Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File:                     NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier:          qaNRI3UG4p4tCbP3GMTOV5HXn/QhRtoI/M9Z/tZjO0s=
Subject key identifier:   21:9A:32:C4:59:FA:D6:9A:55:3D:23:5C:42:30:90:CF:AC:CF:42:16
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer:       /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial:       01A0E1E2367D1D97079E9FE64264B44F6A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number:          177A
Signing time:             Sun 27 Sep 2026 08:01:33 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:33 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:33 +0000
Files and hashes:         1: IEePDjWIaVXLuW3itE_AzBzTOC4.roa (hash: vnmA7r4TvlqCSHwR52jJ5zRprAPhiYq8N3EloxYQoI4=)
                          2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: M5mQozjZrQsInVEdX+kgkbXch75JrfPr3cqeRvCirZQ=)
                          3: O5Y2NwPNUGHcqnEAv2khEfuYfww.roa (hash: wxeDJgWK/O5UPofjmWqVX0YN/5RLHzZTTnSEdLWmG9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:36:7d:1d:97:07:9e:9f:e6:42:64:b4:4f:6a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
        Validity
            Not Before: Sep 27 08:01:33 2026 GMT
            Not After : Sep 28 08:01:33 2026 GMT
        Subject: CN=219a32c459fad69a553d235c423090cfaccf4216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:5d:5b:75:3e:ae:29:26:f6:c4:8d:f7:46:
                    f2:aa:61:f1:27:9e:8e:e1:b0:5e:08:25:0f:21:48:
                    6b:ed:7a:f5:cf:50:18:1e:a4:a5:96:75:ba:0f:c1:
                    63:da:af:c0:5d:5f:38:70:2c:8b:08:5a:3b:7b:39:
                    ef:c4:08:b1:7d:30:86:cb:d7:7a:62:06:39:ed:22:
                    a9:fb:c9:a1:79:b8:30:6c:b3:a8:a5:ae:5e:a0:3b:
                    97:9a:dd:6c:e8:6a:00:ff:c4:97:14:e1:dc:af:0e:
                    d0:e3:ef:88:14:d8:ed:49:0d:07:3f:19:97:da:93:
                    12:e2:84:69:61:85:03:fc:b1:30:75:eb:1d:d5:ef:
                    80:f2:37:a1:e4:d6:37:e2:a2:d7:54:90:7b:41:aa:
                    26:63:2d:c3:bd:1a:1e:b4:d9:cf:89:05:91:38:67:
                    c7:9f:95:01:b6:67:e9:d6:8a:15:18:51:0e:98:60:
                    4b:25:98:2c:1c:a9:25:c7:fd:4f:52:2a:fd:51:4e:
                    cf:97:6b:8d:39:1c:71:c0:9b:86:47:d8:a2:35:87:
                    a5:99:9c:4e:b0:c9:a1:74:a9:0a:33:25:55:07:0e:
                    74:fe:14:e6:ed:81:5b:08:df:fc:d5:9a:ec:6d:19:
                    68:5b:56:c3:39:e0:5a:08:56:e0:d8:95:61:b7:8b:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:32:C4:59:FA:D6:9A:55:3D:23:5C:42:30:90:CF:AC:CF:42:16
            X509v3 Authority Key Identifier:
                keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:97:49:34:ae:02:52:f7:ab:5e:8b:8c:1b:70:b4:f2:47:
         2e:7c:ff:c9:05:c6:46:f9:04:d7:5d:a9:2a:e4:57:3b:9e:e0:
         d8:2e:63:39:90:71:f5:3f:ab:52:f0:3a:fd:0b:02:08:72:32:
         56:9f:ca:15:42:3b:af:6d:ee:56:8c:e7:92:da:d8:df:5c:3a:
         db:bd:31:5a:fd:64:a5:2e:a7:c5:f8:b4:f8:6f:1c:84:0b:7e:
         85:d2:54:04:58:6f:0a:22:ff:e2:98:ab:cf:c8:1c:50:77:90:
         f6:51:15:e6:cf:a7:1c:e7:5f:14:83:7c:e1:d5:72:b4:47:fd:
         fc:96:59:d4:11:8b:1d:84:45:3d:78:26:92:e1:6c:0a:e9:06:
         5c:3b:d5:92:22:98:43:d2:c4:63:82:29:5c:ca:3b:9a:78:84:
         c3:3e:5c:88:f4:fc:9b:cc:ad:a9:90:4a:42:9b:ca:df:14:ed:
         91:8f:ab:26:f9:24:61:52:33:8e:55:b7:e1:f1:f4:de:a4:4f:
         8f:86:08:af:4a:80:35:df:e8:cb:4e:84:18:7f:7c:7d:68:26:
         ae:41:6e:99:ad:84:04:ea:05:c0:59:a6:af:92:a8:9b:ec:9d:
         64:66:d2:2e:bb:a3:3a:cc:80:df:32:02:c9:ce:d6:67:36:52:
         96:ee:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:27:20 2026 by rpki-client