Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
File:                     njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft (raw, json)
Hash identifier:          r9cfcDemB1u26OhQ2nze3v8HrMkYU871cCBy+V1oHW0=
Subject key identifier:   05:FE:C6:74:E0:21:80:BA:EB:35:D8:CA:C9:36:21:B5:66:13:23:9A
Authority key identifier: 9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57
Certificate issuer:       /CN=9e315018e560000d94718d85ee4e1320c3a5e457
Certificate serial:       01A0C66A1562CEF62D47687B2011857551F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:36 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:36 +0000
Files and hashes:         1: _W2MGLpzYLCcdM8MrYh-W5k4LpE.roa (hash: 5AVtOSonCp0arcBUR0hK73/WbQu4O8oq5lfKGONGBLk=)
                          2: njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl (hash: GQgYmwLUE4QggHjCofDj991M27fbZRujz+25uVl3y8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:15:62:ce:f6:2d:47:68:7b:20:11:85:75:51:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e315018e560000d94718d85ee4e1320c3a5e457
        Validity
            Not Before: Sep 22 00:00:36 2026 GMT
            Not After : Sep 23 00:00:36 2026 GMT
        Subject: CN=05fec674e02180baeb35d8cac93621b56613239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:ad:51:39:70:7e:e2:eb:09:9b:4d:b2:51:
                    ba:01:a8:13:b2:a3:8a:41:28:21:73:e3:9c:c8:68:
                    21:83:fc:4f:2e:d0:56:36:c0:7b:cc:a8:8f:a8:98:
                    a9:7e:ff:7e:6d:40:04:98:6d:76:9e:c6:f0:ec:9e:
                    f6:bb:55:88:3e:91:5e:66:c7:5d:65:6e:91:7c:43:
                    0f:67:ce:2a:18:c2:bd:cc:4a:5c:31:12:d8:92:49:
                    d9:52:2a:67:26:90:49:d3:2d:76:7c:48:31:ee:42:
                    33:a6:da:36:c4:6a:66:d7:8a:de:b3:c6:5c:18:51:
                    4b:e7:25:67:9e:3e:33:7c:85:50:72:ff:06:6b:08:
                    55:ff:00:0e:73:ea:62:84:20:8d:f6:3d:34:4d:88:
                    5a:2c:7e:4d:80:fa:67:a8:b6:7b:82:bb:1f:4c:02:
                    b9:b5:26:b9:a2:19:bb:f7:92:1d:43:04:d5:4e:86:
                    75:4a:3d:3e:4e:8e:c5:28:9e:6e:98:12:fa:79:a6:
                    82:5e:7a:d3:c9:16:6a:b4:f3:ba:b1:d5:98:a6:fc:
                    36:60:9c:1c:3f:8a:89:6d:07:d3:84:00:6f:17:94:
                    d3:3d:c3:63:28:f7:ae:51:64:33:41:33:50:e6:52:
                    ac:a8:b4:17:20:21:ee:0a:5f:a9:23:40:23:82:37:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:C6:74:E0:21:80:BA:EB:35:D8:CA:C9:36:21:B5:66:13:23:9A
            X509v3 Authority Key Identifier:
                keyid:9E:31:50:18:E5:60:00:0D:94:71:8D:85:EE:4E:13:20:C3:A5:E4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njFQGOVgAA2UcY2F7k4TIMOl5Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/njFQGOVgAA2UcY2F7k4TIMOl5Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:76:e1:9d:c1:64:f4:bd:33:18:8e:e7:48:e0:10:3e:47:
         7f:ed:2f:63:91:f5:fc:f8:4a:ac:47:b7:70:6a:35:c7:49:0a:
         63:84:0e:d4:5c:26:bc:a8:c8:5e:3a:14:98:f9:89:97:4d:6a:
         00:b9:fc:c4:a6:4a:14:10:5b:5c:29:ac:2a:95:d3:3d:76:c0:
         0e:d8:85:8b:dc:2d:53:62:7c:6f:94:47:a0:c6:b5:c8:d6:48:
         e7:7f:02:af:66:a0:22:5e:6c:99:c1:ea:77:09:b8:a3:31:37:
         3b:39:a1:e7:7f:ca:20:66:97:af:c0:43:46:25:90:8b:ed:d2:
         a9:c5:5a:57:36:b6:01:1c:3c:90:2b:4d:d9:11:d9:51:11:b3:
         32:8d:25:0d:b0:e3:bf:07:e7:a8:8c:b0:81:31:dd:e7:6e:fc:
         f4:03:7c:94:31:04:58:69:43:d9:ea:ac:fb:fa:d4:f8:ed:3c:
         64:1b:11:a0:f4:a0:aa:06:6b:e0:d1:e4:05:24:31:42:00:e6:
         a4:a4:93:6a:67:48:5f:6b:80:4b:73:1b:b4:27:b3:32:54:70:
         f6:74:c5:88:27:57:9e:1d:92:0b:3b:37:51:63:d5:d6:3a:d9:
         b9:50:8c:77:d0:6e:90:8f:0a:6a:b1:09:2c:52:b2:c6:b2:14:
         58:ab:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:18 2026 by rpki-client