Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          P/T/u8z6iWjCusIZ8cfMBaCNpz3ihvO5fdwf6ecz9Ws=
Subject key identifier:   62:84:8E:52:F9:2C:41:67:B6:87:D0:11:AE:CE:8A:D1:4C:DE:CB:B6
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       019CAC0FBD57E9FC550BC82FB08168CA47B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          1855
Signing time:             Mon 02 Mar 2026 01:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:38 +0000
Files and hashes:         1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
                          2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
                          3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
                          4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 9qxVP6B0hqtJsyYNG41DHqcKuI2Xiiw6RKC/+X4tbp0=)
                          5: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:bd:57:e9:fc:55:0b:c8:2f:b0:81:68:ca:47:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Mar  2 01:00:38 2026 GMT
            Not After : Mar  3 01:00:38 2026 GMT
        Subject: CN=62848e52f92c4167b687d011aece8ad14cdecbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:e8:5f:bf:f6:f0:b9:c8:bf:2a:74:ef:1e:
                    47:69:a7:11:2e:49:91:15:8d:50:8f:7a:5b:ea:81:
                    03:d8:8a:3b:4c:15:b4:fb:a6:6f:08:07:bf:d2:60:
                    a7:f0:f5:c4:e9:44:54:1b:11:a9:ca:e6:c0:63:ad:
                    70:36:58:3f:45:a6:86:6d:5c:9e:bf:7a:ef:19:2a:
                    cd:70:f0:0a:b1:a4:b6:98:1d:20:ee:bb:53:6f:6a:
                    3f:6c:bd:ab:0e:61:61:4a:62:f7:42:d5:a8:71:12:
                    78:fd:3f:3c:ad:8b:2e:36:75:c0:b6:ed:cc:9b:7a:
                    26:ec:09:61:28:50:50:dc:5d:ca:7e:bc:29:dc:a0:
                    52:59:a1:b6:a6:e5:57:af:e7:f9:fb:cd:db:9d:c5:
                    7f:ef:ec:6c:5a:36:67:25:ca:ff:61:06:c1:b9:54:
                    b6:05:3a:8e:5d:e9:3c:66:08:c0:d7:ee:a9:75:8e:
                    6f:74:0e:75:db:da:41:9e:20:69:f2:cd:27:0f:73:
                    54:3f:8d:65:8c:d0:e9:6e:6d:e5:4f:b4:85:7e:39:
                    e0:c0:cf:56:98:53:b8:88:fc:d3:db:ab:44:1d:38:
                    b5:0d:57:d0:03:4e:ae:0a:45:a0:14:3d:d3:cf:04:
                    ed:45:50:67:46:7f:d9:34:6d:f6:a0:7e:58:de:c8:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:84:8E:52:F9:2C:41:67:B6:87:D0:11:AE:CE:8A:D1:4C:DE:CB:B6
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:4e:41:0b:6d:ab:73:7b:f0:33:be:58:d6:9c:c9:eb:88:
         76:b5:11:61:2a:90:5b:cb:c8:a1:4f:0f:50:68:a0:ee:17:86:
         00:88:f9:4a:65:b3:ce:89:52:94:16:37:9f:c8:9b:15:76:c7:
         be:63:f7:58:9d:aa:04:ea:bd:eb:c8:f0:d5:a2:0f:55:79:c6:
         2b:11:33:9c:a3:5e:cf:e4:00:cf:9b:cc:36:0e:a3:07:9c:98:
         fe:d4:61:3c:c5:83:e6:a7:1d:ae:c1:b0:06:35:6f:d0:e2:d6:
         d4:a1:8d:08:f2:9f:57:a8:75:ac:a5:e0:51:71:71:8f:7e:47:
         ef:cf:3a:66:bf:20:38:8a:e6:f6:a2:97:e7:da:38:ae:6e:60:
         bc:60:b7:60:e3:e5:87:9f:e2:3d:01:21:7b:ec:7c:09:d2:cd:
         d2:44:37:e1:52:78:66:1d:18:ba:a0:e7:77:3d:26:a2:02:a6:
         e3:bc:a4:92:64:a7:a2:da:fa:b0:be:74:c6:9f:af:ac:d3:fb:
         8b:39:a7:1f:d6:45:36:02:b4:85:09:37:b3:3a:69:29:89:65:
         80:68:b5:39:b5:b0:ae:40:7e:8d:a4:4b:e5:b5:e0:30:c8:93:
         07:e4:4a:6d:fa:56:0d:ae:e6:88:60:7e:47:1f:35:e9:94:34:
         7e:ba:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:29 2026 by rpki-client