Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File:                     NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier:          alCwUSMPAnNDyJpUabTHQnEO3aQGbTq9kPi1TroNt5A=
Subject key identifier:   72:94:68:24:7E:30:17:0B:D2:37:7A:2B:F1:03:05:72:CB:A9:54:27
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       01A0D539337A291496C812E12E6650BCA98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number:          1A71
Signing time:             Thu 24 Sep 2026 21:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:30 +0000
Files and hashes:         1: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: 9VWcL9AjxF2MtMHaAo5iVL1GA1HNCs630Fs2xPhxxD0=)
                          2: pl6PNo8hUrBCcmdPr6uyLCgo9LE.roa (hash: JUhZmiTLChpqRA0MSl5whEAJwGew2IlHkB2zV8iZ9V4=)
                          3: sg3Ew_-j8eSBsSEqujV82pVTpmY.roa (hash: u5sONjGdKQ7+lq8JPUBVxgSwpY1PR0uLjyPXqaXUKG4=)
                          4: teABFGsGVj_scwJjrE3mhP8dVpQ.roa (hash: 2hJ5yRJDHs67/jo71c3Tu7rhezA7dGIjE7rutPTVstE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:33:7a:29:14:96:c8:12:e1:2e:66:50:bc:a9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Sep 24 21:01:30 2026 GMT
            Not After : Sep 25 21:01:30 2026 GMT
        Subject: CN=729468247e30170bd2377a2bf1030572cba95427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:77:08:37:7d:98:3c:d3:09:6c:0b:21:c1:
                    ac:e4:68:38:1f:e7:85:2e:73:b4:bc:46:16:a5:ce:
                    97:ed:c7:de:3e:8a:a5:63:24:41:21:dd:dc:7f:80:
                    e6:ba:39:a5:c1:cc:a9:58:60:98:3a:67:13:ef:92:
                    ea:d0:02:49:76:90:eb:9a:37:fe:78:81:78:56:b1:
                    bb:dd:fb:c0:7a:c7:6c:1f:67:45:24:3b:b0:9b:fa:
                    d6:3b:c8:65:f6:3f:18:3a:3e:7c:02:9d:d1:b0:32:
                    76:3b:b6:70:52:4f:d9:1b:35:0f:a7:d9:8a:f2:f6:
                    52:fa:4f:39:10:a9:55:be:35:02:56:ee:91:0e:07:
                    e6:0c:22:19:8e:11:7d:50:a2:76:24:54:3a:e1:01:
                    c8:7d:61:a9:d8:13:2d:e4:c4:b6:a7:f0:53:e2:c9:
                    c6:35:fb:e2:56:a2:af:8a:25:c7:f8:fc:4e:1e:20:
                    90:59:56:75:0c:de:9c:89:6b:b0:a3:2e:ab:36:16:
                    18:ea:76:18:6f:4c:67:a8:b6:26:fe:da:be:9b:9a:
                    c4:4d:fd:26:bb:df:5f:5d:a9:83:78:9c:7e:4c:49:
                    52:e3:21:53:53:a7:e1:90:cf:97:b5:cb:da:50:88:
                    90:06:4f:9b:68:d8:3b:fb:3a:cc:2b:88:4f:cc:f1:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:68:24:7E:30:17:0B:D2:37:7A:2B:F1:03:05:72:CB:A9:54:27
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:89:8e:8c:2e:72:9a:6f:5e:96:2a:9b:a5:12:a1:09:11:
         d9:ae:09:aa:f0:ac:46:5e:ba:aa:9d:46:de:57:d6:27:d7:33:
         5c:ab:d6:5f:e5:3d:89:a1:2b:90:4b:5a:0b:8e:70:b8:a9:ad:
         42:3e:e6:86:1e:c3:4d:39:d6:db:ae:9c:fa:18:96:e0:ff:62:
         e7:96:ca:93:67:8b:4f:da:34:5e:6e:34:17:99:92:28:85:f7:
         57:ef:37:6d:b1:b1:76:7e:11:43:31:42:48:9b:b5:fc:41:00:
         47:60:ae:35:c3:87:d2:a9:c6:b5:fa:6e:82:59:af:49:9e:26:
         5a:d4:47:db:9d:00:29:3c:e5:a4:c8:0d:9f:8c:8a:70:b2:c5:
         9b:ca:04:42:97:50:7a:ac:0c:e8:9a:cb:51:30:b0:67:21:f3:
         c4:9f:92:a9:0f:da:f5:65:0c:67:e3:67:53:46:70:3a:ca:c9:
         e4:8d:43:c3:3e:d2:0f:03:87:9f:01:c2:c0:91:2f:1f:50:99:
         05:2a:43:63:51:2d:b9:8a:9b:31:b8:ad:11:f3:74:b2:25:0d:
         6d:cb:3b:0f:6a:ef:f0:cd:0a:15:c4:f6:5e:b9:b5:ef:0d:6f:
         16:61:98:de:e8:1c:ec:21:d2:7f:c7:d5:d5:be:8c:7c:18:23:
         dc:0b:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:20:30 2026 by rpki-client