Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File:                     nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier:          7APA3Gmxu1u/Oks4hO5P1ddaWB/qSCNekS//TUGYtSs=
Subject key identifier:   D9:EF:49:B3:4F:37:AE:73:3C:99:C8:78:66:74:DA:7C:92:3C:61:56
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer:       /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial:       019CE3D9AB619707AF52E8178DE7FBA20024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number:          055C
Signing time:             Thu 12 Mar 2026 21:00:18 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:18 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:18 +0000
Files and hashes:         1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
                          2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: r5MRSnnuvb7jNz/BFP6OQAeIG9J48wIp0fZSCq5r1Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:ab:61:97:07:af:52:e8:17:8d:e7:fb:a2:00:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
        Validity
            Not Before: Mar 12 21:00:18 2026 GMT
            Not After : Mar 13 21:00:18 2026 GMT
        Subject: CN=d9ef49b34f37ae733c99c8786674da7c923c6156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:09:13:ac:a8:9d:71:3c:46:b2:ed:a1:e8:
                    75:37:2c:f8:5b:38:01:52:36:bc:5f:9d:ea:99:b7:
                    92:ab:87:b3:26:4e:a0:ff:16:33:2b:f6:6e:72:53:
                    04:09:d4:37:8e:29:da:5a:5e:e5:97:8f:4e:b7:da:
                    6d:8d:8d:45:34:e7:f5:cb:0f:5a:8e:a8:fd:3f:f6:
                    07:27:cb:19:12:0f:0e:b6:aa:24:a7:e8:4f:66:7c:
                    65:85:98:42:fc:7a:38:12:3a:51:06:ec:a2:c7:08:
                    58:0b:a7:8f:b7:5b:16:03:2e:97:00:85:f1:85:90:
                    ec:b3:5c:13:fa:07:1f:95:fc:ed:55:77:36:3a:d4:
                    81:d7:43:2a:f6:5b:84:1d:e7:28:b5:e9:bc:17:12:
                    5c:10:80:d2:b6:24:21:ed:f3:8c:c9:11:9d:15:ac:
                    5a:52:47:31:a0:9f:dd:21:71:10:2e:6e:66:0e:cd:
                    d8:47:31:87:d1:68:76:ec:e9:d1:ad:be:fe:3c:72:
                    46:d1:6e:50:f1:a1:3d:8e:e1:dd:76:a7:51:db:1e:
                    23:c7:1c:11:3c:ef:ed:3b:52:b7:91:9a:31:8c:14:
                    d3:85:70:4d:f9:fe:0f:c9:ae:6f:49:59:8a:b2:50:
                    50:45:f6:56:26:f0:1f:50:1a:09:97:69:53:68:43:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:49:B3:4F:37:AE:73:3C:99:C8:78:66:74:DA:7C:92:3C:61:56
            X509v3 Authority Key Identifier:
                keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:be:ab:d2:d1:f2:fa:ba:a7:c3:bb:22:09:57:c5:27:e2:c4:
         38:d2:67:f4:91:7b:3f:07:78:40:de:20:6e:9e:c1:aa:34:07:
         57:e9:e9:7f:52:4b:d5:f1:5a:15:c7:a3:e1:96:be:07:48:13:
         83:27:36:ed:28:12:14:7f:f8:3b:ff:bf:fa:d8:4f:37:90:62:
         83:7c:75:be:9c:03:56:91:7c:59:a4:24:d6:af:5b:e8:f3:16:
         a1:64:f8:b3:4c:10:ac:aa:82:93:85:5b:2a:78:35:c0:19:d3:
         33:bd:45:6a:62:be:5a:4e:44:b5:7c:76:04:9e:23:39:c2:ec:
         6d:68:d4:ff:4d:4a:93:a2:5f:8f:e1:68:b2:b8:4f:5a:4a:82:
         9d:8a:a3:68:53:55:05:10:03:c5:cd:0c:04:c4:9a:c8:0a:1b:
         66:8d:59:4e:57:1f:99:29:5b:dc:09:74:97:c0:ef:67:69:d7:
         db:d5:95:cb:2e:93:b9:91:be:c7:f7:41:33:97:a3:f3:fc:9b:
         cd:66:69:1c:04:df:cc:db:e7:2b:3b:eb:0d:40:bb:df:07:e9:
         1d:83:d0:c3:37:9c:69:cb:97:e4:c7:fb:f8:23:f0:a2:3c:4a:
         ae:35:c4:59:36:4d:b0:25:34:44:c7:41:75:a5:c8:1f:bb:c4:
         f7:5c:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:47:09 2026 by rpki-client