Manifest

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
File:                     2C77A3613F2060464C86A5089694D4208F24485E.mft (raw, json)
Hash identifier:          uXAIrJBhsgAKQR185hXR/MVYbGVHyJ9ZDX+XOZBAy6Y=
Subject key identifier:   E3:60:2D:2E:0B:BC:17:EB:59:07:8D:69:4B:5C:7E:DD:38:C0:9F:39
Authority key identifier: 2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E
Certificate issuer:       /CN=2c77a3613f2060464c86a5089694d4208f24485e
Certificate serial:       7DF2CA6768F46D6B1249332B3994F06C4392378C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
Manifest number:          23
Signing time:             Tue 10 Nov 2026 08:28:09 +0000
Manifest this update:     Tue 10 Nov 2026 08:23:09 +0000
Manifest next update:     Wed 11 Nov 2026 09:00:09 +0000
Files and hashes:         1: AS218904.asa (hash: w1rpsbeePX1KlGHWNPap7eonVhkKphQad/RXjX0DZx0=)
                          2: 2C77A3613F2060464C86A5089694D4208F24485E.crl (hash: M9dOkvP3Jv7R8Anj606E79/t4eBPKqu+YiUg+UinigE=)
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 09:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f2:ca:67:68:f4:6d:6b:12:49:33:2b:39:94:f0:6c:43:92:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c77a3613f2060464c86a5089694d4208f24485e
        Validity
            Not Before: Nov 10 08:23:09 2026 GMT
            Not After : Nov 11 09:00:09 2026 GMT
        Subject: CN=E3602D2E0BBC17EB59078D694B5C7EDD38C09F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:12:24:9d:c7:92:09:c5:0b:78:a0:f2:70:
                    fa:b6:8e:4f:eb:81:1c:7d:31:7b:60:7b:a4:ef:16:
                    cf:b5:ea:dc:81:94:61:a6:89:32:62:2f:77:51:0f:
                    98:ed:83:0c:46:c7:76:25:e0:c5:e1:72:c1:cc:4a:
                    82:21:f7:24:dd:d1:d9:74:09:4a:b9:9d:66:0b:72:
                    ce:58:0d:b9:02:9c:23:ca:d7:73:7b:91:58:10:fe:
                    88:87:0a:c2:98:28:ac:e0:bb:b4:5d:78:b5:79:0f:
                    0c:71:47:2a:47:ba:f5:7e:f1:29:ce:f3:39:a2:85:
                    05:70:2e:e1:0e:22:f8:ba:28:be:a6:b7:cb:ac:54:
                    97:1b:f0:4d:c0:17:de:69:c0:a3:df:3b:72:e1:86:
                    1c:7b:e4:cc:47:5c:0e:5b:c6:2b:30:f6:7c:7e:97:
                    27:2c:97:73:96:cb:a5:b0:6c:45:44:6c:93:18:d0:
                    c7:b3:a3:42:5b:f8:91:03:d3:42:b9:21:50:9b:d3:
                    08:da:55:91:ed:e5:45:fa:8d:a1:a5:39:9e:f7:02:
                    09:1b:c3:a0:77:25:82:61:a0:78:ce:45:f4:cb:76:
                    be:36:6d:2b:6b:84:f4:e1:18:ef:18:f0:03:a7:e6:
                    e1:76:65:c4:51:b9:bb:09:10:25:75:2c:19:c6:2d:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:2D:2E:0B:BC:17:EB:59:07:8D:69:4B:5C:7E:DD:38:C0:9F:39
            X509v3 Authority Key Identifier:
                keyid:2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:34:c5:ed:cf:e1:45:74:cb:7e:3d:9e:30:c3:f7:23:42:97:
         18:d1:35:af:44:85:e3:a5:5f:82:11:60:0e:39:93:4f:4d:1e:
         11:c6:b6:6a:55:d0:c0:0b:e9:44:11:88:f2:16:a7:4d:00:35:
         f1:75:76:88:57:38:df:07:58:5e:b2:a6:5c:84:74:9b:7a:d1:
         2c:eb:c9:0f:f3:76:7a:16:e0:83:e9:68:77:29:6f:51:78:db:
         0d:77:58:d0:cb:fc:29:00:2c:72:82:dc:f1:06:3b:b1:15:15:
         5c:c1:6a:5d:98:c1:8f:08:fa:86:f4:22:05:05:8e:c4:2c:85:
         cc:66:76:93:13:60:88:c6:12:0d:f3:13:10:47:5f:34:bb:99:
         d9:31:ee:40:10:22:52:52:45:51:3e:18:28:ec:82:94:39:53:
         a0:f9:31:14:b4:d9:ed:3c:7c:90:3a:9b:a5:50:6d:59:68:92:
         f2:42:59:da:07:5f:90:98:56:01:76:bc:52:72:d1:15:31:29:
         d5:dc:31:49:ae:bb:16:e5:d7:dc:13:08:91:3a:8e:b1:2d:dc:
         eb:2c:b7:a0:b6:39:0c:9e:f2:bb:e0:54:c9:59:53:26:c9:58:
         7d:17:42:db:99:7c:89:cf:c7:94:b0:6d:6a:3e:56:3d:9a:7a:
         b1:b4:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:48:36 2026 by rpki-client