Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File:                     NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier:          g7I240O4VUjDICh/2js5kBNZkNHjMnQ441uIgqUUWko=
Subject key identifier:   AC:BF:B5:26:47:61:8D:8C:F7:6D:07:02:E1:CD:B0:BB:AD:DD:A3:A1
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer:       /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial:       01A0ED78AB63A2F5FCAC468B4C03DFD1B68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number:          1658
Signing time:             Tue 29 Sep 2026 14:01:43 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:43 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:43 +0000
Files and hashes:         1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=)
                          2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: 1XXlw+GTRhIw1CReB9ZUHIRICZ2oKNpjX1P/Fa1vutg=)
                          3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=)
                          4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:ab:63:a2:f5:fc:ac:46:8b:4c:03:df:d1:b6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
        Validity
            Not Before: Sep 29 14:01:43 2026 GMT
            Not After : Sep 30 14:01:43 2026 GMT
        Subject: CN=acbfb52647618d8cf76d0702e1cdb0bbaddda3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:9a:d4:24:bf:1f:8a:1b:a2:c9:94:b1:46:
                    7e:22:df:85:65:c5:7a:86:41:94:35:6c:b0:64:40:
                    5a:ca:e5:81:68:1a:42:45:5b:ce:26:8c:ed:dc:2d:
                    2c:2b:6a:f2:a4:f6:c5:29:01:d4:7e:3f:ec:f3:51:
                    f3:04:2b:f6:23:77:73:18:05:1c:83:18:d8:03:d7:
                    80:cf:73:69:e9:51:79:8a:45:89:30:73:d8:b3:cd:
                    c1:53:4a:4a:65:f1:25:32:15:2c:68:3e:de:d1:22:
                    ee:5a:88:55:32:af:33:d0:02:23:33:a3:d6:cf:36:
                    c4:1d:67:15:96:50:85:04:29:46:8b:2e:18:34:c0:
                    ec:51:6d:5e:33:a1:59:a7:f3:43:4e:fc:52:8a:19:
                    72:83:32:41:24:13:4a:eb:47:50:44:a2:43:fe:58:
                    75:97:98:8d:76:d5:82:54:f7:8f:53:c9:e8:46:c6:
                    41:2b:57:6f:4b:56:bf:9b:12:58:8f:a3:8f:56:75:
                    79:c9:86:ee:3d:15:cb:91:19:c7:f9:01:7e:e1:54:
                    06:8e:ce:b1:26:02:f3:4e:09:4f:c4:92:0e:31:62:
                    25:9d:2e:ca:5a:9a:4e:62:e1:ba:aa:f6:f6:49:66:
                    fb:fd:90:dd:a8:f5:fe:ff:3a:13:02:cc:18:99:16:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:B5:26:47:61:8D:8C:F7:6D:07:02:E1:CD:B0:BB:AD:DD:A3:A1
            X509v3 Authority Key Identifier:
                keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:1f:fa:70:1d:ef:88:8d:1b:94:89:cd:b8:6f:0e:cf:a6:
         2f:06:f2:70:86:d1:1d:e3:96:94:0d:66:5d:af:60:36:57:47:
         02:ce:4b:a2:31:ce:25:a8:df:6f:0e:62:37:6a:6f:be:7f:1d:
         43:66:cc:37:8b:80:50:98:4b:4b:07:a3:d8:6b:6a:76:66:3e:
         78:ba:3e:05:54:02:6d:2c:77:b5:9a:f0:ea:e4:bd:47:a8:6f:
         11:49:37:88:d1:b2:f1:ad:3e:de:34:35:99:35:95:b0:16:98:
         9d:86:f2:6d:bb:02:0d:18:ec:2b:87:ef:00:aa:2d:06:7d:6b:
         b2:2e:e2:15:63:7b:98:84:d3:a2:65:3c:f2:d1:1f:91:70:0a:
         da:bc:c9:fc:dd:7e:d9:c2:89:28:00:03:5f:2f:a0:22:f5:39:
         3d:f7:d2:5d:84:82:ea:e3:92:8e:0e:7f:4c:b2:7a:02:ef:55:
         98:7d:36:0c:e8:45:83:23:41:75:e5:da:3f:6b:d3:ac:df:04:
         06:89:38:51:cc:69:14:22:a1:e9:a2:8d:e4:51:6b:88:9d:4b:
         1c:ac:09:ba:a9:5d:44:d9:93:43:b2:a7:e0:9f:75:07:3d:54:
         af:aa:2b:60:09:25:11:f1:c6:f7:36:91:34:78:03:a4:00:fa:
         3c:87:16:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDteKtjovX8rEaLTAPf0baLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjYwOTI5MTQwMTQzWhcNMjYwOTMwMTQwMTQzWjAzMTEwLwYDVQQD
EyhhY2JmYjUyNjQ3NjE4ZDhjZjc2ZDA3MDJlMWNkYjBiYmFkZGRhM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSaa1CS/H4obosmUsUZ+It+FZcV6
hkGUNWywZEBayuWBaBpCRVvOJozt3C0sK2rypPbFKQHUfj/s81HzBCv2I3dzGAUc
gxjYA9eAz3Np6VF5ikWJMHPYs83BU0pKZfElMhUsaD7e0SLuWohVMq8z0AIjM6PW
zzbEHWcVllCFBClGiy4YNMDsUW1eM6FZp/NDTvxSihlygzJBJBNK60dQRKJD/lh1
l5iNdtWCVPePU8noRsZBK1dvS1a/mxJYj6OPVnV5yYbuPRXLkRnH+QF+4VQGjs6x
JgLzTglPxJIOMWIlnS7KWppOYuG6qvb2SWb7/ZDdqPX+/zoTAswYmRbKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy/tSZHYY2M920HAuHNsLut3aOhMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmwf+nAd
74iNG5SJzbhvDs+mLwbycIbRHeOWlA1mXa9gNldHAs5LojHOJajfbw5iN2pvvn8d
Q2bMN4uAUJhLSwej2GtqdmY+eLo+BVQCbSx3tZrw6uS9R6hvEUk3iNGy8a0+3jQ1
mTWVsBaYnYbybbsCDRjsK4fvAKotBn1rsi7iFWN7mITTomU88tEfkXAK2rzJ/N1+
2cKJKAADXy+gIvU5PffSXYSC6uOSjg5/TLJ6Au9VmH02DOhFgyNBdeXaP2vTrN8E
Bok4UcxpFCKh6aKN5FFriJ1LHKwJuqldRNmTQ7Kn4J91Bz1Ur6orYAklEfHG9zaR
NHgDpAD6PIcW2g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:26:56 2026 by rpki-client