Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          FZdZnBLuaPKyHMJ5FHRVWiZAVyFLdtuaNW3xC8ESyWY=
Subject key identifier:   38:8D:42:6F:0C:E8:2C:34:AB:2C:69:CE:C4:4D:73:D3:E4:C9:8F:9D
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       019C97E4C7E89857E1B3A1916D830C8D3692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          054F
Signing time:             Thu 26 Feb 2026 03:01:18 +0000
Manifest this update:     Thu 26 Feb 2026 03:01:18 +0000
Manifest next update:     Fri 27 Feb 2026 03:01:18 +0000
Files and hashes:         1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
                          2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: RtvTURT+/e2G2jleeKZ7fBAfB4SLbwtw59oGzMjubG0=)
                          3: Oq5-e3AMF4jP9HrvKm3gSfMs37U.roa (hash: CeqGb9Az/dSfLH7D9mfttr9Apk+Dk9lZZYK56kmAN+U=)
                          4: lcT96ZzrgNrjwAQX6YLJUQASpVs.roa (hash: +FyKaAXENUvPnj9qcKJs6oAPI3YhDnrLqCeTNqT1FEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:97:e4:c7:e8:98:57:e1:b3:a1:91:6d:83:0c:8d:36:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Feb 26 03:01:18 2026 GMT
            Not After : Feb 27 03:01:18 2026 GMT
        Subject: CN=388d426f0ce82c34ab2c69cec44d73d3e4c98f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7b:f6:06:4a:b8:41:97:be:73:1f:c6:4b:60:
                    d1:02:b6:fa:65:69:46:40:87:25:21:28:e6:7a:24:
                    20:64:a3:dc:6a:a6:7f:81:b0:0f:01:56:62:2a:29:
                    b1:e9:55:a5:83:b5:38:14:dc:9f:1f:44:c3:0b:61:
                    db:7a:d3:4f:5d:76:64:a8:b1:db:6a:a1:3e:f2:5f:
                    ec:12:1f:a5:5a:c8:f9:d3:b6:bb:2c:86:f9:2c:a9:
                    a5:bb:a4:4b:01:ae:28:09:da:8b:81:aa:88:0f:e0:
                    36:d1:94:a3:b5:fd:79:e2:26:92:40:d5:d2:9c:a3:
                    76:d3:de:93:c6:60:10:87:4d:d2:42:20:db:dd:0b:
                    cd:4b:aa:db:f6:6b:1b:30:76:f7:9f:dc:48:9e:95:
                    5e:ef:54:2d:a6:24:19:6c:0a:8e:2a:1b:ee:45:d8:
                    db:29:9b:cf:9b:99:4a:65:b1:0e:50:1a:3c:c9:f5:
                    31:dc:dd:83:e9:52:0f:fd:7b:6c:bc:4f:b2:94:ec:
                    bc:75:3d:ed:2b:b4:da:f9:09:8f:fa:1e:61:74:e2:
                    8e:cc:19:53:33:62:0c:73:54:34:30:da:4f:c8:06:
                    8d:34:34:e0:4d:0b:91:53:4b:7d:12:fc:7b:5d:21:
                    f9:ae:af:4d:7a:31:b7:b7:09:47:14:82:66:62:65:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8D:42:6F:0C:E8:2C:34:AB:2C:69:CE:C4:4D:73:D3:E4:C9:8F:9D
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:89:76:00:63:cc:31:ad:e0:f3:c0:96:b2:ad:39:95:35:
         39:48:ac:33:b3:f9:20:47:e8:f6:bb:7f:c1:18:ff:58:d5:33:
         61:34:76:e8:43:a0:2e:46:c9:4f:b5:37:13:29:19:a1:18:2c:
         6f:bd:32:26:d3:eb:2a:77:4c:c7:0d:cb:90:47:d6:a6:e9:54:
         e2:1e:8f:48:ce:10:f8:90:85:bf:ba:e3:79:79:30:1b:e4:46:
         0c:1e:93:7c:db:1c:ea:3a:8d:56:81:ef:a2:42:a5:32:1a:a7:
         eb:a2:b6:ba:c3:96:87:09:ad:39:ab:41:0f:1e:54:da:fe:51:
         d5:d9:57:f6:00:ca:54:d0:1d:63:d4:ab:53:18:08:c4:e0:82:
         1b:ae:94:a0:ab:21:22:36:04:9b:70:d3:38:8f:ed:83:ea:46:
         18:4d:9a:ba:d1:db:bf:0a:5e:57:1f:5d:66:cb:db:41:ab:4a:
         b5:05:49:41:9f:47:27:0e:28:d9:33:77:46:d2:9c:e8:1f:3a:
         c7:f8:6e:6b:8f:cd:6d:21:22:f3:51:a2:02:71:5c:0b:86:2c:
         87:c1:8d:7a:30:63:44:5d:ea:9c:b9:5a:25:d1:bc:3d:c9:3f:
         fb:e3:dd:51:db:9e:7b:b8:08:22:55:c3:08:2a:82:1d:b1:45:
         8c:93:11:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:54:25 2026 by rpki-client