTyffvE=)
                          4: YAeu22loCmAQOVocekZI091KNAY.roa (hash: IyieUfnyyVgNIxndlID6xDdRxS+iTHAiCnCvVa6dBlc=)
                          5: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: orapYBrEwLwP3BgYcE6ZNzTOe6+6BE/fzjWQQFui08Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:11:90:16:5a:f3:c6:aa:8b:c3:28:ed:e8:84:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Mar 29 11:00:58 2026 GMT
            Not After : Mar 30 11:00:58 2026 GMT
        Subject: CN=9b07e08989d8a73e73df914cab938a38b0ab9146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:78:9f:1d:26:15:3e:9d:4a:e8:83:25:38:
                    ec:cd:89:86:cf:d0:a5:8e:7d:b8:13:1f:1e:b2:21:
                    c3:b8:35:cd:57:d4:7b:0e:87:e7:b2:b0:34:5a:ab:
                    a1:00:93:bd:c5:7a:9f:1f:52:f9:27:0f:de:6e:f9:
                    49:d4:f3:d0:1a:f1:40:11:79:be:ad:44:dc:ea:2f:
                    4f:50:b9:f3:36:68:1e:63:c6:be:34:8a:3b:c1:0c:
                    3a:2a:c7:d1:5d:f5:c2:3b:96:bd:a0:6a:84:08:25:
                    cc:47:21:a7:91:07:46:bc:bf:5c:78:85:72:e0:3e:
                    6a:8c:3e:94:63:7e:b6:4f:32:1f:5d:5e:97:6e:c7:
                    d6:87:2e:f2:c7:19:c4:17:71:1d:af:24:ac:a8:4f:
                    14:fa:09:6d:93:c0:22:14:dd:f5:6f:31:2c:2f:76:
                    30:2d:d4:6c:a4:77:cf:b0:c0:53:59:13:5c:78:4f:
                    9e:1c:fc:de:e7:7f:a0:ad:e8:70:31:4c:3a:ef:af:
                    f5:8f:39:7a:a9:16:3c:21:44:62:fa:98:14:78:a1:
                    3a:27:19:9f:47:69:68:b4:f1:31:c5:cc:7f:4c:53:
                    60:46:0d:a3:0c:17:27:49:05:c0:57:87:27:e2:9c:
                    69:cc:20:7c:c3:cc:8b:d0:c3:2f:39:7c:fe:f2:e0:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:E0:89:89:D8:A7:3E:73:DF:91:4C:AB:93:8A:38:B0:AB:91:46
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:fc:dc:d9:c4:75:e2:6a:8d:5c:6c:0f:76:a5:2c:45:1b:
         df:55:30:4c:87:ca:70:3f:32:2c:35:fb:69:f2:39:5b:18:ca:
         21:ee:7d:64:a6:20:62:58:e9:a3:97:9a:bc:32:28:37:e3:94:
         4c:3d:e8:e2:66:a9:24:b0:4b:d0:d5:80:1c:73:df:55:12:3f:
         df:33:60:dd:c0:c9:fc:b7:85:b1:7f:8c:05:15:9e:f1:f2:cc:
         bb:7e:a8:b7:1b:34:37:51:f1:62:8a:2e:af:95:22:05:e2:a7:
         0c:d6:0c:2d:cd:05:fa:08:78:5f:d3:58:26:7d:a9:5c:da:11:
         35:67:f7:9d:eb:4b:ee:51:cd:35:40:e8:1c:4b:5a:70:af:7a:
         e2:9e:d9:cf:a4:d9:d3:10:36:9c:78:7c:75:fe:b5:44:c2:29:
         47:bb:d5:70:1d:64:fe:4e:51:fb:4d:7e:25:d6:e2:5b:66:e1:
         6f:e9:65:57:f8:e0:df:e2:ef:2b:12:27:2c:94:f4:39:18:e8:
         50:c2:a1:b0:48:35:a9:4f:2c:d3:1d:34:42:07:f5:5f:af:6a:
         ab:68:e0:71:a7:06:b8:fd:3d:f1:f4:51:5d:21:92:e5:1a:dd:
         ae:b9:0d:41:25:b2:dd:01:e0:f1:3b:a3:4e:f9:c6:25:ed:50:
         d4:30:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:16 2026 by rpki-client