Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File:                     nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier:          0SFnSN302We6eyw4MVCPU/zHdIcJ80je/+0//vHgYdg=
Subject key identifier:   77:4C:7A:6A:3B:11:12:DD:BA:80:EC:35:C6:8E:BD:4C:DE:B2:B7:73
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer:       /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial:       019D28167C9C7283B3397B1AC250370110E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number:          0DAF
Signing time:             Thu 26 Mar 2026 03:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:55 +0000
Files and hashes:         1: AaDplZOBjFP44WCq4B011KFt3wk.roa (hash: cc1qcanaelqIhqY1IjMuQU7pXZ3q+cEr4hq8dhQwh3g=)
                          2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: hvIyAr8aw5ukZ4leFwNz5sc8/oz9diakdC2rCEq60PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:7c:9c:72:83:b3:39:7b:1a:c2:50:37:01:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
        Validity
            Not Before: Mar 26 03:00:55 2026 GMT
            Not After : Mar 27 03:00:55 2026 GMT
        Subject: CN=774c7a6a3b1112ddba80ec35c68ebd4cdeb2b773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:9d:9c:99:0d:3d:d5:de:01:ee:ff:24:ca:
                    2d:3b:21:dd:72:8b:86:7e:c5:67:68:1e:c2:af:c4:
                    aa:9e:eb:bf:ad:f3:80:eb:e5:12:5f:3e:f2:3e:91:
                    95:09:5f:2b:09:27:de:7a:91:12:b6:d2:4d:09:c1:
                    94:3f:80:f9:14:40:49:b4:95:cf:f6:44:4f:27:b0:
                    72:27:1b:1d:cc:af:f4:45:d5:18:0b:8a:fc:c3:7a:
                    3a:c0:b3:3a:61:21:c7:43:9a:f7:a9:71:91:84:1d:
                    34:bd:d2:6a:00:a8:9a:24:05:cf:67:44:82:a8:e0:
                    ca:7c:1b:41:18:d5:74:ed:77:aa:36:6f:d7:33:89:
                    f8:67:76:90:42:c1:11:16:1c:3b:a0:b1:8a:97:6c:
                    cf:90:36:2e:8b:70:6c:d0:39:de:5f:55:f0:7d:d0:
                    cf:6a:69:f9:69:b4:92:b7:20:7b:57:a5:5b:9c:6c:
                    d4:d8:c2:fb:1f:b1:3c:5d:63:30:1f:e4:19:00:b6:
                    ad:31:70:f3:d7:0f:dc:aa:a1:64:ae:14:07:70:cf:
                    bb:9a:ac:ed:24:d4:31:b8:61:e2:76:6b:08:b4:42:
                    a1:5d:99:3d:7d:7a:1c:2c:b2:fe:f0:ec:88:12:41:
                    59:10:e4:1f:af:0e:f4:84:e6:b8:b0:53:4e:0f:6b:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4C:7A:6A:3B:11:12:DD:BA:80:EC:35:C6:8E:BD:4C:DE:B2:B7:73
            X509v3 Authority Key Identifier:
                keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:c2:35:b4:d5:3d:94:09:59:fc:00:46:a1:30:83:3d:38:
         30:dd:7a:ab:cf:d8:c6:0d:ee:9b:27:6b:b3:ef:89:01:2c:03:
         f6:27:75:ad:3a:0f:6d:df:9c:c1:8f:51:8c:92:ec:15:f7:e7:
         60:b6:93:ec:07:e0:6a:f4:2c:8f:60:13:cd:b7:f9:aa:6a:4d:
         a9:ef:96:b8:5f:ca:16:7a:ad:64:ae:1b:a3:ad:ce:fd:6b:c5:
         48:c2:c4:39:92:54:0d:92:d1:69:e3:53:bc:07:93:77:56:f6:
         5d:35:2b:e2:28:61:08:91:af:ea:92:7c:52:5f:4d:62:0b:fd:
         1d:23:12:cf:70:4e:f9:95:98:5b:4c:c2:8e:8a:10:29:06:14:
         82:73:f0:d4:b6:4e:3a:34:5d:b5:c6:0a:d6:db:b0:fb:0b:9b:
         c5:8a:b7:51:d5:b7:16:d8:99:7c:de:4d:51:8c:0e:cc:34:04:
         d6:33:13:41:a0:e9:8c:58:7b:da:08:15:b1:c6:04:2e:37:d9:
         11:a1:f5:e3:24:29:51:85:34:95:b3:59:11:1d:4b:cb:ac:f0:
         81:70:65:6c:4e:a1:f3:74:c0:bb:9d:19:c6:21:89:23:d8:69:
         ae:0e:2a:b8:49:22:3c:db:a4:82:59:0f:fa:0f:6b:34:18:c3:
         eb:7d:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:50 2026 by rpki-client