Manifest

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.mft
File:                     84AF889971A5166A7A0E35C1DC13FFD7B8C96670.mft (raw, json)
Hash identifier:          7PB9tdYttXHwCXwusdQESuVJqEJoB7WzSSZZB2AxkB4=
Subject key identifier:   6D:03:E1:A9:A5:04:CC:57:54:8E:B8:9D:E6:CF:18:B1:DB:3A:0F:27
Authority key identifier: 84:AF:88:99:71:A5:16:6A:7A:0E:35:C1:DC:13:FF:D7:B8:C9:66:70
Certificate issuer:       /CN=84af889971a5166a7a0e35c1dc13ffd7b8c96670
Certificate serial:       3CF8618E16594B7D9E9542BEBD9EDFC55C93C448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hK-ImXGlFmp6DjXB3BP_17jJZnA.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.mft
Manifest number:          24
Signing time:             Sat 14 Nov 2026 15:23:21 +0000
Manifest this update:     Sat 14 Nov 2026 15:18:21 +0000
Manifest next update:     Sun 15 Nov 2026 16:07:21 +0000
Files and hashes:         1: 84AF889971A5166A7A0E35C1DC13FFD7B8C96670.crl (hash: /A/Z6WiZbQOeLt4uwW8t9Arcn1Iap/rW6dF4mt+jpIM=)
                          2: AS204464.asa (hash: LQ2Q0p6k7EaxSNPaIAZQr5vXwuXkPnswdDRgQekRI+I=)
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hK-ImXGlFmp6DjXB3BP_17jJZnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f8:61:8e:16:59:4b:7d:9e:95:42:be:bd:9e:df:c5:5c:93:c4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84af889971a5166a7a0e35c1dc13ffd7b8c96670
        Validity
            Not Before: Nov 14 15:18:21 2026 GMT
            Not After : Nov 15 16:07:21 2026 GMT
        Subject: CN=6D03E1A9A504CC57548EB89DE6CF18B1DB3A0F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:f0:fd:ff:a9:28:1c:f9:d8:f9:19:62:8e:
                    a8:77:6e:3d:d6:89:06:29:6d:d2:15:e7:0c:97:dd:
                    4e:5f:e3:ea:f5:d3:3e:e4:85:f6:00:93:84:c8:88:
                    9a:15:dc:c9:40:1c:b3:90:9f:61:47:96:f6:b8:e7:
                    d1:93:05:e7:17:ba:c8:de:8d:2f:f1:cc:56:7c:0b:
                    c6:ec:31:7e:8f:05:f3:5f:fe:85:16:4a:2b:9b:6e:
                    ef:17:85:8d:af:f1:a5:02:15:8c:3b:c9:7a:c0:f0:
                    5b:88:6b:56:03:2e:14:14:f0:00:ae:3b:ee:c8:6f:
                    bb:f3:9a:71:9c:0f:e2:17:cb:cf:ea:6b:51:8a:f8:
                    c5:72:75:41:c8:dd:6f:76:54:1c:1b:89:ae:87:eb:
                    f3:0d:cf:5d:44:64:ec:51:83:d9:bd:fe:7d:88:17:
                    a3:a6:67:3e:39:14:8d:e0:6b:0e:be:1c:6c:0d:28:
                    cf:e0:9b:08:7b:17:29:96:65:87:84:a0:0f:28:a5:
                    68:75:ea:59:a2:75:e4:7a:20:9a:d8:cc:db:a0:80:
                    ed:5b:ac:c9:b5:4b:fc:8e:88:4c:01:45:44:b9:c0:
                    cd:eb:4f:00:82:2c:06:b5:d8:fb:d5:bd:5a:4f:71:
                    7b:67:67:3c:b7:49:fd:b2:ff:3e:88:3d:3d:4e:7e:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:E1:A9:A5:04:CC:57:54:8E:B8:9D:E6:CF:18:B1:DB:3A:0F:27
            X509v3 Authority Key Identifier:
                keyid:84:AF:88:99:71:A5:16:6A:7A:0E:35:C1:DC:13:FF:D7:B8:C9:66:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-ImXGlFmp6DjXB3BP_17jJZnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/9/84AF889971A5166A7A0E35C1DC13FFD7B8C96670.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:27:e9:b4:6f:79:99:a0:06:b0:55:27:5e:5c:fd:11:c4:
         a0:0a:53:bc:d1:bc:3e:49:5f:8d:68:f6:3f:07:8c:56:31:8e:
         e4:bb:39:0c:8c:5b:3e:1d:93:45:c5:45:27:42:25:4e:09:fa:
         54:59:26:62:f8:ea:8e:68:cb:5d:27:6a:aa:d9:98:ab:58:4d:
         9f:70:11:fe:04:17:c1:6c:ed:1d:4a:02:45:33:c1:5d:d9:9f:
         08:45:e3:27:51:10:20:49:bd:84:83:cd:a0:1b:04:c8:39:4c:
         2a:02:aa:28:d1:49:13:59:73:7e:23:e2:e2:85:0f:89:03:a8:
         a2:35:78:9b:8b:78:08:95:0f:6e:52:6f:da:9d:b1:11:4d:11:
         52:2e:79:a5:3f:97:c5:b9:86:c3:eb:8a:1c:11:6f:70:ef:45:
         a8:eb:67:1d:70:2f:4c:5d:ea:a0:86:cb:47:be:6f:e7:72:ab:
         28:21:f6:51:33:48:b2:a1:44:76:96:e1:db:36:1e:08:74:74:
         c8:36:69:d1:bb:c2:66:91:2b:08:a5:7d:cf:ee:78:1b:b2:ad:
         5f:43:e3:c2:55:fc:52:e4:46:b7:09:c9:1d:93:32:e3:e8:0e:
         1b:c5:e3:af:ca:5d:ba:04:39:73:1d:12:d3:3e:9a:6d:d7:2a:
         c8:47:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:35:32 2026 by rpki-client