Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File:                     Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier:          9OnMKv9KehOSnOR174q7wYSahbUcQl5cfrMimEWjj2I=
Subject key identifier:   38:48:84:F8:CC:A7:07:A1:60:54:76:43:69:9F:77:73:71:80:95:1D
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer:       /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial:       01A0D56F974E95E014ABC221AFD7B7B77F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number:          0EFD
Signing time:             Thu 24 Sep 2026 22:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 22:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 22:00:55 +0000
Files and hashes:         1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: MFGE4mLxr3ONXy3Y6Z31/fi6FTf9yi0Xfo5Azr8Ihes=)
                          2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:97:4e:95:e0:14:ab:c2:21:af:d7:b7:b7:7f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
        Validity
            Not Before: Sep 24 22:00:55 2026 GMT
            Not After : Sep 25 22:00:55 2026 GMT
        Subject: CN=384884f8cca707a160547643699f77737180951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:42:c5:10:dc:12:0f:80:73:b6:78:91:c6:
                    5d:6f:36:07:e8:18:7e:5f:09:9e:2c:57:70:35:c7:
                    63:2c:d7:e6:3a:f6:a6:c3:1f:e5:c1:bb:7c:ae:82:
                    fb:84:9b:f0:f3:82:e3:d2:2d:80:f3:2f:e4:05:0c:
                    dc:03:6c:bf:7c:75:7d:5d:e2:6a:11:ea:b0:10:f1:
                    95:ef:e4:49:06:01:b2:0d:76:4e:51:2e:fe:ce:04:
                    92:81:e1:92:fc:8d:04:ea:b9:5b:4b:31:f8:c2:01:
                    88:d8:c6:63:70:49:57:45:4c:92:02:68:56:df:ab:
                    f3:16:04:fd:5f:4f:09:f7:17:bf:73:b6:3a:25:78:
                    72:36:2c:cf:9b:03:61:92:ac:77:c1:0c:40:22:69:
                    a1:92:4f:83:a9:bc:8c:18:d3:33:42:13:28:ba:0f:
                    89:67:89:a0:d5:48:9b:4d:fb:5f:be:fc:b2:29:d9:
                    ea:36:61:ac:d1:b5:16:54:ec:58:3c:6b:81:28:f8:
                    21:b2:0b:19:62:c1:6f:32:f1:34:c6:c4:f9:ef:a8:
                    c1:35:c9:b8:cb:b3:f8:f0:d8:80:7f:a9:90:0d:4f:
                    e2:bc:b9:f2:43:b2:b7:76:8e:88:f6:b5:15:03:05:
                    0c:34:1a:3c:7d:a7:07:3b:0c:f2:45:d1:4e:f2:38:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:48:84:F8:CC:A7:07:A1:60:54:76:43:69:9F:77:73:71:80:95:1D
            X509v3 Authority Key Identifier:
                keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:a4:14:db:5a:d4:4e:8a:3f:b8:59:fb:c4:3c:b4:fb:b6:
         b2:94:f3:41:81:dc:bd:7f:8f:18:45:3e:4b:bf:0c:1b:a8:8f:
         73:34:c7:dc:94:2a:3b:1d:b1:6f:be:d6:1f:0b:bc:a5:f3:8f:
         57:86:e3:38:5b:94:37:27:91:e4:6b:a1:c2:66:14:a1:1f:b1:
         08:b1:0a:88:c5:4a:26:c7:d5:61:10:a7:0c:1c:43:df:7c:d2:
         09:77:d4:43:41:0a:ea:ff:88:ec:f8:b9:64:ba:23:86:55:6d:
         4e:d8:73:88:72:0d:42:dd:fd:5a:49:d1:d3:cb:a2:f6:29:fe:
         e4:6c:20:18:5b:53:a3:82:bd:73:bd:e5:b9:a8:25:0f:3d:37:
         a9:a9:7a:1d:82:d1:4d:78:2f:91:fc:43:1c:cd:d1:c2:86:47:
         9a:41:ac:a7:a9:be:83:36:c7:cd:4d:39:11:8b:ce:1b:c9:bc:
         8f:77:ce:f0:29:54:5e:5c:a0:c8:aa:78:67:41:1c:94:fa:98:
         88:2f:bf:60:15:6b:ed:34:67:e9:a7:24:4d:59:0d:9d:51:25:
         74:7c:3a:22:39:88:d8:21:b5:ff:f9:52:f2:36:46:8a:21:c7:
         4a:1c:46:47:7a:e1:94:4f:7e:bc:35:09:6d:97:d8:6b:fe:f1:
         29:3e:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:30:40 2026 by rpki-client