Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File:                     NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier:          /oRfmVZQKpV7zEnRO0DbQyjn73Y9Uq9gNTr5heUr0vU=
Subject key identifier:   27:39:CF:14:7D:3B:9A:E4:4F:83:8D:CD:67:AE:9F:E9:9A:ED:D0:EF
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer:       /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial:       01A102B705BC64D1B752C2D64CD59C726414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number:          07CB
Signing time:             Sat 03 Oct 2026 17:01:51 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:51 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:51 +0000
Files and hashes:         1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: T+F/PmdTnEeiePTU9KKLxbuiEwovpfoSoXaGeeMQH6U=)
                          2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 17:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b7:05:bc:64:d1:b7:52:c2:d6:4c:d5:9c:72:64:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
        Validity
            Not Before: Oct  3 17:01:51 2026 GMT
            Not After : Oct  4 17:01:51 2026 GMT
        Subject: CN=2739cf147d3b9ae44f838dcd67ae9fe99aedd0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:5a:b9:3f:1b:cf:0e:6a:d5:97:36:34:ca:
                    05:a4:ab:3b:ba:98:84:c7:46:1b:8e:fa:3a:44:3c:
                    4f:ac:9e:43:c3:58:06:e0:67:65:5d:1f:3a:81:1b:
                    a6:41:43:fd:85:62:b5:8b:d6:a6:ff:48:be:70:ca:
                    ce:b4:ee:19:97:e1:56:54:45:69:bc:6d:c9:6e:35:
                    2d:b2:f6:fe:f2:f7:1d:78:66:38:fd:d6:c3:b4:54:
                    4a:fb:1d:86:3d:0d:64:5f:31:8c:e2:87:cf:f8:21:
                    40:8d:72:3c:b0:e2:23:7f:4d:8b:6b:dd:2b:06:c7:
                    44:be:74:d2:9e:9a:1b:3d:b4:c5:5b:10:1c:c1:60:
                    fc:b7:74:63:76:68:67:1f:6d:0a:05:d0:ef:16:33:
                    1c:b5:fa:86:37:a3:84:bd:8a:fc:0c:b0:f5:6f:ed:
                    a6:e0:1a:30:e3:52:1e:76:72:ef:b0:c5:99:49:7a:
                    75:79:37:7b:bc:72:76:a3:e3:3c:c3:e2:79:2a:e6:
                    44:db:88:d1:d6:1d:db:a8:c1:d6:3b:ea:b1:b7:cc:
                    86:47:cd:a7:9f:6f:5d:bc:b5:0f:0b:a7:4e:88:c8:
                    ea:c8:49:cb:ec:ad:dd:8b:23:34:8a:bc:c7:ad:a4:
                    c1:8a:68:17:f7:5f:64:f8:e6:5a:6a:46:f6:35:54:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:39:CF:14:7D:3B:9A:E4:4F:83:8D:CD:67:AE:9F:E9:9A:ED:D0:EF
            X509v3 Authority Key Identifier:
                keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:7f:81:4a:f0:80:49:a3:f6:67:d8:71:80:9f:5f:55:d6:
         cf:68:23:be:6e:71:34:b7:03:8d:00:e1:4c:2a:4c:63:db:e4:
         82:63:37:b6:d9:39:7c:77:05:5f:07:6a:37:c6:5f:94:60:e6:
         66:dd:63:09:9c:07:82:72:4a:4e:ea:ed:5f:1c:26:f7:65:68:
         f1:d5:e3:5f:d9:de:a7:fe:61:be:54:f9:01:2c:dd:df:cd:45:
         24:a8:bd:89:ec:9b:75:83:4b:60:fd:4c:71:b9:cf:a4:c1:59:
         da:89:12:9d:bd:82:48:8b:14:55:78:e6:02:55:5a:b9:2f:b3:
         b2:f3:24:ec:2b:be:38:3f:df:35:03:1e:0f:21:64:78:14:e4:
         c4:0e:b6:1c:3c:cf:e4:fa:e5:c5:9f:c5:78:d1:4f:5a:5b:d8:
         7a:8f:2b:70:b4:69:5e:16:ef:58:77:6a:87:1e:77:2d:88:2f:
         44:90:12:cd:17:a8:34:04:1c:75:99:42:d8:a1:8d:1c:8c:83:
         78:18:b7:f8:41:a3:04:b3:8b:54:65:4d:43:0c:90:9f:6e:cf:
         ab:f8:61:ad:5a:d5:98:bc:d4:77:c7:66:c5:58:53:a4:38:54:
         6d:8d:d6:76:c0:db:16:c9:78:92:bf:45:5f:25:6d:ad:22:c7:
         b1:02:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:32:45 2026 by rpki-client