Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          GsmLsugllkV98vdqdVQE9JjPreI1pFxHnm4cIFuxZbc=
Subject key identifier:   88:C2:E1:FE:CF:31:A7:A3:23:1B:FB:CE:FF:FF:46:89:3C:70:DA:AF
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       019D3909F00AEC293AA04B6B946929663485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          1898
Signing time:             Sun 29 Mar 2026 10:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:45 +0000
Files and hashes:         1: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: DA0WYfX80QSvamg/8qmtm4NJbE4t2dD6aOE5+xVxVSM=)
                          2: UWmASN11Y1EhPU_qW1cmmLip81g.roa (hash: kuez9D7n3XS4aPJ21EYpdRS5Q3Qzu3GjOt1Zw0lXo4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:f0:0a:ec:29:3a:a0:4b:6b:94:69:29:66:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Mar 29 10:00:45 2026 GMT
            Not After : Mar 30 10:00:45 2026 GMT
        Subject: CN=88c2e1fecf31a7a3231bfbceffff46893c70daaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:78:12:bb:da:7c:18:99:fb:74:e0:62:4d:fb:
                    6b:78:0b:c3:f9:36:12:a7:b2:20:30:e8:22:b7:ab:
                    3f:30:04:1b:9d:de:77:d1:60:5c:0e:17:89:e9:6a:
                    96:d6:0a:c8:4e:07:fc:ef:f8:5b:0b:2b:50:e7:e4:
                    83:3d:72:c4:6d:6b:d2:c0:e8:5a:dc:16:23:24:dc:
                    a4:65:0e:d8:12:78:4e:77:50:fa:70:90:0c:17:ed:
                    17:1b:28:4f:39:64:a2:52:12:ff:7b:2c:7f:ea:94:
                    cb:10:7f:aa:ed:89:f4:7f:9c:95:69:b6:64:94:91:
                    5d:3e:35:11:ed:96:21:26:e7:b8:68:43:fa:24:ff:
                    47:ca:3b:e3:7e:e1:57:eb:d5:17:49:dc:1b:4a:06:
                    2e:ad:35:7c:a4:97:42:14:fb:9a:f6:78:a8:2e:01:
                    38:7c:fa:ee:fa:45:7c:d2:a9:ad:f1:1c:32:73:d3:
                    92:fc:e1:c7:9b:d4:d0:2f:3e:fd:61:e0:d0:23:a0:
                    be:85:64:0a:9a:77:32:bd:1f:69:9a:53:86:b8:a8:
                    2b:52:f2:7f:3f:c7:9c:d8:ff:05:f6:00:65:56:92:
                    bf:2b:ee:1a:1c:4f:86:7b:3f:df:b4:10:14:15:a7:
                    4d:aa:a0:62:8f:1f:e8:4a:83:54:a4:75:9a:2c:d0:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C2:E1:FE:CF:31:A7:A3:23:1B:FB:CE:FF:FF:46:89:3C:70:DA:AF
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f9:b5:f0:f2:68:d2:e6:2f:46:01:90:50:e1:94:84:0d:42:
         3e:d3:93:11:4a:dc:1c:90:87:4a:57:88:db:d8:08:2e:3e:5d:
         6f:8a:91:0f:29:d6:73:ee:c5:f0:e6:ac:f5:10:4b:a4:1b:fb:
         99:6c:77:f2:ec:4f:88:1b:73:69:c6:9a:9e:21:74:e1:6b:fc:
         fd:55:e8:bd:ec:91:41:bc:57:e8:11:bb:de:3e:ac:6d:d6:d2:
         07:18:8e:25:1f:fb:d2:d6:47:33:0f:c3:fe:b5:8f:37:d2:11:
         f8:7b:43:e4:ef:95:a0:f7:b1:98:b7:dc:d2:d8:02:6e:2a:74:
         ac:0f:fe:60:d3:e3:44:2d:8b:31:f0:3f:2e:15:ae:e6:1b:b9:
         4b:ba:e3:48:11:f4:f7:47:fa:92:45:ad:62:32:58:16:cb:94:
         4d:30:b7:78:02:8c:8a:6b:31:c6:66:91:89:d7:fb:33:9d:74:
         06:cd:08:c5:00:10:59:7e:4e:0f:d2:a5:cc:e9:b3:01:fe:70:
         74:5b:ff:2d:24:43:fd:a1:fe:90:3f:d7:eb:3f:e2:48:7d:35:
         1f:bd:67:ea:f4:d7:f3:d4:85:68:ae:79:63:03:73:81:bc:1b:
         17:b3:02:75:a3:3b:f9:03:37:99:9d:7a:bf:e0:03:dc:0d:59:
         28:17:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:54 2026 by rpki-client