Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          9nCO0IDHlwldVuwO/Yqc20s69pS8zGWVypliUpkANn0=
Subject key identifier:   0A:C6:0B:18:E4:27:DA:56:33:F0:2F:1B:6B:61:74:58:28:D0:52:A8
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       019CE47F08DA00B4C887517076142BDC2AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          056D
Signing time:             Fri 13 Mar 2026 00:00:56 +0000
Manifest this update:     Fri 13 Mar 2026 00:00:56 +0000
Manifest next update:     Sat 14 Mar 2026 00:00:56 +0000
Files and hashes:         1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: Tg4lMctOtqeBd08ACmfJibrbcmmzL1IyyTEBai2GSNk=)
                          2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:08:da:00:b4:c8:87:51:70:76:14:2b:dc:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Mar 13 00:00:56 2026 GMT
            Not After : Mar 14 00:00:56 2026 GMT
        Subject: CN=0ac60b18e427da5633f02f1b6b61745828d052a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:6d:d2:93:06:43:a4:0a:58:a4:86:88:02:
                    4b:18:87:8f:07:4f:02:92:90:58:5e:1c:6c:eb:73:
                    fb:23:fb:c3:b0:4d:e7:e0:28:e7:96:1e:8e:ec:a4:
                    0a:32:04:e6:26:76:f5:73:94:36:85:ef:bb:e6:1f:
                    8d:70:92:71:00:b5:32:8d:c6:d5:6e:2e:89:d1:69:
                    f6:c3:db:14:23:14:1f:f4:26:57:3a:30:b1:d3:a6:
                    d0:9d:99:a5:df:92:7b:be:9d:4d:c5:96:02:10:60:
                    50:bb:f4:dd:f6:85:7a:3b:0d:43:b6:ee:ca:02:dd:
                    05:eb:68:7b:bd:1f:0b:c5:de:39:7f:42:a6:33:8d:
                    1a:27:cd:6f:cf:15:fc:76:c3:7a:b2:d7:21:5c:77:
                    4c:af:b3:2f:7b:93:21:f9:72:93:64:ea:9e:89:24:
                    3a:3e:b1:70:c0:41:88:58:97:eb:01:6a:aa:84:0a:
                    dc:d6:45:eb:57:8a:4e:e3:c6:ce:55:62:d5:3c:70:
                    bc:72:a4:ea:34:32:7b:33:55:60:49:5d:06:ee:b4:
                    5b:b8:87:b6:68:c7:ce:60:06:31:0e:76:d8:12:f0:
                    3d:fd:d9:5f:22:6d:36:96:27:c9:22:2c:58:22:10:
                    7b:d9:43:59:6d:33:f5:eb:67:55:04:2c:7c:4d:ba:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:0B:18:E4:27:DA:56:33:F0:2F:1B:6B:61:74:58:28:D0:52:A8
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:ff:51:55:dd:fc:53:06:35:7b:00:b3:e8:4b:e5:a9:ee:
         28:aa:34:04:ec:54:9d:5f:c2:f7:7e:e3:6f:4d:83:3a:b0:6f:
         c1:15:5d:9b:74:14:4b:c3:8b:1b:85:db:f5:40:6b:0e:29:c1:
         70:ea:66:a7:93:d0:b7:bd:e7:58:f1:89:60:be:04:ba:bc:c7:
         bd:54:a4:41:a2:28:2f:19:b7:b4:2b:20:ba:26:eb:64:86:06:
         a1:47:f3:b6:1f:03:70:4d:0d:ab:40:16:fc:43:6e:9b:54:7d:
         8f:f0:80:78:73:aa:1f:07:af:e4:77:3c:7a:49:11:ff:d8:7b:
         c7:f7:7f:22:7d:29:56:4a:d5:b2:aa:8f:93:a4:05:71:d5:c5:
         31:c1:fe:2b:51:46:a5:18:0d:7b:43:5d:b1:9b:96:01:93:b0:
         68:d7:6c:9b:87:a7:71:c3:16:02:98:61:63:85:4e:b5:c3:5a:
         88:a2:15:d6:86:91:ff:e4:5d:17:4a:f1:f3:2a:52:a8:b5:0f:
         a5:70:7e:e9:d0:1f:fa:ea:e7:9d:cd:68:cc:cb:d7:fd:10:68:
         f0:34:59:21:a9:f6:2e:57:c1:30:38:35:b6:28:fd:69:46:8d:
         63:f5:1e:04:dc:c3:1d:e6:0d:19:8f:e8:46:b7:e1:46:76:08:
         bb:d5:ac:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfwjaALTIh1FwdhQr3CrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh
MjVlZDEwHhcNMjYwMzEzMDAwMDU2WhcNMjYwMzE0MDAwMDU2WjAzMTEwLwYDVQQD
EygwYWM2MGIxOGU0MjdkYTU2MzNmMDJmMWI2YjYxNzQ1ODI4ZDA1MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYlt0pMGQ6QKWKSGiAJLGIePB08C
kpBYXhxs63P7I/vDsE3n4Cjnlh6O7KQKMgTmJnb1c5Q2he+75h+NcJJxALUyjcbV
bi6J0Wn2w9sUIxQf9CZXOjCx06bQnZml35J7vp1NxZYCEGBQu/Td9oV6Ow1Dtu7K
At0F62h7vR8Lxd45f0KmM40aJ81vzxX8dsN6stchXHdMr7Mve5Mh+XKTZOqeiSQ6
PrFwwEGIWJfrAWqqhArc1kXrV4pO48bOVWLVPHC8cqTqNDJ7M1VgSV0G7rRbuIe2
aMfOYAYxDnbYEvA9/dlfIm02lifJIixYIhB72UNZbTP162dVBCx8Tbo2hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArGCxjkJ9pWM/AvG2thdFgo0FKoMB8GA1UdIwQY
MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt
YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy
LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvf/UVXd
/FMGNXsAs+hL5anuKKo0BOxUnV/C937jb02DOrBvwRVdm3QUS8OLG4Xb9UBrDinB
cOpmp5PQt73nWPGJYL4EurzHvVSkQaIoLxm3tCsguibrZIYGoUfzth8DcE0Nq0AW
/ENum1R9j/CAeHOqHwev5Hc8ekkR/9h7x/d/In0pVkrVsqqPk6QFcdXFMcH+K1FG
pRgNe0NdsZuWAZOwaNdsm4enccMWAphhY4VOtcNaiKIV1oaR/+RdF0rx8ypSqLUP
pXB+6dAf+urnnc1ozMvX/RBo8DRZIan2LlfBMDg1tij9aUaNY/UeBNzDHeYNGY/o
RrfhRnYIu9WsaQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:16:29 2026 by rpki-client