Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          ruGAUAdCFjd0wKf4myojzxMy34qmAUDenNJ4rKsI4oo=
Subject key identifier:   47:34:DA:F8:F0:C1:5E:AD:3F:BB:D4:88:EB:EE:6F:1D:C0:C3:6F:B6
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       019CEA12FEBD38467DBE67482767FAC1D691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0A22
Signing time:             Sat 14 Mar 2026 02:00:39 +0000
Manifest this update:     Sat 14 Mar 2026 02:00:39 +0000
Manifest next update:     Sun 15 Mar 2026 02:00:39 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: 4GrOvTBGwZM35sHJy/JHa8/H7PyxsSneHpDJVTphDTc=)
                          2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:12:fe:bd:38:46:7d:be:67:48:27:67:fa:c1:d6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Mar 14 02:00:39 2026 GMT
            Not After : Mar 15 02:00:39 2026 GMT
        Subject: CN=4734daf8f0c15ead3fbbd488ebee6f1dc0c36fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:a6:50:a7:e4:5a:a4:9b:ed:67:f8:ca:29:
                    da:96:e1:f5:96:fb:f7:45:f1:76:06:67:78:10:79:
                    f7:34:eb:61:68:55:7f:c0:77:53:27:b4:b7:d1:b8:
                    c8:54:f1:86:51:a6:09:ec:27:fa:cb:a1:44:11:f1:
                    a7:c9:3c:ab:89:43:c1:08:31:9f:07:45:35:8c:0a:
                    26:ce:ab:9f:6b:7c:9d:a2:fd:64:e8:77:59:a9:98:
                    21:c8:49:2d:d1:e1:c7:87:0b:4e:db:22:b4:79:87:
                    9e:2f:20:fe:90:d6:e4:64:30:04:a6:89:0a:7d:c6:
                    5d:b3:8d:6b:9c:d9:89:7d:a5:89:f8:5f:ee:3e:6a:
                    36:5a:f2:d1:8c:f5:04:c7:b5:ad:07:13:ec:2a:49:
                    3b:e7:2e:c2:9e:9b:73:05:3f:ed:ca:61:a6:e8:71:
                    68:25:02:73:42:86:96:c8:26:c4:99:67:ac:5f:bf:
                    d5:39:f0:94:93:4f:c1:0a:66:06:91:a4:00:35:fd:
                    f1:9a:8f:c5:d5:fc:c1:39:22:19:8c:e5:ac:c9:3d:
                    d1:62:f0:e8:10:e6:96:9c:94:97:f9:86:0c:08:28:
                    0d:af:0f:67:58:d3:0e:60:48:36:86:18:44:48:c1:
                    a6:b9:fa:9a:c1:4f:d5:29:bd:cb:ab:ee:98:e5:b1:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:DA:F8:F0:C1:5E:AD:3F:BB:D4:88:EB:EE:6F:1D:C0:C3:6F:B6
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:d6:3c:1b:da:bc:80:76:3d:17:f0:8d:92:0f:d4:5e:ee:
         1a:63:63:ed:16:6c:43:54:88:41:eb:66:98:ce:c6:68:2a:ad:
         c0:dd:67:dd:63:07:54:2c:3a:16:15:37:22:ce:8b:e4:2c:8e:
         2d:64:ca:e6:8e:7c:6a:ab:69:16:d1:fb:bb:f9:03:00:fa:1e:
         b8:7d:aa:2f:17:23:f9:91:7e:24:63:f4:eb:cb:34:d0:29:42:
         62:b5:79:7e:b1:d9:50:8f:19:d1:13:ac:c1:72:5d:36:72:d2:
         f6:b8:70:0e:d7:66:64:45:29:eb:a7:7d:d2:25:b2:c0:2d:c9:
         20:52:6b:4f:0a:85:e5:f6:44:30:80:35:77:7f:e6:fb:b0:65:
         ba:30:9c:c7:9e:43:b0:ca:4e:85:76:60:55:0c:38:3b:84:5b:
         00:b9:d2:8b:a7:82:ed:8e:71:f6:df:18:5a:ba:54:56:98:d8:
         ec:a5:b0:5b:da:2a:9b:c1:d4:fd:8b:9a:00:0f:b5:ef:1f:91:
         b6:fb:2d:b6:bb:a2:40:7c:d3:94:b5:3b:cb:57:53:f0:48:36:
         17:4c:a4:b4:eb:93:b1:de:73:53:85:aa:8b:f4:89:7d:60:ee:
         80:80:5e:15:e0:e6:90:15:ed:09:24:7e:6f:54:95:c4:91:05:
         62:29:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:54:35 2026 by rpki-client