Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          3opl40ZuJzZTDYmH74F7bt8KfqorlSmLlAvGRedrQ3A=
Subject key identifier:   63:2B:1E:AD:D9:52:6B:2D:D3:79:B7:69:21:7D:DB:76:72:CA:67:E5
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       019CAD597074116A8294B0BBAB9EDF585662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          1842
Signing time:             Mon 02 Mar 2026 07:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:45 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: vRshzFpUuEhDUutGD+f22ZjBJTblbN84xmFn0MxyKqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:70:74:11:6a:82:94:b0:bb:ab:9e:df:58:56:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: Mar  2 07:00:45 2026 GMT
            Not After : Mar  3 07:00:45 2026 GMT
        Subject: CN=632b1eadd9526b2dd379b769217ddb7672ca67e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:ff:e7:65:af:1c:2e:06:a6:b1:5e:2e:6c:
                    36:9e:a0:6d:03:4e:16:21:af:a5:03:fe:a0:37:41:
                    fd:6f:4a:0b:9f:96:14:74:4d:ef:2e:6d:15:52:79:
                    69:8a:d2:8b:67:a3:e9:b2:51:e1:f8:da:f7:65:f7:
                    07:a8:4c:0c:50:26:01:7c:ad:53:9d:eb:d7:a3:b9:
                    90:42:b1:61:dd:db:91:f9:4b:f6:d6:d2:00:b7:c7:
                    d4:37:55:b6:fe:b0:e7:9d:c5:58:f1:09:57:be:0f:
                    2e:5c:fd:96:b5:4a:61:7b:1a:f8:ba:b5:b0:db:c9:
                    cd:7f:a9:14:3a:6d:fe:55:80:3b:59:63:ca:e1:ec:
                    c0:a2:6f:fd:f2:4f:99:1f:f2:ee:76:1a:37:70:7b:
                    b7:3d:b2:6a:5a:be:1a:3a:b4:e8:89:4a:d8:b0:f8:
                    cb:c4:c0:ea:9e:58:1b:74:53:3a:3f:55:8a:4d:f0:
                    7e:38:ee:d0:3e:fb:0b:96:e1:4f:92:5d:61:bd:c7:
                    0f:7e:9c:03:bb:a7:6c:76:07:17:6d:9f:9b:78:81:
                    a8:c9:8b:f4:53:62:6d:1c:0b:d8:57:88:4b:ef:ea:
                    8b:0c:13:aa:fa:e9:1b:43:88:9f:fe:8e:f7:99:d0:
                    fc:7e:dd:60:cc:b1:fd:71:8c:6e:29:09:25:35:5c:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:1E:AD:D9:52:6B:2D:D3:79:B7:69:21:7D:DB:76:72:CA:67:E5
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fa:cc:6d:8d:0a:a7:99:16:84:ed:22:a3:ef:1e:fd:0a:cb:
         3c:7b:57:f9:6f:c9:8b:f8:1c:f4:68:0d:51:e2:21:9a:7e:ae:
         ff:c7:3b:34:d8:9f:fe:78:71:04:6f:94:0b:30:95:98:ca:60:
         bb:0c:b8:90:3d:d5:ec:24:db:3f:c7:4e:f0:22:b7:36:88:f1:
         5a:16:99:e4:cb:64:7c:30:b9:59:51:ef:ab:a3:b3:94:32:00:
         a8:f1:a4:7d:62:71:5b:83:af:04:60:85:6c:ec:86:da:f2:93:
         8a:2a:89:03:28:c2:85:86:98:05:cf:24:df:9e:8a:72:2b:8c:
         2d:de:ae:cb:c6:d4:a9:f0:e3:4c:85:51:fa:c2:cb:d2:04:0e:
         b8:ee:95:e2:d6:ee:c1:c4:a6:7e:44:61:91:8b:92:d4:5a:7e:
         72:e1:c2:13:9c:f1:c8:81:af:28:58:30:1f:1d:6e:29:98:d1:
         37:fb:ef:ee:84:02:fc:43:03:25:be:4e:fd:46:e4:80:5f:9d:
         55:0f:97:01:fd:ed:b5:9b:1b:d7:2d:78:07:b5:b5:ba:28:db:
         44:f2:ba:e2:52:52:5b:ee:a1:64:d5:39:85:ae:20:07:22:6b:
         91:56:bd:c1:eb:68:ec:7c:fb:22:e4:d3:27:15:f7:dc:59:19:
         55:3c:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:11 2026 by rpki-client