Manifest

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
File:                     2C77A3613F2060464C86A5089694D4208F24485E.mft (raw, json)
Hash identifier:          Fs0OMwZBxo0f2U2fs0tB9ZYn93lrgHg/oO2nnetACuk=
Subject key identifier:   BC:D2:40:07:C9:A7:86:5C:36:95:37:C9:60:A7:1B:FD:5C:20:C0:FC
Authority key identifier: 2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E
Certificate issuer:       /CN=2c77a3613f2060464c86a5089694d4208f24485e
Certificate serial:       5E46AE69BEF8A98B0651E7AB3CD011586C66D0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
Manifest number:          2A
Signing time:             Sat 14 Nov 2026 11:43:21 +0000
Manifest this update:     Sat 14 Nov 2026 11:38:21 +0000
Manifest next update:     Sun 15 Nov 2026 12:06:21 +0000
Files and hashes:         1: 2C77A3613F2060464C86A5089694D4208F24485E.crl (hash: m2rfIDRfJ/CaPilS6K7VwBXirnc3Xvk0WTkLzCkoH28=)
                          2: AS218904.asa (hash: w1rpsbeePX1KlGHWNPap7eonVhkKphQad/RXjX0DZx0=)
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:ae:69:be:f8:a9:8b:06:51:e7:ab:3c:d0:11:58:6c:66:d0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c77a3613f2060464c86a5089694d4208f24485e
        Validity
            Not Before: Nov 14 11:38:21 2026 GMT
            Not After : Nov 15 12:06:21 2026 GMT
        Subject: CN=BCD24007C9A7865C369537C960A71BFD5C20C0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:12:8a:c8:b1:25:79:5c:f0:ae:f9:71:26:
                    06:9c:79:53:4c:bf:ad:f2:25:60:80:35:4e:33:78:
                    31:e1:3e:e6:38:22:36:d6:9f:2d:03:df:df:00:39:
                    cc:6e:a4:5e:ba:e1:1d:4e:ee:8e:92:e2:22:46:cc:
                    56:cc:ff:1f:aa:f5:59:e9:06:8c:85:fd:ce:22:44:
                    38:5c:20:28:2b:0f:f4:73:55:66:a0:c2:67:e1:04:
                    0b:cf:19:de:73:10:69:0a:1d:f0:15:e0:74:9b:7f:
                    04:b4:bc:44:04:b1:38:e9:3f:c2:2c:b3:94:e1:73:
                    3a:59:33:2c:a0:ff:31:db:af:50:32:2c:a1:e2:a4:
                    b3:79:d3:2c:0c:71:f7:6a:f9:01:2d:3d:6e:2b:16:
                    d9:42:6e:6f:f2:de:f0:ea:ec:a6:0b:44:5d:1c:24:
                    bb:9f:b5:cf:0f:3e:aa:b8:94:bd:bd:7c:66:a7:fa:
                    7a:94:82:7d:37:60:87:fa:1f:5b:3b:d4:66:74:e0:
                    3a:03:a2:2c:bd:71:bb:cb:ca:3a:fc:08:6f:6c:b2:
                    ea:b1:7b:37:cb:7e:66:b6:f8:69:da:65:1d:82:3e:
                    e1:3a:0f:d1:d4:6d:b3:93:cb:80:3f:06:5e:da:3b:
                    e0:fc:8d:eb:8a:9e:6f:7e:68:bc:27:02:7f:22:0f:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D2:40:07:C9:A7:86:5C:36:95:37:C9:60:A7:1B:FD:5C:20:C0:FC
            X509v3 Authority Key Identifier:
                keyid:2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:68:bc:75:4a:23:c2:31:a9:af:db:b9:a7:81:94:f4:c2:
         82:d7:1d:09:fb:d0:13:49:00:70:b3:c5:cb:2a:6e:96:a2:97:
         5d:b4:87:0f:04:7e:6c:a8:a2:30:05:cc:64:5c:16:dd:a0:41:
         7e:6a:f6:d1:0b:27:38:00:8d:3b:37:22:65:8d:b7:ac:eb:f7:
         db:62:10:49:32:89:7d:f1:f4:63:dd:25:47:80:52:ae:eb:82:
         a3:bc:f9:91:9c:ba:8d:57:5c:13:ec:b1:04:c8:08:09:ec:fd:
         df:94:07:29:c9:0e:f6:06:c7:88:e5:ee:0d:28:93:03:ce:b4:
         77:e3:8d:72:9c:58:be:1b:91:d7:7e:7a:18:74:37:08:49:45:
         b5:fb:b9:f4:1e:91:56:07:a6:b3:50:0a:8a:e4:f2:56:a7:2d:
         c1:fc:d2:99:0b:43:4a:47:2a:1a:23:17:ee:41:22:34:17:97:
         2f:f3:d1:5e:de:11:f5:16:52:f9:0c:2a:63:a0:07:0a:11:72:
         6a:7f:05:88:72:33:9f:d8:8c:96:9c:b8:33:db:4c:5a:c9:cb:
         ff:67:d7:e3:8d:24:39:15:8f:5c:4a:e6:ae:60:01:db:08:bd:
         10:cb:33:93:a5:a0:28:0b:69:67:9f:02:7b:cd:2c:4e:4d:f6:
         96:65:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:11 2026 by rpki-client