Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File:                     nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier:          NcvENR3YT0DSQselRxlnT8ZnO9KeX9YmuD4iHbX6+T0=
Subject key identifier:   B1:B1:90:00:60:10:8A:81:79:07:1B:B8:87:26:41:C8:E3:0C:F9:79
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer:       /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial:       019D38658C90F2C571A54B560B38C50D30E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number:          046A
Signing time:             Sun 29 Mar 2026 07:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:12 +0000
Files and hashes:         1: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (hash: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I=)
                          2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: c9Y0WqmA01unUFH62hn0eMIFbm+LKf8wbjzK2vzCNxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:8c:90:f2:c5:71:a5:4b:56:0b:38:c5:0d:30:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
        Validity
            Not Before: Mar 29 07:01:12 2026 GMT
            Not After : Mar 30 07:01:12 2026 GMT
        Subject: CN=b1b1900060108a8179071bb8872641c8e30cf979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:3a:aa:82:55:54:53:8d:81:7a:2a:9e:e0:
                    1f:f2:24:80:8c:f4:fa:37:71:62:fc:5e:c8:3e:a5:
                    76:10:cc:8f:9d:4c:b3:56:d5:e2:96:44:2f:4e:4c:
                    86:78:b5:32:d6:27:6a:21:94:3d:d5:26:cc:57:21:
                    c0:f7:a9:b7:11:f8:cd:2a:c2:c2:00:68:9b:63:b6:
                    9f:8b:d0:4b:ad:c9:46:0e:f1:59:14:25:2b:14:69:
                    9d:14:31:c9:7b:85:f1:dc:62:f8:3e:2e:b0:c0:e0:
                    9c:70:32:24:f4:57:d4:de:2a:99:ef:c3:1f:dc:78:
                    49:56:38:e2:27:57:44:94:a2:83:df:00:1f:61:13:
                    ef:ff:80:57:16:96:e1:fe:5a:93:1a:a3:c3:1c:06:
                    b6:9e:01:82:21:bb:b9:1c:cf:55:15:14:89:03:c7:
                    4b:1a:1d:49:af:b6:43:1f:5d:54:ff:3f:51:c0:14:
                    47:03:50:15:bc:30:66:89:bf:e3:0b:f5:d3:c0:07:
                    d3:51:80:57:ca:f8:b2:52:5d:86:80:7a:92:fd:5d:
                    ed:ad:d3:60:7a:c6:db:5d:38:72:26:ad:2e:2d:89:
                    fb:26:17:7d:f8:a2:64:3f:02:48:b3:97:3f:e7:1e:
                    2f:6c:6a:32:90:54:b9:32:24:7c:9f:78:fb:24:14:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B1:90:00:60:10:8A:81:79:07:1B:B8:87:26:41:C8:E3:0C:F9:79
            X509v3 Authority Key Identifier:
                keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:65:7f:ca:7d:2d:91:e0:4c:47:bd:bf:5c:f3:d7:b2:f5:8a:
         86:18:8e:80:55:a1:57:92:27:80:2a:4f:74:d0:39:a9:96:cc:
         5f:1f:ce:50:52:56:35:af:2d:51:82:2f:5c:87:af:29:3a:d7:
         cd:c9:45:68:95:87:08:8b:a5:22:40:94:80:94:2c:98:ce:a6:
         cf:79:82:a9:0d:97:9e:88:8b:28:fa:24:95:03:fa:e6:34:f8:
         cd:a9:39:af:27:2f:de:07:ff:d0:34:99:0e:e4:85:83:5b:b2:
         45:22:46:02:69:97:a3:4d:ae:f2:c0:86:c3:c6:0c:7e:1f:b9:
         f1:47:99:4f:97:b8:2a:4e:58:6c:58:1e:53:88:29:2c:db:52:
         5e:bd:ca:47:db:9d:ce:1c:1e:b2:34:7f:e1:62:de:36:55:a2:
         5f:a0:49:e9:6a:11:55:34:19:7a:01:27:a3:d7:d9:f7:dd:3c:
         5d:b7:aa:87:e6:b1:a1:d2:d5:81:7e:c0:0e:ca:91:52:35:88:
         64:d4:85:8f:56:86:9f:38:84:7d:bd:5a:cc:af:d8:bf:f6:40:
         cc:29:37:c3:c1:60:13:f1:de:47:bd:bf:a4:00:a0:3b:78:15:
         b9:bd:e1:35:a1:0a:ce:f7:6f:e9:1e:c8:8e:3f:5c:ed:8b:20:
         73:b9:20:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYyQ8sVxpUtWCzjFDTDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw
ZDdmMzEwHhcNMjYwMzI5MDcwMTEyWhcNMjYwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
EyhiMWIxOTAwMDYwMTA4YTgxNzkwNzFiYjg4NzI2NDFjOGUzMGNmOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNA6qoJVVFONgXoqnuAf8iSAjPT6
N3Fi/F7IPqV2EMyPnUyzVtXilkQvTkyGeLUy1idqIZQ91SbMVyHA96m3EfjNKsLC
AGibY7afi9BLrclGDvFZFCUrFGmdFDHJe4Xx3GL4Pi6wwOCccDIk9FfU3iqZ78Mf
3HhJVjjiJ1dElKKD3wAfYRPv/4BXFpbh/lqTGqPDHAa2ngGCIbu5HM9VFRSJA8dL
Gh1Jr7ZDH11U/z9RwBRHA1AVvDBmib/jC/XTwAfTUYBXyviyUl2GgHqS/V3trdNg
esbbXThyJq0uLYn7Jhd9+KJkPwJIs5c/5x4vbGoykFS5MiR8n3j7JBSOGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGxkABgEIqBeQcbuIcmQcjjDPl5MB8GA1UdIwQY
MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt
YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5
LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2V/yn0t
keBMR72/XPPXsvWKhhiOgFWhV5IngCpPdNA5qZbMXx/OUFJWNa8tUYIvXIevKTrX
zclFaJWHCIulIkCUgJQsmM6mz3mCqQ2XnoiLKPoklQP65jT4zak5rycv3gf/0DSZ
DuSFg1uyRSJGAmmXo02u8sCGw8YMfh+58UeZT5e4Kk5YbFgeU4gpLNtSXr3KR9ud
zhwesjR/4WLeNlWiX6BJ6WoRVTQZegEno9fZ9908Xbeqh+axodLVgX7ADsqRUjWI
ZNSFj1aGnziEfb1azK/Yv/ZAzCk3w8FgE/HeR72/pACgO3gVub3hNaEKzvdv6R7I
jj9c7Ysgc7kgFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:35 2026 by rpki-client