Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          wsoLUtTdAUIXP6USYYfPXjY520CPJC769rkNZwYKwIM=
Subject key identifier:   16:C5:EC:44:76:D4:0C:3B:77:4B:0E:8D:F2:8C:57:8A:33:44:9E:BA
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       019CC7F519A93B68672C6DA574596A1172A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          1220
Signing time:             Sat 07 Mar 2026 11:00:54 +0000
Manifest this update:     Sat 07 Mar 2026 11:00:54 +0000
Manifest next update:     Sun 08 Mar 2026 11:00:54 +0000
Files and hashes:         1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
                          2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
                          3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: nyVOpq54LFfNNM1t/N/VDc9YuG2Pxa0kyQNW4bgx21o=)
                          4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:f5:19:a9:3b:68:67:2c:6d:a5:74:59:6a:11:72:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Mar  7 11:00:54 2026 GMT
            Not After : Mar  8 11:00:54 2026 GMT
        Subject: CN=16c5ec4476d40c3b774b0e8df28c578a33449eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:fb:ab:58:ca:2e:2c:c9:4b:fa:a1:bb:f7:
                    38:b8:05:31:fd:dc:f7:47:0c:d8:0d:f7:63:c2:53:
                    54:9d:53:9a:92:38:88:e8:fd:f8:63:3b:7e:97:e3:
                    44:2e:e0:97:43:1e:09:b7:2f:af:e9:88:77:b5:2e:
                    3a:cf:14:0f:eb:18:18:1d:16:94:8f:7e:20:61:be:
                    c1:3f:61:7b:03:08:4e:c7:04:d5:90:83:8a:8b:76:
                    cf:e1:50:25:61:a1:9b:ce:86:f6:b9:66:73:38:64:
                    79:ba:b5:28:f8:18:bd:21:22:6d:d9:fe:82:70:21:
                    d8:2b:70:60:fe:16:18:0b:35:0f:26:f7:be:15:36:
                    ca:8d:09:a2:1c:6a:06:39:89:fb:aa:50:f4:a3:32:
                    38:90:b4:2b:ad:e4:33:06:91:13:e8:dc:97:84:82:
                    24:0d:e2:58:bc:0b:67:d6:8a:60:98:91:f7:0d:d0:
                    37:a3:a8:61:38:26:5f:96:d1:c7:53:9b:f8:f0:d6:
                    42:74:67:39:c4:dc:ab:9b:5e:50:54:d4:c9:65:80:
                    8e:a0:41:ea:98:a0:d4:ad:8f:08:04:39:17:d1:51:
                    c9:d4:5c:7b:e9:3b:82:e3:a2:bc:58:db:a4:bb:17:
                    69:62:10:4f:c7:e1:f8:66:a0:bb:96:b8:81:55:90:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:EC:44:76:D4:0C:3B:77:4B:0E:8D:F2:8C:57:8A:33:44:9E:BA
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:c5:52:e6:bf:6f:5a:9b:cc:cf:e4:ff:f1:e0:1f:a6:dc:
         6c:cb:d4:c3:90:76:12:d6:e0:62:e3:a3:f4:cf:80:2c:c4:e9:
         87:b6:67:b1:9a:0a:f9:1e:aa:85:29:a5:52:7e:15:87:54:ca:
         dd:61:4a:60:6c:5a:d8:d3:62:a3:29:6b:ed:3c:10:48:6a:4a:
         1a:08:9d:a1:35:0f:23:17:0e:8b:0b:24:1e:44:88:57:f5:cd:
         fe:e3:2f:aa:93:d6:66:35:9f:1f:04:01:79:80:72:3b:de:db:
         81:66:36:84:1c:00:a3:ea:ef:4f:da:9d:c5:02:68:04:be:d2:
         09:43:20:fc:e5:9f:49:d1:e0:1f:29:80:99:a4:d1:5d:af:c1:
         2f:2a:ae:79:e9:2a:89:e1:62:7e:6c:6e:1e:16:1d:fc:a2:eb:
         a3:c4:6b:d5:72:70:90:e1:2d:80:37:8a:b3:c8:e0:20:49:60:
         59:bd:99:c2:80:d2:be:6e:eb:ae:ea:39:23:bd:b5:dc:be:c4:
         76:70:d6:4e:de:d1:53:16:18:97:b3:66:c1:21:de:24:7a:3b:
         d8:91:be:5d:9f:a9:87:5c:45:cf:c4:b6:b6:4f:7d:de:65:16:
         db:6d:34:f5:eb:5e:ab:f1:2a:35:44:d4:85:4f:fb:02:0c:d1:
         dc:42:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:50:16 2026 by rpki-client