Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          mDckENPTkaVQDDC1qdRZi4GKXfFL0F50coTtx+TgnRY=
Subject key identifier:   D0:42:7B:D3:7A:6B:3E:50:56:0E:0E:BC:0B:94:8D:0D:5C:67:EE:93
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       01A1DD94CABD4B084B7D4CB0BE9844EEC0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          080C
Signing time:             Sun 15 Nov 2026 05:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:18 +0000
Files and hashes:         1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
                          2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: hsQxmcuBBPGRq1sYF5tN+EEudE/ZSAq/3st9t904T7c=)
                          3: gozbr4UgB-08kovMPY3uAOal00w.roa (hash: umdkp9hNx8UQiddB43dZmA/rvSexrPQ2jrWdEUV0vYw=)
                          4: kUsgoDKvC6Zrkrt39ZK5TGpttts.roa (hash: R6EIMwTV2AxtRVnvEeq/MoHnOuREjc1rKOmJmpjIgRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:ca:bd:4b:08:4b:7d:4c:b0:be:98:44:ee:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Nov 15 05:01:18 2026 GMT
            Not After : Nov 16 05:01:18 2026 GMT
        Subject: CN=d0427bd37a6b3e50560e0ebc0b948d0d5c67ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:bc:16:c7:7c:2a:2c:6b:a9:a0:94:3c:0f:
                    4d:b7:77:eb:76:cb:d3:a5:65:cf:d9:20:d3:e4:ec:
                    4e:ff:89:ab:94:b8:88:41:7f:27:13:c8:7a:f5:45:
                    37:fc:d2:f0:b0:b3:e1:3b:18:4c:7b:49:90:3d:8e:
                    37:10:3b:24:7d:40:dd:05:fc:44:39:b0:97:d1:85:
                    8e:d0:6b:86:4d:c7:11:b5:a5:4a:11:ab:0b:d3:6e:
                    c7:c9:b0:41:52:ca:41:b6:5c:4e:f2:fe:3c:b7:03:
                    2b:68:10:07:09:83:dc:c5:1b:96:f6:4e:19:40:a8:
                    6a:7a:01:85:7e:dd:f1:99:07:47:5d:ed:26:c7:d9:
                    75:40:ce:aa:96:0e:23:7c:cc:08:ba:77:24:a4:6a:
                    b3:dc:95:2b:5a:20:9f:a5:25:8e:d1:f1:47:bd:a7:
                    f4:15:b5:43:f4:0e:61:69:97:bd:8f:bd:db:10:0b:
                    c1:57:e7:13:07:7a:8e:be:4c:09:f1:60:c6:16:95:
                    d7:80:b4:f5:a0:e7:56:67:16:9e:ea:48:56:30:a1:
                    31:51:06:c3:e4:7c:6e:d6:8e:81:c6:80:fd:49:2e:
                    7e:6f:20:64:d6:06:f0:c6:39:44:a2:f1:90:6b:16:
                    f4:0a:bc:82:ab:0c:d0:b5:be:93:66:52:f3:8d:d7:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:42:7B:D3:7A:6B:3E:50:56:0E:0E:BC:0B:94:8D:0D:5C:67:EE:93
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:17:e8:c9:f0:70:f6:c3:d5:83:c9:e5:76:07:44:b7:13:
         9e:08:b8:7a:d8:6f:a0:3b:31:97:7c:b9:c2:42:c3:ad:b1:10:
         fb:1b:b3:48:b9:78:10:98:04:c6:6b:77:d4:8b:29:46:e3:99:
         31:f4:48:56:89:ec:d9:f0:a6:5a:5c:64:a5:f1:e4:71:89:bd:
         3f:7e:4e:e3:db:b3:af:c3:d9:d5:cc:0f:1d:63:d0:95:6c:e9:
         04:53:5e:7a:7e:cd:97:e4:d9:b9:df:ed:53:47:17:d4:ed:f1:
         c1:a9:e3:3e:67:e1:bf:1f:bf:5d:58:d9:b2:81:42:ff:5b:93:
         df:c4:43:35:10:d7:ce:5a:bf:d0:e3:17:8a:62:b0:36:b2:f6:
         d7:0c:2e:1b:7b:3b:d1:27:fc:5e:18:dc:1a:0f:ef:0e:49:28:
         2a:0c:dc:9e:33:ee:17:33:67:fe:f1:55:c7:11:af:ac:b2:96:
         f9:9f:5a:ad:bb:25:2b:c5:fb:d7:03:86:8a:e3:4c:84:a2:f2:
         a1:c9:00:d2:3c:c3:8f:77:46:e1:de:d5:7c:7f:47:6c:07:91:
         76:7d:32:c8:58:2a:fe:7d:14:44:b8:72:b2:24:b7:98:11:37:
         68:d1:fe:e8:8c:4f:74:97:01:41:c8:81:7d:bf:aa:d5:7d:d2:
         19:a7:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:11 2026 by rpki-client