Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          GbzV2y4zkSUsGdDBe6sIMUio9WbcjL9AVJv+omNqK2Y=
Subject key identifier:   ED:AA:A2:AF:5E:6B:99:43:92:90:CF:CB:AE:6E:87:41:1B:D9:01:1F
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       019D390A07C2DD4E77BD92AB749F45914B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          15B7
Signing time:             Sun 29 Mar 2026 10:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:51 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: Pq8i7FCzgTfvs2pgWj6IqZF0LuYfECBjKWS4qNoo4lg=)
                          2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:07:c2:dd:4e:77:bd:92:ab:74:9f:45:91:4b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Mar 29 10:00:51 2026 GMT
            Not After : Mar 30 10:00:51 2026 GMT
        Subject: CN=edaaa2af5e6b99439290cfcbae6e87411bd9011f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:b6:32:b3:7b:32:aa:52:99:f0:ff:13:65:
                    e8:4c:eb:bc:b7:88:fc:a2:64:e4:25:71:f1:20:b8:
                    ab:59:b7:31:ab:a8:d1:2b:ce:ce:08:26:01:65:80:
                    da:b7:7b:20:d8:c2:12:f3:d1:0b:cf:de:ae:61:b8:
                    f2:5b:73:6a:b3:14:b4:99:a2:24:f8:33:97:df:a9:
                    28:1d:e7:bc:be:85:87:b2:30:e5:90:1a:c7:c7:14:
                    0c:37:b4:87:26:48:83:dd:fd:64:8b:64:76:83:31:
                    b9:4b:ee:99:1d:c3:44:24:f7:77:7f:a2:0e:22:8c:
                    e6:ed:96:d5:27:b5:df:13:bd:6f:12:67:ed:d0:06:
                    e3:bc:c2:cd:a7:52:45:46:b8:87:a0:62:91:aa:84:
                    d1:1f:90:13:1d:90:f8:a4:69:d8:e5:44:9a:af:76:
                    2d:df:8e:5c:59:56:4f:ac:1e:7c:88:f9:59:7c:3f:
                    0d:22:84:bb:a8:ac:65:73:74:66:3a:17:0f:07:37:
                    05:8d:17:1a:b8:ab:00:40:41:03:1d:2b:f5:ec:80:
                    81:e7:e8:98:0d:e3:85:51:f3:65:df:65:55:5c:d7:
                    53:f1:13:d1:bc:47:a3:17:7d:2e:32:a7:2a:bb:19:
                    c1:ca:81:41:c4:eb:ea:d0:a0:33:50:60:a4:23:5e:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:A2:AF:5E:6B:99:43:92:90:CF:CB:AE:6E:87:41:1B:D9:01:1F
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:3b:3b:2a:f0:63:37:03:bc:ed:b4:96:87:18:06:72:c2:
         f0:19:aa:dc:13:4f:27:34:9a:e6:37:e7:f2:07:9b:53:a8:12:
         37:d8:66:2f:aa:84:f1:3e:89:22:92:4a:bd:87:50:d8:47:6f:
         b9:7b:d3:53:3c:2d:16:ad:9a:ba:06:ad:4e:04:2c:5d:22:fd:
         45:83:ca:46:18:69:c8:5b:d9:98:6b:d2:7f:56:3f:ff:d2:5f:
         c9:a1:a5:b0:90:14:cd:ee:34:cf:82:b7:a0:15:e4:05:46:e6:
         4f:76:26:e7:76:6d:24:29:b7:d2:d7:f5:08:4b:2e:c8:14:6d:
         0b:14:c1:89:3b:7f:80:82:ef:d8:64:c8:8d:db:83:5c:2b:a4:
         ec:13:b1:64:0c:6b:e8:ab:bf:ae:28:4d:8f:fe:2b:86:05:22:
         3d:d1:6b:86:70:49:5e:30:8f:3d:0a:db:6f:90:e3:5b:6f:54:
         29:3e:b1:38:40:93:d1:a4:cb:ad:87:17:1a:ff:dc:eb:dd:4f:
         47:d1:c1:1a:94:92:d2:5f:c6:ba:bd:70:15:78:91:a0:4e:ee:
         87:65:04:ab:65:5b:b9:ff:27:27:f8:65:13:4f:b3:65:92:01:
         8a:b3:76:e6:d5:10:ad:cd:74:eb:02:5f:97:da:40:ac:08:31:
         7a:97:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:07 2026 by rpki-client