Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File:                     NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier:          MTrAi6twkmtRA6LD7xBkveLf+XVi7LL+EfxRWrk5Vdc=
Subject key identifier:   44:CF:AC:E6:25:17:3F:65:44:D0:79:40:50:E5:E3:97:8F:F6:03:54
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer:       /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial:       019CE5232A30C37D007C2153CE13E8239DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number:          122B
Signing time:             Fri 13 Mar 2026 03:00:12 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:12 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:12 +0000
Files and hashes:         1: 7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa (hash: tsA7T7uUKe961SLeTegki9U2n20iYLa4g8HfcIi+a4Q=)
                          2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: y9UAFd97VmUVw0oA2jizCblP4uIIyQyovkiynN3DV90=)
                          3: O4vFFK6LturH-tOvCL7dvJAVqgc.roa (hash: MtKHjo0OncbkpjKylbUKlu6dZVBHbPPJcw5CArd2U3U=)
                          4: nIqaEfepRP75O-FDqMsxRqrNlcw.roa (hash: c5Y7MFJKKPQL2NHxR/9fHChMoo5Om7veAWCfhGUpBLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:2a:30:c3:7d:00:7c:21:53:ce:13:e8:23:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
        Validity
            Not Before: Mar 13 03:00:12 2026 GMT
            Not After : Mar 14 03:00:12 2026 GMT
        Subject: CN=44cface625173f6544d0794050e5e3978ff60354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:d7:da:42:db:85:d8:12:de:8c:97:98:30:
                    08:ae:57:0e:da:c2:c8:7b:39:72:5a:84:d3:0c:0b:
                    a6:99:3f:34:48:05:f0:69:85:ee:5a:fa:6c:8f:df:
                    11:79:d7:c7:94:a9:ff:bf:fc:43:7c:79:fd:1e:38:
                    45:83:b6:8b:d3:cd:c8:f5:b4:52:0e:67:bd:3d:bf:
                    10:0d:da:bf:4d:df:ea:7e:95:a8:64:70:ae:bb:03:
                    f9:b1:8c:0c:f2:62:9c:ca:7a:a3:fc:ad:3d:37:7c:
                    0d:bb:87:06:6d:fd:5f:71:27:bf:b9:22:11:87:85:
                    80:73:11:d5:1a:20:2d:23:d3:97:66:2b:ba:c1:31:
                    24:8d:f3:6c:c9:e1:23:69:f3:4f:bd:c6:84:f1:f8:
                    ba:2d:d4:aa:16:8d:86:34:1a:93:59:23:ad:cc:a7:
                    b8:22:99:fc:2e:8b:e6:17:90:d7:49:ce:30:9d:ba:
                    fb:6f:d4:e7:bc:aa:e5:e1:c6:0b:5a:fe:29:64:03:
                    1d:89:20:ff:7a:09:bc:b7:9e:e4:aa:eb:99:cd:10:
                    f0:06:0e:b1:1c:fc:76:f9:53:9a:31:55:fb:5d:94:
                    ae:d1:fa:f1:ae:3b:bb:87:be:ed:2c:46:e5:13:f0:
                    25:4c:38:a7:20:ff:e9:c3:cd:8f:07:2b:5f:9d:57:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:AC:E6:25:17:3F:65:44:D0:79:40:50:E5:E3:97:8F:F6:03:54
            X509v3 Authority Key Identifier:
                keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:11:17:97:93:f8:59:de:70:24:10:83:6b:59:ab:73:d6:
         b2:4b:1c:99:40:97:c1:a6:3a:53:7d:a9:3a:ea:cf:89:ec:d5:
         8b:93:66:4e:2c:ae:28:08:84:87:83:eb:c4:fc:47:a4:88:ea:
         ae:f0:44:ce:c1:cf:cf:e2:aa:39:a6:b7:8d:8e:e3:bb:76:9d:
         b8:85:c1:21:f4:4c:94:bc:b3:8d:c8:2c:ee:5c:69:0f:f4:fa:
         d5:ad:1c:8e:df:e7:6a:78:00:00:1a:ca:bb:d5:23:bf:78:79:
         1c:2e:8b:23:cf:06:52:31:e1:fc:26:2a:df:6e:48:fb:26:eb:
         9c:6d:b7:db:b1:3a:2d:b8:37:31:15:2f:6a:41:94:ea:4a:39:
         98:86:0b:72:30:4d:d2:fe:a6:eb:78:f0:30:a9:ce:61:4b:e6:
         ec:64:f9:d5:ce:cd:d1:b6:7a:c9:24:42:2f:0c:26:51:f6:45:
         f7:c8:35:90:9d:db:4d:b3:6d:bf:bc:8d:f4:e1:e3:bb:b4:6f:
         65:c5:f5:58:c0:16:f8:45:e6:18:1f:d6:3a:50:fe:25:96:ac:
         f1:02:c9:af:04:75:ef:1c:1a:4c:17:2d:f1:53:96:46:b2:7b:
         7a:cc:74:1f:e8:05:56:14:84:1d:db:03:c7:fc:6c:b2:f3:37:
         54:21:d1:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlIyoww30AfCFTzhPoI533MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3
YzQzYmEwHhcNMjYwMzEzMDMwMDEyWhcNMjYwMzE0MDMwMDEyWjAzMTEwLwYDVQQD
Eyg0NGNmYWNlNjI1MTczZjY1NDRkMDc5NDA1MGU1ZTM5NzhmZjYwMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjXX2kLbhdgS3oyXmDAIrlcO2sLI
ezlyWoTTDAummT80SAXwaYXuWvpsj98RedfHlKn/v/xDfHn9HjhFg7aL083I9bRS
Dme9Pb8QDdq/Td/qfpWoZHCuuwP5sYwM8mKcynqj/K09N3wNu4cGbf1fcSe/uSIR
h4WAcxHVGiAtI9OXZiu6wTEkjfNsyeEjafNPvcaE8fi6LdSqFo2GNBqTWSOtzKe4
Ipn8LovmF5DXSc4wnbr7b9TnvKrl4cYLWv4pZAMdiSD/egm8t57kquuZzRDwBg6x
HPx2+VOaMVX7XZSu0frxrju7h77tLEblE/AlTDinIP/pw82PBytfnVcF0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETPrOYlFz9lRNB5QFDl45eP9gNUMB8GA1UdIwQY
MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt
MmZjZjM5NjI1M2I4LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4
LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKcRF5eT
+FnecCQQg2tZq3PWskscmUCXwaY6U32pOurPiezVi5NmTiyuKAiEh4PrxPxHpIjq
rvBEzsHPz+KqOaa3jY7ju3aduIXBIfRMlLyzjcgs7lxpD/T61a0cjt/nangAABrK
u9Ujv3h5HC6LI88GUjHh/CYq325I+ybrnG2327E6Lbg3MRUvakGU6ko5mIYLcjBN
0v6m63jwMKnOYUvm7GT51c7N0bZ6ySRCLwwmUfZF98g1kJ3bTbNtv7yN9OHju7Rv
ZcX1WMAW+EXmGB/WOlD+JZas8QLJrwR17xwaTBct8VOWRrJ7esx0H+gFVhSEHdsD
x/xssvM3VCHRBg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:40 2026 by rpki-client