Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
File:                     nwAKfifXFIcphPrjeIda9lvkBWw.mft (raw, json)
Hash identifier:          ZPP+awySWvHseMMLc2q/yr6xdqRRXIneTRQErfbUJ24=
Subject key identifier:   07:79:C8:2D:32:9D:94:1A:82:EB:73:C8:58:4A:47:86:AB:9C:65:8F
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Certificate issuer:       /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial:       019FF910D6F7321C7B48B8A8A6282C4AE851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
Manifest number:          0452
Signing time:             Thu 13 Aug 2026 03:00:57 +0000
Manifest this update:     Thu 13 Aug 2026 03:00:57 +0000
Manifest next update:     Fri 14 Aug 2026 03:00:57 +0000
Files and hashes:         1: MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa (hash: wfWinCwDhzmsC0zOg51AT7GSB/rtsiDVC/qy5SZCJIw=)
                          2: nwAKfifXFIcphPrjeIda9lvkBWw.crl (hash: UmQnbogMXr/J+SkUhXG2sW1TGzRBo3GYMJ9BNAMd/Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:10:d6:f7:32:1c:7b:48:b8:a8:a6:28:2c:4a:e8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
        Validity
            Not Before: Aug 13 03:00:57 2026 GMT
            Not After : Aug 14 03:00:57 2026 GMT
        Subject: CN=0779c82d329d941a82eb73c8584a4786ab9c658f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:0b:79:52:e9:19:e8:df:3f:df:b1:d6:3c:
                    04:44:8a:ea:f1:bd:b3:ab:cc:67:d7:94:89:74:46:
                    9c:dd:b0:01:64:e3:9b:f6:ec:3c:47:08:07:07:e8:
                    5f:4e:89:c9:1e:16:d3:3d:11:f5:20:42:91:d2:99:
                    19:f0:99:e8:70:d9:3b:2e:d7:6a:22:1f:68:62:4e:
                    ea:bc:39:43:15:0b:de:a4:20:f9:32:fb:60:ba:69:
                    e8:0e:58:69:c5:aa:13:76:b8:47:00:0f:e7:aa:6d:
                    89:a9:87:bf:5e:ce:2a:08:10:9f:47:8d:b0:92:a5:
                    9b:4e:ae:3e:9c:6f:0b:5b:0e:37:6e:18:24:8c:1f:
                    33:ba:2d:26:c4:6b:27:02:43:23:a6:71:f4:b7:2f:
                    e9:a4:4c:49:58:bf:43:5a:85:42:db:73:6d:29:da:
                    84:5b:7b:c6:79:ac:c6:01:60:93:6c:04:9a:66:2a:
                    ba:9a:65:08:b3:55:6f:a6:6e:60:51:95:c9:c1:94:
                    9c:19:d9:0f:8b:87:54:65:6b:56:fe:dc:bd:ba:a0:
                    f1:50:f1:09:42:40:80:0f:4c:7e:52:49:b1:5c:49:
                    f6:bb:be:ed:c7:ee:09:ed:9b:8a:3f:0a:95:31:bd:
                    3b:9b:2a:12:d8:8a:f8:d3:31:bb:94:51:24:12:cf:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:79:C8:2D:32:9D:94:1A:82:EB:73:C8:58:4A:47:86:AB:9C:65:8F
            X509v3 Authority Key Identifier:
                keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:39:ff:75:73:f9:2b:e5:44:8d:23:9d:e4:0b:51:7c:97:11:
         48:7b:09:16:bd:87:5e:ac:54:fe:90:53:5e:12:92:6f:a3:00:
         cc:ac:fb:a0:6c:c3:d2:8a:8b:ea:82:12:d0:2e:0c:c6:e8:7f:
         0a:66:58:fd:67:37:3f:cb:87:c8:6b:20:0d:a6:72:0c:58:20:
         af:75:ff:5f:0f:5f:0d:c3:65:af:3c:b7:7b:79:85:c0:2e:e3:
         63:a5:e6:d9:d2:38:37:2c:3e:61:03:b3:8b:b5:a4:a6:e2:51:
         56:c6:1e:cd:03:89:35:da:04:d1:a0:08:b2:b5:df:59:29:92:
         62:e7:7c:0e:21:8a:a7:d1:80:39:81:3c:bf:ba:94:12:ab:4b:
         7b:7d:dd:24:c3:6e:55:84:27:88:2e:5b:a7:ad:b7:bb:cf:ef:
         26:81:e6:88:a6:89:c2:6f:10:6c:6a:d1:bd:bb:8d:65:7c:78:
         db:3f:1d:08:40:61:13:c3:86:e9:09:d6:16:2e:46:3d:39:f9:
         8c:a1:e3:e7:3d:dd:d0:31:2b:c8:f5:b0:63:ba:a3:07:eb:da:
         22:ca:1b:8f:aa:89:51:e4:94:33:68:68:65:76:ca:65:e4:48:
         a1:37:98:fe:50:87:5f:82:bf:9c:a1:2e:24:c6:76:4b:82:24:
         c1:d6:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:59:40 2026 by rpki-client