Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          PhPjW54UQSAbTiEwHrWHIJyI9TXbAg4sT2OyYl2xlfQ=
Subject key identifier:   AB:F6:FB:70:D1:B7:32:78:89:CB:6F:CB:18:60:26:7C:B3:54:14:08
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       019D2816C9072AD62DD8C7DC9BD451747E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1644
Signing time:             Thu 26 Mar 2026 03:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:15 +0000
Files and hashes:         1: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (hash: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk=)
                          2: 8vxStV176PVhHBrk8PFYjrws9_k.roa (hash: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: cZti0vMY9M0MiREVaftLnoRDwUcYJzHUqHO8I1M1XzI=)
                          4: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (hash: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA=)
                          5: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (hash: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:c9:07:2a:d6:2d:d8:c7:dc:9b:d4:51:74:7e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Mar 26 03:01:15 2026 GMT
            Not After : Mar 27 03:01:15 2026 GMT
        Subject: CN=abf6fb70d1b7327889cb6fcb1860267cb3541408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:c7:8b:09:37:f0:4a:25:70:57:81:4c:bc:
                    3f:9a:c0:5b:67:db:3b:bd:35:94:30:7c:25:e3:69:
                    01:dd:59:a8:2a:95:4f:b0:b7:49:ac:23:62:05:a2:
                    a3:4a:04:3e:24:b2:29:f1:59:db:5c:4a:0b:9f:26:
                    d4:0a:1c:97:62:4e:35:8e:5b:e0:c3:e6:6a:9f:61:
                    55:1f:35:5f:32:0a:73:67:54:3d:eb:1c:6a:ce:87:
                    31:24:d0:c1:04:3f:8e:8c:85:7a:f4:7b:a3:46:bb:
                    dd:81:27:5c:22:25:c5:7f:0c:39:8d:cb:a0:be:9b:
                    fd:47:54:b3:61:2b:2a:5e:9d:36:21:50:50:e1:54:
                    61:88:0c:81:03:4f:16:95:56:1b:fd:01:30:b4:61:
                    ff:01:df:71:af:b6:ee:be:e8:12:c0:ec:49:53:8d:
                    2f:35:9b:03:37:4c:cf:b1:5c:a0:60:ad:77:cc:76:
                    48:50:0e:89:e5:7c:0b:8a:fa:ef:65:39:2e:93:a5:
                    78:9e:65:f8:6a:08:84:bf:94:ff:98:88:d9:5f:4f:
                    c4:4b:47:c2:f7:45:26:a7:3f:f3:06:cc:59:c1:34:
                    f7:4b:91:30:e9:4f:ac:16:f8:d9:ee:17:ff:31:97:
                    7e:8b:ef:d9:2d:ec:58:fe:c9:44:c2:fc:84:5f:34:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F6:FB:70:D1:B7:32:78:89:CB:6F:CB:18:60:26:7C:B3:54:14:08
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:82:0f:37:5b:fa:f4:39:f3:d2:d1:f4:04:d6:09:00:47:21:
         55:59:fe:0d:7a:72:95:57:86:c2:39:42:c8:f3:e1:3d:49:d7:
         9f:4d:ae:72:45:36:f8:cf:b3:dc:20:72:0c:cc:7d:1a:b2:a1:
         f1:02:01:9e:1f:f0:73:57:52:bb:28:f2:9e:90:71:57:82:f3:
         6b:50:cc:65:e9:6d:89:3f:76:96:e8:21:6c:ba:c7:06:de:80:
         c1:db:1c:fd:9b:45:e9:65:17:65:ce:98:32:d4:ee:07:ee:5b:
         c6:cb:5c:3e:d9:26:fc:c1:82:87:e2:8f:61:8e:d0:ec:92:64:
         8c:e8:7c:43:39:12:61:43:e5:29:33:92:cc:c1:63:8d:83:90:
         71:ca:74:f8:71:57:d5:3c:ed:26:39:4d:5c:bd:3e:53:24:fb:
         16:80:2d:43:d7:31:39:57:bf:9d:07:41:22:8c:ec:8e:54:84:
         f2:f4:de:6d:30:fa:ef:e7:33:2c:d3:51:4e:27:a2:ab:12:e3:
         c0:32:e0:b8:60:59:03:33:84:8c:fb:a6:6b:43:85:67:d9:ac:
         84:1e:2e:90:7c:fd:22:aa:4a:6f:30:c7:1a:e4:b7:71:95:49:
         98:ad:39:13:fb:fc:ab:84:23:de:16:5b:2c:86:ec:8a:2e:11:
         62:f6:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:06 2026 by rpki-client