Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
File:                     N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json)
Hash identifier:          SZwvm/dzANkzZ/9rR4bjSfk0q9OHWOCJfoaAItxud2c=
Subject key identifier:   C9:6B:34:AF:9A:60:E9:53:C5:46:5A:D2:79:30:11:6E:19:97:67:52
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Certificate issuer:       /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial:       019D39AF786C148F918567E1AEB1C8B86E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 13:01:34 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:34 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:34 +0000
Files and hashes:         1: 9mOuuvijZnA_STwkYngVMPsH8JY.roa (hash: fX3y4W7rd9iSm1Vwp+9QVvzxdTPDv1ImVwXNUL4pyB8=)
                          2: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: qjocW43e+648y3GXFTMjxIhekb27JAsU5zfzaRNEQ3A=)
                          3: ajIXahG1h02mHzUr71Bdt_pBNcY.roa (hash: kb65zR8ztUqoEmCVoclsV9qtFS56zcMpxTgwfbOjC74=)
                          4: nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa (hash: sY2bCxjxo0ci2bvDv4Rjq6+XrMtq9QVH+g5SCrc5djQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:78:6c:14:8f:91:85:67:e1:ae:b1:c8:b8:6e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
        Validity
            Not Before: Mar 29 13:01:34 2026 GMT
            Not After : Mar 30 13:01:34 2026 GMT
        Subject: CN=c96b34af9a60e953c5465ad27930116e19976752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:85:e2:aa:43:28:93:66:27:ed:33:f4:c0:
                    b1:d8:a4:a4:d5:ac:67:9d:fe:c9:03:76:e6:a7:fc:
                    a2:d4:0f:19:86:e9:53:3c:11:46:b8:1d:9c:b3:04:
                    52:fa:d4:19:10:1e:3b:8c:c6:d9:cd:74:d6:5e:1c:
                    70:56:82:dd:bd:7d:ed:ee:ba:03:d3:98:db:e4:dd:
                    d3:a8:d1:a7:55:ab:1f:a0:df:e3:2c:39:52:c8:49:
                    3e:a7:c1:ef:57:59:b0:25:4e:2b:36:5e:8e:1e:50:
                    f8:18:61:63:e4:67:9a:3f:61:bb:c6:2a:c4:b2:e3:
                    e9:76:95:07:9a:a6:11:47:dd:7c:f4:69:6a:21:01:
                    af:40:17:f8:ce:b6:e0:a2:ee:42:12:24:0a:64:d5:
                    ea:96:67:6b:2e:af:cb:44:7b:d5:89:91:f3:9c:b7:
                    7f:0d:5a:d7:1d:c7:68:d3:24:fc:d0:1b:b8:e9:88:
                    84:72:90:a4:70:d7:cd:22:ae:22:f1:05:3b:e1:52:
                    26:60:aa:07:77:06:d7:da:fd:f2:72:14:f7:32:a7:
                    45:fc:37:fa:db:50:d1:e3:51:f3:d9:0b:e0:ad:83:
                    9f:37:e4:18:25:ee:8f:9f:c6:cf:36:55:1b:4f:89:
                    1d:6e:5f:8a:5b:81:64:76:1f:03:14:93:4d:a8:0f:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:34:AF:9A:60:E9:53:C5:46:5A:D2:79:30:11:6E:19:97:67:52
            X509v3 Authority Key Identifier:
                keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:56:3f:3d:ef:0d:9d:26:b0:be:69:88:0f:57:04:f5:bd:
         e5:9c:7f:d3:eb:66:71:89:18:f2:4a:a5:ff:71:08:11:f4:3d:
         ac:b4:23:ed:c7:d2:1a:c7:a1:3a:d0:ba:41:7c:47:46:57:64:
         3d:de:51:65:cc:ce:07:3f:ca:b7:0f:a0:aa:e2:74:81:55:3c:
         79:f4:50:a8:ba:cc:8f:16:50:46:ba:fb:f2:2b:04:6a:d0:aa:
         ea:c8:6b:42:03:7c:8b:f3:eb:cd:b5:5e:40:d8:69:a5:92:66:
         7c:d4:83:ca:3c:44:85:f7:96:78:bd:3f:0c:ff:a8:52:85:e5:
         e9:56:a8:63:c3:79:4b:0c:4e:2f:34:af:98:80:07:1d:8d:10:
         4c:a9:da:d1:28:99:fa:55:7c:92:81:b0:25:c5:fe:f9:13:cb:
         d9:ea:85:17:3a:49:a4:72:5e:c1:d9:96:06:d5:27:09:8a:3d:
         a6:ca:c3:86:09:9b:72:2c:35:4c:43:e7:26:e6:0b:66:ab:0c:
         ee:1e:c7:25:08:14:68:cf:9f:69:6f:bb:1b:69:05:db:d1:37:
         a6:14:49:12:90:bb:8f:e9:04:3e:bc:ff:bd:f1:59:e5:f3:67:
         46:8d:3c:49:b5:7c:af:ac:3a:bf:dd:91:66:15:fe:e7:09:2c:
         c2:a0:d4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r3hsFI+RhWfhrrHIuG6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy
NmJhMGYwHhcNMjYwMzI5MTMwMTM0WhcNMjYwMzMwMTMwMTM0WjAzMTEwLwYDVQQD
EyhjOTZiMzRhZjlhNjBlOTUzYzU0NjVhZDI3OTMwMTE2ZTE5OTc2NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbeF4qpDKJNmJ+0z9MCx2KSk1axn
nf7JA3bmp/yi1A8ZhulTPBFGuB2cswRS+tQZEB47jMbZzXTWXhxwVoLdvX3t7roD
05jb5N3TqNGnVasfoN/jLDlSyEk+p8HvV1mwJU4rNl6OHlD4GGFj5GeaP2G7xirE
suPpdpUHmqYRR9189GlqIQGvQBf4zrbgou5CEiQKZNXqlmdrLq/LRHvViZHznLd/
DVrXHcdo0yT80Bu46YiEcpCkcNfNIq4i8QU74VImYKoHdwbX2v3ychT3MqdF/Df6
21DR41Hz2QvgrYOfN+QYJe6Pn8bPNlUbT4kdbl+KW4Fkdh8DFJNNqA8mMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlrNK+aYOlTxUZa0nkwEW4Zl2dSMB8GA1UdIwQY
MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCNWPz3v
DZ0msL5piA9XBPW95Zx/0+tmcYkY8kql/3EIEfQ9rLQj7cfSGsehOtC6QXxHRldk
Pd5RZczOBz/Ktw+gquJ0gVU8efRQqLrMjxZQRrr78isEatCq6shrQgN8i/PrzbVe
QNhppZJmfNSDyjxEhfeWeL0/DP+oUoXl6VaoY8N5SwxOLzSvmIAHHY0QTKna0SiZ
+lV8koGwJcX++RPL2eqFFzpJpHJewdmWBtUnCYo9psrDhgmbciw1TEPnJuYLZqsM
7h7HJQgUaM+faW+7G2kF29E3phRJEpC7j+kEPrz/vfFZ5fNnRo08SbV8r6w6v92R
ZhX+5wkswqDUpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:56 2026 by rpki-client