Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
File:                     N1GNGAkjp_PABlPsErxwK5WquQc.mft (raw, json)
Hash identifier:          znln038MFAHSOmVwKKQd4nZs2Oiex2MhI8dDGXfUMdA=
Subject key identifier:   15:BE:D8:CE:CA:BE:07:84:54:6B:B2:7E:C2:89:79:09:75:19:8F:DB
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       019D3262E49A22ABE3D21FAB9AD090565BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
Manifest number:          18A1
Signing time:             Sat 28 Mar 2026 03:00:34 +0000
Manifest this update:     Sat 28 Mar 2026 03:00:34 +0000
Manifest next update:     Sun 29 Mar 2026 03:00:34 +0000
Files and hashes:         1: 0VaD6F-8zTBNHRy2KgpN_ZbKhWk.roa (hash: 2m4aESs63czxZo2vYBxVfxjVRvdupB8O8l9lQzPEA2w=)
                          2: 3CA_xjbJ1P6YXHfVVsGWVFB4gCs.roa (hash: zK8LXwDOyf59NDDJq+8xmskZSra40GHGNPkRZli67vg=)
                          3: 75TrWgQIlP4CMecW1OW7UU9IZMo.roa (hash: caNbijAZLi+KtVhBcZ3qPnTJXoTzawiulVXu3JLB6A4=)
                          4: 85N61DY6T0inNnrqVUCM6sTdgKU.roa (hash: E7jLGUVgfvH6Bf9X/Tr/dhAmN2pO8jtzEzXDclGZ/hs=)
                          5: CNdTcBzMZ55u24gOy0glWWhQMdE.roa (hash: fQE0tHwQADszHQqZQ+JcSAxWLmF+OAK+cl5iGPTYTxg=)
                          6: HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa (hash: MVzp8ZvGYuZNln5avY/Y22gCx9uhBZy1j2SBpcL+mbQ=)
                          7: K5YDcjKsp2dVL85kNUc99-8H_LY.roa (hash: 37fbBMQozX0Gt+Mp8SZBctlx7YgLy/vQjPxsGo+QI+s=)
                          8: L5ffTq-Y_Dj_BVtQB0jbN6KDgdA.roa (hash: oGlqQpGh9aDvO0SynzIgcKUn5dQ1LFONoLWbjoUFleQ=)
                          9: L_TEhfaPFx7PtkuyDCeQbYMpWxs.roa (hash: 3qkqR71VJ7EC6Lme1R2L9TAp9y2BC9EuTTKGRZgwwzc=)
                          10: N1GNGAkjp_PABlPsErxwK5WquQc.crl (hash: O1tUVnB+YyzrlLtJf8GlG/URhsTEdnhkuSECWYAkP10=)
                          11: WLeIUds8vGLhz-4s-M2BUqMdUmA.roa (hash: hglr/CP7f/n2MjswXZoxd8g6eFdOlqFrzVobwOixbnE=)
                          12: YP7bPwhKGVXsKKqQqu7mNp-ACXE.roa (hash: 2GiCR9DrlMnPAIy8JqmZChy4i3F7srvzAZEvAEhTiWk=)
                          13: ZsyhHZQApYC324IX6deHBquFOzM.roa (hash: qfjSzNtNlBUdGcFpcHgtoCXLli6zy7XMntKKNqRhvaE=)
                          14: _jxRz5ghYR51tj3YSDdV5TBQiG8.roa (hash: K4LNK7CDIvQy9c2kyItt4EUemEz66wPe77r3oLdb6Qw=)
                          15: b6Erm_E0JfoTsx36MNYwRzVz07g.roa (hash: NfV3UCMt2Glm5Jb7jtkUpB797/TB6fH7J8w06K6ZAwc=)
                          16: bpIa_6QT4jOvr8TOIwvNvhew4dg.roa (hash: okk5Z1OnKJ0iOg84L9exCXciriDbnMhF7qnppEc2wAo=)
                          17: cGO9zmtQR_aEnKKixi_ZZ27XMNw.roa (hash: fnltLcL3o2MOvIVD/pEogcufWVK0PUMmaW5TTkBQQB4=)
                          18: cGw142_-GllO3MDD7QsEH_yskO0.roa (hash: Jv+m0/8ldgJ6xCnUTzb6i9bHjcbA9I/OI6d3NEkAr20=)
                          19: egLaVoMxZdFX5v4UfbEqT7bGdhY.roa (hash: qjp68O26qQszJgWkRCQw2i4Ca5i0MtzroG8izPNHpng=)
                          20: ehMi1MpsSos50ixSq-SkgktFubA.roa (hash: v7e/pMK4iqvprYrX1lZ4kmFd9T3x8khwvouPRxKbv04=)
                          21: fX_omxDUI3xGZOv2xdP1AbphA0g.roa (hash: Z9dBfI9Iw28D8Sqmdj3pQsbSgNBX6YnHt/oYPvO8FtA=)
                          22: fiuDAzI4SIRR_2g3FzHMddSJC80.roa (hash: 95Ucai10ikxenExMaTkLAinB4oSN/m/1cjRDEudlYp0=)
                          23: k4QCd5iCeexS9s3XqEzybIiHXIk.roa (hash: OJ7jYAORVNCUq35Pop73cpRqTyITR/U1sh48mQsiFMM=)
                          24: oFw3SjXONxoRvFCb2uNV1sjLFI0.roa (hash: 7GoC5001gn3Up9F24iVhhvmDvHAYiicBVJ35jiod/jg=)
                          25: qYT1lK9TKcXREDGysvCStyVZoVM.roa (hash: HV21dCEh4WPHo/n/QApiPaUdx//e/gqwbQPEK+93u+0=)
                          26: qqX7tn_1-G6wyhuI7D-pY_z8cJM.roa (hash: waXhpbDhDQFEFQ+gAIGqGi8goRYcv+WaYeskXKbjrdM=)
                          27: sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa (hash: aA8zSHT5VSnqP+d0FtT5slL3SDhnzQhEgfOiya9p+Rw=)
                          28: x9pDA55suOaHe2WUqjOleSj0g7g.roa (hash: bgqabssPBjJKwPTFU4cVx8DILsuXbxQh3ehqIdNlubE=)
                          29: yB4JrGbbLBahpCVqUjQ5JMPEoy0.roa (hash: MYbJ3F7lniFZJDJqwCVH0LjInv8BOiDXulKMz+nU15A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:62:e4:9a:22:ab:e3:d2:1f:ab:9a:d0:90:56:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Mar 28 03:00:34 2026 GMT
            Not After : Mar 29 03:00:34 2026 GMT
        Subject: CN=15bed8cecabe0784546bb27ec289790975198fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:21:4d:2a:9d:b9:d1:a3:ee:ce:75:27:a1:
                    da:27:2c:a7:6c:5b:8a:6a:41:ea:e1:6e:8a:46:08:
                    ed:53:2b:ca:3e:c2:f3:67:a3:bb:d7:7b:db:eb:56:
                    e6:4c:ef:45:b6:9c:df:16:9a:53:f4:0a:92:64:be:
                    89:2e:c2:72:51:5b:39:ba:2f:65:29:e0:fb:9b:e1:
                    82:74:43:a4:e8:02:b1:e4:a5:95:95:c1:a8:39:20:
                    42:6f:9d:cb:c3:e6:07:24:63:b7:55:8b:73:c0:77:
                    a2:3a:49:1f:2e:47:19:d8:93:43:dd:a7:09:50:19:
                    36:5a:53:f2:a2:f1:7e:80:a7:ce:c2:e1:03:9e:eb:
                    69:5f:31:18:4c:d5:f9:e3:fa:3c:68:92:4e:97:4e:
                    2a:ed:2a:4a:e4:a7:df:92:b9:54:e2:50:70:33:9f:
                    36:03:16:90:4c:06:69:f7:d3:4f:b5:7b:b8:25:5f:
                    e4:2d:bb:ce:3b:a5:af:86:34:cd:92:0f:5a:80:35:
                    88:b5:d9:de:1b:fb:02:81:e4:df:1a:00:64:41:4e:
                    ec:db:f9:87:5b:ee:5a:17:9e:01:3b:41:d2:16:64:
                    64:f9:f0:59:cc:e9:5f:e1:57:30:f6:1d:59:8a:7e:
                    e2:72:87:27:85:6e:85:e9:72:6e:c0:f0:31:65:a3:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:D8:CE:CA:BE:07:84:54:6B:B2:7E:C2:89:79:09:75:19:8F:DB
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:91:d0:da:72:15:71:94:37:79:62:67:a4:9b:bd:0d:b4:
         48:2b:61:31:57:56:d5:6c:e1:3f:3d:bc:56:f1:45:5e:0b:5f:
         d6:87:3f:dc:67:46:af:d0:79:cd:78:6b:a5:6a:5e:81:db:3a:
         6a:9e:bc:36:56:e7:62:d2:bb:b1:c2:eb:7e:39:84:65:0f:9c:
         90:a2:c0:93:7f:53:2d:66:e2:cc:e6:4e:55:04:4a:49:a7:93:
         6f:e6:af:69:23:ae:e6:8e:61:46:4a:7c:b8:1b:dd:12:2c:40:
         8e:fc:19:91:5a:6d:11:09:44:ed:bc:a3:bd:43:2e:76:19:ec:
         44:cd:a5:d8:ea:79:6c:2c:13:b9:f4:46:a5:b4:93:c0:49:e8:
         23:2c:58:e7:c4:5a:c2:2c:71:f7:ff:0d:da:5a:4a:e0:22:e7:
         71:40:ed:13:e4:de:ab:82:a6:32:f7:05:9a:b1:f8:a2:62:d4:
         c2:b9:36:2d:8d:b2:a4:b6:18:4e:ab:1f:14:3a:bb:5c:ef:7f:
         97:4a:7f:93:17:99:7a:a0:1d:85:4a:cc:da:50:90:0e:f1:d3:
         69:0e:87:a2:40:86:c0:16:39:04:de:fe:0c:cb:5d:ad:9f:88:
         82:95:6f:04:0d:09:7f:d5:de:99:f3:0c:35:f0:cd:d5:77:ef:
         d8:6c:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:44:52 2026 by rpki-client