Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File:                     NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier:          1G8QH5a7+CtP3RMQcsnWz1WMj3eggB4tHtluTEq5PzU=
Subject key identifier:   83:A8:34:FB:C4:CD:7F:64:DD:40:D9:AD:20:47:FE:95:2A:9B:20:C6
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer:       /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial:       019CACEB4ABFA749B4B675D9C0CDA41FDFD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number:          111C
Signing time:             Mon 02 Mar 2026 05:00:26 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:26 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:26 +0000
Files and hashes:         1: GBUw27gsiJFLtmfTXNRWbUZ_Y94.roa (hash: b7QdPsdPI/bxDJG7gykmn29+t0AwGH/1f0qFnRyv30s=)
                          2: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: VnHiTp2IAPjgCoq33dfm8Oz2eT0x5wU7pj1u4AFfB1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:4a:bf:a7:49:b4:b6:75:d9:c0:cd:a4:1f:df:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
        Validity
            Not Before: Mar  2 05:00:26 2026 GMT
            Not After : Mar  3 05:00:26 2026 GMT
        Subject: CN=83a834fbc4cd7f64dd40d9ad2047fe952a9b20c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:a0:9f:4c:2b:a6:5e:8a:40:12:bf:c9:30:
                    b6:39:b1:12:43:a0:76:4b:8a:dd:8e:50:7d:80:1b:
                    41:cf:7b:bb:b3:da:ca:7b:b6:b9:bc:f2:e4:8e:95:
                    45:41:73:65:2b:e7:69:1b:a9:3d:1e:65:ba:2e:bc:
                    49:10:e5:53:41:fc:f8:8c:ad:92:b4:e5:14:6b:26:
                    51:59:bc:ab:f0:66:c7:d8:64:f8:5d:69:0b:1a:a2:
                    d1:2f:73:9c:ef:11:77:e4:db:f3:ea:3c:67:30:61:
                    8e:16:55:5d:8e:66:28:f3:b2:88:29:d6:09:03:b4:
                    44:74:6c:c5:53:2c:59:c3:bb:44:eb:9e:3e:67:2f:
                    bd:87:6a:77:b8:f1:7d:ad:a5:ac:4c:0e:da:49:1b:
                    fc:50:50:5d:48:23:90:54:38:16:f3:f1:fc:0e:04:
                    ee:42:a0:03:aa:9d:36:79:85:30:5d:77:7f:c8:b7:
                    c0:97:6f:b4:78:5a:41:c0:30:de:a0:53:9f:5d:58:
                    15:a0:a1:2a:67:e1:22:2f:17:ac:e9:67:d1:65:c3:
                    0d:ef:ce:bd:f0:a8:a9:b4:f0:98:54:8e:33:c2:d9:
                    34:b6:48:13:8a:05:13:26:d1:88:1b:5e:40:f2:6d:
                    11:8f:05:29:dd:1d:83:c9:e6:62:90:61:04:22:55:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:34:FB:C4:CD:7F:64:DD:40:D9:AD:20:47:FE:95:2A:9B:20:C6
            X509v3 Authority Key Identifier:
                keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f8:e1:71:b7:07:17:df:1e:fe:0b:2e:fa:bd:20:ca:68:e9:
         6a:0d:f7:13:a0:22:54:ff:36:f8:b7:fa:9a:8d:0d:fb:1f:cd:
         fd:01:a9:7d:16:29:03:6c:e2:d1:15:02:95:13:76:d4:86:e8:
         7a:c0:e6:a3:eb:2c:81:7e:d5:6a:b2:99:69:f5:42:7b:9c:b2:
         88:0b:fe:1d:de:ce:88:a7:79:fd:e5:b8:66:2a:8b:f2:dc:15:
         9d:c6:95:03:fa:f9:cb:fd:59:41:0f:cb:2f:f4:e6:e7:3d:e0:
         b1:20:64:77:dc:63:e3:9a:f4:2f:2e:db:b7:d0:c4:1a:18:e0:
         af:77:aa:8a:e0:01:2c:ba:18:c4:26:88:ad:3b:fb:0f:17:0c:
         4f:12:ae:64:20:9b:3b:11:05:fc:19:c7:64:14:3e:07:74:d9:
         30:a3:4a:75:92:8f:f2:29:32:31:66:1a:a3:01:53:89:f3:e2:
         e0:dc:b9:4b:c3:6a:49:d1:da:b9:3b:54:60:50:84:78:83:a0:
         ac:fa:65:dc:a3:c7:d9:74:d9:70:6c:83:51:15:9e:4d:9b:f8:
         bf:ca:66:08:d7:00:70:0a:08:95:30:c6:31:62:48:3a:c1:25:
         27:55:23:cd:8d:60:68:0e:e2:68:0d:27:03:a0:34:f4:44:6e:
         15:7b:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:03 2026 by rpki-client