Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File:                     NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier:          UZAQ68yk5G5Ig7+qAHfgltDFWEM8GQEiuCsWVUCn6Lk=
Subject key identifier:   AC:44:E0:AF:5E:1A:87:B3:8E:3E:62:8A:F6:06:24:8F:C5:27:DE:9E
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer:       /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial:       01A1DEDE4901C3048F17B4A3CD2600DDBAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number:          1827
Signing time:             Sun 15 Nov 2026 11:01:11 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:11 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:11 +0000
Files and hashes:         1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=)
                          2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=)
                          3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=)
                          4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: oIgYMeWBowzmOhvog+8idiuPKBOVYXYvPL9pXkEEOu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:49:01:c3:04:8f:17:b4:a3:cd:26:00:dd:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
        Validity
            Not Before: Nov 15 11:01:11 2026 GMT
            Not After : Nov 16 11:01:11 2026 GMT
        Subject: CN=ac44e0af5e1a87b38e3e628af606248fc527de9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:8e:9b:9c:09:25:64:14:ae:51:f4:ed:38:
                    1b:31:0a:10:97:e1:b0:f5:63:c6:05:73:a3:56:86:
                    df:99:13:71:85:44:ef:b4:fa:8d:ba:73:9e:6c:ed:
                    36:90:92:19:72:6f:a2:c3:c0:b4:be:ad:b8:dd:fa:
                    32:fa:7f:93:84:2c:ad:41:4d:cd:7e:ba:70:ec:cd:
                    aa:e5:6e:db:b4:b9:8e:d6:0d:19:2a:13:ba:4b:9c:
                    e8:48:bb:e2:0c:2f:ee:81:ef:15:a0:87:d0:1f:c5:
                    55:58:52:ea:02:9a:b8:d7:85:ae:16:ec:2c:a9:7b:
                    a5:31:12:a9:10:0c:49:50:93:f9:29:b3:3f:13:49:
                    4f:47:8d:11:83:82:c0:14:f1:0d:18:73:11:1a:e0:
                    5d:93:f8:9d:49:d1:75:fa:ec:59:67:15:f8:87:6a:
                    97:67:bc:6e:1a:4b:a7:11:72:d3:14:c4:a2:d4:74:
                    f7:0a:c2:2c:bf:18:14:96:80:db:50:89:df:c3:78:
                    63:96:99:54:f6:81:68:22:4f:af:24:6e:38:9f:f3:
                    84:a3:82:6c:38:fb:0d:61:95:ab:5d:d6:b4:15:81:
                    55:36:2a:a4:a3:b8:0d:90:88:b2:4b:f2:1e:a3:88:
                    4c:7e:a3:9c:ca:6a:db:a2:6a:66:13:eb:ff:59:1f:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:44:E0:AF:5E:1A:87:B3:8E:3E:62:8A:F6:06:24:8F:C5:27:DE:9E
            X509v3 Authority Key Identifier:
                keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:5c:7a:51:b6:48:b3:2b:98:f3:1b:ed:8b:13:2f:80:0d:
         ad:9c:13:1a:3c:d2:73:fe:f1:97:ce:14:ee:a2:54:37:be:17:
         e3:ab:72:0c:3e:55:c2:27:b5:4d:da:90:03:2d:2d:27:52:36:
         f3:3e:49:33:e6:4f:ca:91:f8:c1:08:54:f6:7b:87:79:a6:e0:
         a0:e6:84:03:cb:ef:a5:10:aa:f1:47:2b:0e:d5:aa:92:f6:50:
         79:fd:35:67:99:3e:2c:6d:52:f8:f8:65:7f:55:24:2a:b2:fc:
         7f:a2:e9:54:10:13:a5:05:88:96:3c:86:9d:8f:b8:30:f0:20:
         1d:e2:c9:4e:6d:c7:96:7b:81:1c:ce:a0:17:4f:ec:4b:80:11:
         f2:96:e0:28:74:7e:c2:6d:b2:e4:76:f6:f9:3d:3a:2c:0b:4b:
         02:76:5b:1a:e9:47:cf:81:e7:1f:00:cc:a8:c6:4e:e5:70:72:
         ac:11:d0:d6:5f:ad:02:bd:70:3a:b1:af:8a:85:c5:42:d3:6f:
         87:2c:2c:74:da:70:9b:d2:7a:6b:42:ac:e0:5f:03:a9:f3:cb:
         ba:86:5b:c3:77:5b:6b:66:92:c7:8c:ea:93:53:48:b6:c4:ab:
         a7:c7:ae:95:25:03:4f:46:b5:32:b6:a6:27:b4:76:fe:76:f0:
         d0:58:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:14:55 2026 by rpki-client