Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          vbk8xnBAxRklvBcusaQu6Ix17oLjJ1utYj/N+M/2aKA=
Subject key identifier:   06:80:5F:18:EF:50:58:7F:B5:31:C0:DC:CE:D5:1D:2C:9D:A1:4E:86
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       01A0DFBD3779FCF113F38C725BCB5204F568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          179B
Signing time:             Sat 26 Sep 2026 22:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:54 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: I6YZj+jTwFbbRoTdjGIeiJAvWte8fwzPXqTbMFZGLxg=)
                          2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bd:37:79:fc:f1:13:f3:8c:72:5b:cb:52:04:f5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: Sep 26 22:01:54 2026 GMT
            Not After : Sep 27 22:01:54 2026 GMT
        Subject: CN=06805f18ef50587fb531c0dcced51d2c9da14e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:15:d9:e7:63:14:b4:b2:8f:15:10:b2:ac:
                    c6:63:29:c8:19:b3:27:41:c9:4b:c1:6e:d7:0f:b9:
                    ca:c4:69:64:62:19:01:0c:7f:9f:7e:59:c2:60:db:
                    5c:20:13:b5:c1:fe:3b:55:a9:55:f2:95:bb:a9:cc:
                    ea:19:68:9c:5e:03:aa:ca:67:4a:28:7b:ba:65:82:
                    31:ab:81:40:14:89:5c:f0:d6:95:33:48:ce:cd:aa:
                    be:95:13:49:0f:3b:8e:63:52:bc:6c:cb:58:6b:88:
                    07:b2:05:bc:7d:27:8d:56:1a:09:93:ed:31:33:1e:
                    c4:7d:50:ba:21:5f:a7:93:3c:24:74:62:c1:e1:94:
                    e7:dc:01:37:75:48:5e:76:b6:81:30:4e:27:ad:f5:
                    ef:7d:69:8f:46:e9:f1:2c:33:50:d3:38:8c:ff:b3:
                    f5:ce:cf:35:ed:0c:fc:61:67:f9:5e:4b:c4:9b:2c:
                    df:09:34:de:c1:9f:f8:83:14:1f:25:b5:33:cf:7e:
                    21:ed:bb:d3:6b:91:5d:66:5e:7e:c9:a7:b3:61:d8:
                    d1:74:fc:c9:ab:b6:f2:45:0a:1d:e6:93:c9:a9:e3:
                    34:35:bf:db:33:18:b5:9e:55:d5:dc:de:e1:03:61:
                    b7:44:d5:e7:e5:74:75:b0:73:78:d6:5d:3f:3f:93:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:80:5F:18:EF:50:58:7F:B5:31:C0:DC:CE:D5:1D:2C:9D:A1:4E:86
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:86:df:48:34:18:34:79:bd:23:96:b5:04:06:22:9f:ec:01:
         23:23:01:d7:fa:88:b4:5b:a8:b8:6c:20:77:77:10:2b:5a:dc:
         34:9f:69:ac:7e:8c:c3:b7:84:af:c2:45:cd:17:77:52:49:9d:
         63:fe:80:55:5e:96:eb:db:72:80:71:fd:c8:88:bb:06:94:56:
         37:59:2a:28:f9:ab:20:bd:d5:b2:fd:35:ca:ec:f3:08:34:37:
         42:1a:78:4c:57:9a:59:0d:fb:a6:ea:b2:c6:7a:a6:cc:1b:55:
         97:b9:d3:41:e3:69:96:7f:9c:cf:c0:ba:6c:c7:a5:c5:bc:c0:
         1e:9d:d8:46:29:30:7b:d7:1c:58:c0:b6:91:58:83:85:1f:ae:
         df:07:60:32:78:c3:d9:53:c4:d2:31:05:11:fb:8e:a2:47:aa:
         61:43:5d:29:63:6a:b2:00:a2:69:2e:0d:e2:ff:16:c4:e9:ae:
         7f:7c:3d:95:5f:2b:c6:b9:5f:8e:44:ef:51:85:70:bc:1b:31:
         84:49:d4:d5:ac:99:83:4c:77:47:60:8e:af:48:4a:e2:25:67:
         b2:15:a9:3c:4a:39:dc:a9:d5:ad:7a:ce:fa:19:7c:85:13:35:
         a9:8f:7d:11:46:b0:ca:3b:cb:91:b7:5e:74:d2:e5:ab:98:7e:
         0e:48:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:41 2026 by rpki-client