Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File:                     NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier:          yJJ0BeHQLqI/r2DARinm3Eqpcfnp6n7BSody1BrHEEs=
Subject key identifier:   85:F9:05:CC:D5:B7:DD:7A:2E:36:D9:1C:54:18:BF:2F:F7:89:23:F3
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer:       /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial:       019CAA21EF6345C382635C7D374B3B7730B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 16:01:16 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:16 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:16 +0000
Files and hashes:         1: A0lWNibRMfUCrh86hnAg4xQznRU.roa (hash: HCNRAq/OezVNw2n68MqddUBXhIeXxlx+IY4XAxiswJQ=)
                          2: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: kIqIo2/a4jt0LWwAL4aaLuFYx1bnTcZkQbmwzMSXs7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:ef:63:45:c3:82:63:5c:7d:37:4b:3b:77:30:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
        Validity
            Not Before: Mar  1 16:01:16 2026 GMT
            Not After : Mar  2 16:01:16 2026 GMT
        Subject: CN=85f905ccd5b7dd7a2e36d91c5418bf2ff78923f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:05:15:77:c1:87:f9:75:c7:47:b4:dc:d5:
                    0e:20:a7:2e:55:fb:fe:52:42:68:be:f4:c0:fe:48:
                    78:7a:26:cd:4b:b0:5d:48:a0:97:c1:0b:6e:7d:07:
                    17:e8:55:1c:46:ee:e1:54:bb:14:3d:e8:84:cc:7a:
                    98:8e:7f:c4:04:ec:2d:e2:16:fb:75:dc:ff:d5:88:
                    84:79:3b:d3:f9:25:4c:22:43:da:6e:04:3a:4e:98:
                    f8:43:bb:b2:1f:45:75:7f:fe:97:13:4c:d7:09:1f:
                    db:c8:7b:ac:b3:b4:02:e4:7b:f9:21:a5:44:02:61:
                    8b:82:69:ec:45:71:06:06:33:de:aa:d6:80:0e:9e:
                    61:33:a2:bb:bb:c6:52:8f:68:c1:17:7c:83:c1:e9:
                    3a:0e:1c:e5:c3:a5:b8:42:61:b8:cb:0c:4f:97:84:
                    e6:18:88:2d:b0:9f:92:23:fb:af:7e:2b:b0:d4:87:
                    aa:cf:19:0c:ba:75:ac:35:f4:40:54:42:28:bc:d2:
                    11:10:39:67:e9:2d:6c:55:56:37:62:61:55:e7:fb:
                    4b:8d:5e:09:29:14:32:6f:ba:26:9d:19:eb:b6:71:
                    99:65:24:f7:21:21:7c:a0:7d:6b:59:c6:e1:1d:cd:
                    74:3d:13:f3:6b:a6:e9:de:65:1c:ba:d2:90:b5:6b:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F9:05:CC:D5:B7:DD:7A:2E:36:D9:1C:54:18:BF:2F:F7:89:23:F3
            X509v3 Authority Key Identifier:
                keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:a1:c9:c4:87:df:4c:07:bc:eb:df:44:a7:14:21:49:e3:
         11:e6:9a:55:9c:f7:62:48:b9:d4:d5:33:18:6a:b6:b4:b4:4c:
         fb:cf:51:19:2d:3c:e0:f1:d7:ef:79:bf:20:7c:f2:f3:b2:e6:
         ad:14:80:b2:fb:35:bc:01:97:8a:3e:fa:e2:79:76:1c:af:e6:
         08:c8:df:cb:cd:5f:51:5e:e0:1b:14:dc:a4:3f:cc:c4:71:b6:
         ac:09:0c:2c:19:2d:d3:bf:9a:f3:e5:b4:c7:79:a1:05:5d:b0:
         a3:d1:e6:3a:a7:0e:c7:f5:93:7b:75:3a:e0:73:14:35:63:b1:
         90:e6:4f:10:b6:20:75:2d:e3:38:3d:df:21:ea:d0:ec:50:5c:
         3e:80:bb:7c:9a:17:f8:74:f6:2c:24:ac:a2:39:8d:7a:2a:85:
         a2:0f:d3:7b:d6:fc:96:17:ed:bf:b9:8d:42:dc:54:28:19:ae:
         34:b1:5e:cd:c2:f5:0c:a9:01:8e:90:c8:a5:e3:eb:8f:67:49:
         de:44:58:04:86:b0:f6:ae:08:c1:39:40:4f:76:6e:c9:25:44:
         82:61:d1:88:43:97:93:9c:68:61:d6:3b:dc:2e:14:a9:ea:70:
         8e:b9:65:a0:bc:fc:89:f4:f3:df:9c:74:fc:b4:61:c1:20:32:
         43:eb:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:11 2026 by rpki-client