Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          TlX6Hj4Eaja/XQ7IU/74NUqUA2oAGfyT2GZCpiVpObc=
Subject key identifier:   28:36:1E:B3:72:36:F2:3F:8F:6D:C1:84:BE:9B:9A:73:DB:F1:BC:5E
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       01A08BD63AA832932FC2F4B6A6E780884EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          1A47
Signing time:             Thu 10 Sep 2026 15:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:07 +0000
Files and hashes:         1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: NJezYW6U922bvBCrSacOvr8CLT6BfDYnaNTwPQz3Ts8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:3a:a8:32:93:2f:c2:f4:b6:a6:e7:80:88:4e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Sep 10 15:01:07 2026 GMT
            Not After : Sep 11 15:01:07 2026 GMT
        Subject: CN=28361eb37236f23f8f6dc184be9b9a73dbf1bc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:a5:d9:c9:17:d8:0a:03:de:3e:6e:5c:a3:
                    2a:30:4e:53:8f:36:7b:ec:67:57:85:04:76:5b:b1:
                    a4:c6:32:3a:30:93:a9:3b:a7:4b:bd:2e:c5:a0:b3:
                    89:64:84:67:12:cd:12:ee:97:47:c7:2d:77:fe:c4:
                    b7:eb:99:8c:73:5e:37:c7:93:79:88:49:cb:50:ec:
                    6f:68:01:9b:34:64:91:bd:4d:02:61:16:cf:cc:e8:
                    89:52:ab:05:b6:b9:4d:a3:4d:d1:e0:93:81:b8:85:
                    f1:00:cc:8b:76:e5:2c:9d:19:33:9a:03:30:f5:f0:
                    89:ed:2c:8a:53:e0:32:74:7a:6f:14:fc:6b:ce:10:
                    11:41:bf:4a:01:f0:2a:9d:cd:df:01:6b:34:f8:b5:
                    0b:79:0b:26:63:ca:e7:08:8a:e1:1d:44:1f:75:c3:
                    19:6b:f6:7f:b2:43:d2:1c:b6:d4:e5:09:82:5e:63:
                    b0:c9:ae:33:ed:df:a5:79:75:c1:5c:39:bb:8d:4f:
                    d5:5e:af:78:44:fb:af:fc:1b:bb:64:6e:79:87:3d:
                    83:fa:16:2b:93:59:6f:67:0f:fd:33:69:ca:fa:e6:
                    d2:70:e7:0d:9d:de:c7:63:2d:19:09:19:dd:8b:20:
                    f0:84:f1:7b:32:e7:3e:0e:33:f9:08:6b:db:14:cc:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:1E:B3:72:36:F2:3F:8F:6D:C1:84:BE:9B:9A:73:DB:F1:BC:5E
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ff:6d:c6:78:2e:ec:51:fc:82:a7:fb:4d:d9:8c:7c:d4:16:
         de:68:fa:c9:53:7c:19:6b:9a:a3:dc:6e:0b:4c:00:30:1c:d3:
         7e:bb:d2:aa:4f:e0:4d:d2:76:95:2b:c4:39:5c:05:cc:1c:c6:
         0a:81:74:3f:ae:09:9b:a2:44:2f:46:ed:c2:d7:3f:a5:78:b7:
         53:60:da:0e:d7:5b:0f:ce:7e:2e:fc:38:97:b0:d9:b4:db:ac:
         46:7c:0b:e8:5d:2d:7a:ed:02:a7:60:52:a1:c6:2e:12:4a:c9:
         fd:a0:5a:3a:d3:b2:9a:45:5a:31:58:89:6d:63:b9:54:0c:b3:
         ae:57:a4:2f:5f:e1:f4:9a:95:58:18:e7:4b:39:22:2f:35:ae:
         cb:fe:97:ed:6d:2f:6b:88:5c:09:0d:ab:bb:ce:ca:ce:ad:4d:
         99:a6:78:58:9d:20:c5:54:65:79:6e:f2:e2:e9:fd:40:21:b7:
         bc:8c:05:8e:93:1d:65:23:af:3d:ff:b1:c6:c5:13:b4:eb:23:
         1a:51:92:38:10:d1:49:2a:1c:b0:c4:48:08:7f:d1:6c:d3:28:
         2e:99:8f:ca:66:8a:66:e5:2a:2b:7a:cb:d3:80:d5:3d:7c:a5:
         b2:29:13:9e:57:1e:a6:21:94:66:f6:0d:a9:7c:00:42:45:69:
         20:cb:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:53 2026 by rpki-client