Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          ksnvkLQudagxgJQdKTYtyP7XGkUEerp84+jmgY4995Q=
Subject key identifier:   EE:B8:8D:A6:E3:95:9B:E6:B5:CC:E5:3F:F4:2D:C3:07:99:8A:B0:05
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       019D39AE527CC799A8A34EF302997BDC696B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0AD3
Signing time:             Sun 29 Mar 2026 13:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:18 +0000
Files and hashes:         1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: jhSIUsBwvjwlNreemm57oVOcv9GqturidWuQXGB7U68=)
                          3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:52:7c:c7:99:a8:a3:4e:f3:02:99:7b:dc:69:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Mar 29 13:00:18 2026 GMT
            Not After : Mar 30 13:00:18 2026 GMT
        Subject: CN=eeb88da6e3959be6b5cce53ff42dc307998ab005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:64:95:02:95:af:4e:6d:6d:b3:f0:88:33:
                    9d:5f:2c:ed:96:60:8d:7b:7f:69:c2:a7:39:70:f3:
                    e2:cf:a6:30:9d:06:47:be:ed:ed:d5:6f:99:58:39:
                    70:cd:27:95:51:5c:f0:bb:be:c8:78:ca:6f:d9:1e:
                    e4:bb:29:ae:58:0c:89:61:96:91:de:1c:a9:91:19:
                    18:7c:05:77:73:8e:45:9a:3c:60:44:22:bb:07:0f:
                    03:29:6a:5a:2b:5c:44:d5:60:8e:ef:74:23:a3:ce:
                    0b:8c:13:97:3e:84:0b:ca:f0:f6:e1:85:20:d4:bb:
                    9d:70:4b:51:1c:81:b0:e8:08:10:5f:78:7b:c4:c5:
                    ec:1f:6e:9a:fc:c4:09:38:5a:af:9b:b5:e4:0a:5f:
                    3a:02:80:70:67:03:6a:1b:c0:d2:cc:b9:bb:1b:96:
                    eb:5a:19:15:74:e9:65:ac:69:f3:6d:0d:d6:e3:22:
                    e1:66:60:85:b5:19:df:5b:a5:36:31:b7:90:68:70:
                    21:19:28:fa:46:0c:9c:46:9b:c1:70:0f:56:0c:c6:
                    aa:a5:94:7a:bc:94:fa:23:f3:d8:47:41:af:c1:0c:
                    10:d3:75:8a:b6:d9:f6:a4:46:42:8a:23:a0:15:eb:
                    62:e6:66:ce:c0:d4:ca:6e:2d:6e:e6:2f:e2:b4:80:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:8D:A6:E3:95:9B:E6:B5:CC:E5:3F:F4:2D:C3:07:99:8A:B0:05
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:84:46:ee:c6:89:da:fb:cf:3f:94:f2:8a:9c:2e:a4:9e:06:
         3f:4f:03:fb:95:8c:bd:16:84:30:57:09:51:2a:44:3c:9f:c1:
         f8:c8:18:5f:80:68:67:dd:12:3f:c8:92:7a:3e:ba:20:00:b5:
         9f:af:17:79:3b:5d:1f:fe:46:d0:35:ab:d7:b6:06:cf:a0:12:
         a6:24:67:75:d3:ae:f3:f3:fd:21:92:d3:1c:07:0b:4c:f0:82:
         bb:0f:c9:53:4a:d4:bd:cd:df:3e:01:7f:5c:c5:54:1f:67:a5:
         35:12:4a:10:0c:9a:4f:49:25:9c:dc:d5:53:70:05:fc:f2:3d:
         68:b4:fa:8c:ce:67:4f:a7:d9:d6:69:7f:c1:cb:c6:8a:69:f4:
         d7:2b:ca:16:7b:ee:16:fc:c6:f2:f9:01:d0:46:8e:bc:1a:8e:
         bf:9e:c3:62:a5:ab:3a:21:6b:26:c5:3d:75:84:cd:c0:c1:d4:
         0c:db:a3:64:d7:47:4b:96:88:54:e4:c7:1e:e4:fa:3f:c6:d4:
         a6:6d:72:47:36:34:3c:5e:cc:86:2e:ef:4e:80:7b:b1:bf:d5:
         a9:ad:34:ea:07:c0:3d:82:a7:1e:b4:e2:78:3f:c7:7c:b4:eb:
         f9:5c:ba:f0:bd:49:d3:8b:ea:6f:a6:b6:af:68:47:6a:cb:d2:
         80:86:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:22 2026 by rpki-client