Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File:                     nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier:          0uPIMX6xzYl3KLCi9Pg0TCFpDKD76U2+DzpFQMF+NG4=
Subject key identifier:   B9:59:6C:A6:2D:ED:86:25:10:81:35:43:24:2C:00:56:03:C1:B7:71
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer:       /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial:       019F0B199D981547DABC6C3148656FC17613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number:          0179
Signing time:             Sat 27 Jun 2026 22:00:55 +0000
Manifest this update:     Sat 27 Jun 2026 22:00:55 +0000
Manifest next update:     Sun 28 Jun 2026 22:00:55 +0000
Files and hashes:         1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
                          2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: viS4xPL349XdroMnJlIinuM6xpK4QDq/qZ+dDKBZyjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0b:19:9d:98:15:47:da:bc:6c:31:48:65:6f:c1:76:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
        Validity
            Not Before: Jun 27 22:00:55 2026 GMT
            Not After : Jun 28 22:00:55 2026 GMT
        Subject: CN=b9596ca62ded862510813543242c005603c1b771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:01:d9:c9:59:dd:e9:66:1d:56:c9:ea:8e:
                    18:6e:27:8f:e1:33:00:46:a4:b3:c8:33:e3:10:0a:
                    3b:56:d0:1b:b8:6a:22:69:e0:67:88:6e:60:ac:34:
                    f1:1f:53:8b:62:de:6f:c3:a8:f9:35:ed:5e:d0:16:
                    0c:70:01:8c:34:ab:0f:02:58:11:43:f0:45:f4:02:
                    4b:f5:86:b5:1c:45:37:6b:90:3e:fb:d1:75:0d:e9:
                    43:43:58:30:f2:e9:ff:28:51:32:0b:d8:61:0d:bd:
                    a3:be:1b:32:da:20:14:8b:f0:e7:74:57:63:f3:fe:
                    c8:97:f1:fe:02:86:46:47:a7:a4:03:b4:f1:88:2a:
                    a9:4c:41:9b:58:dc:d8:98:2f:77:72:62:8e:75:d7:
                    50:cd:a3:3f:e1:b2:c8:30:50:df:6e:04:46:48:70:
                    50:d1:8c:88:f9:5e:5b:b5:94:f9:9d:43:41:9d:f0:
                    ed:3e:4b:7b:ec:48:68:76:0b:ee:de:23:ce:ed:35:
                    a2:07:89:03:5f:ef:73:2b:68:f7:bd:48:a1:86:b8:
                    a0:58:7b:17:61:d4:33:cd:17:38:b5:46:3e:72:60:
                    21:96:aa:96:7c:23:1e:89:f1:1b:c1:c3:11:f7:7f:
                    3d:46:0a:2d:68:51:36:3d:0d:9d:b7:e6:dd:aa:5f:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:6C:A6:2D:ED:86:25:10:81:35:43:24:2C:00:56:03:C1:B7:71
            X509v3 Authority Key Identifier:
                keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e4:67:8e:bc:27:6c:f2:4b:b1:a5:5a:ec:d9:ed:ef:48:b7:
         14:8d:bc:4d:d2:c0:18:a3:4e:c2:d7:21:6c:5e:f5:65:7a:16:
         ce:c3:4d:bd:90:36:3c:5b:59:e7:80:fc:98:8d:c0:cc:bf:22:
         b9:a7:c0:22:e0:ca:9d:af:92:30:f7:66:0e:98:04:9f:48:47:
         60:53:6a:fb:af:fa:01:da:8d:15:b5:b1:f9:75:83:a3:e5:97:
         15:d2:cd:d4:53:98:dd:de:89:88:2e:f2:ab:a9:17:95:5d:7e:
         7e:df:c5:7e:40:e6:6c:f4:d1:9a:c4:b2:65:53:d5:64:74:11:
         5f:b1:e3:d3:10:41:78:eb:e0:8d:43:6a:05:30:be:7f:98:9a:
         de:7c:19:99:65:e0:58:4b:7c:69:ee:cc:55:f8:02:cb:10:8b:
         5c:e1:ab:7b:5e:04:a1:83:c9:43:ad:eb:ae:dc:00:34:08:83:
         57:25:f5:da:4f:13:00:30:7a:8a:35:1b:b3:b1:59:6a:31:00:
         86:d2:ee:4e:4d:f5:85:37:94:90:08:d0:34:93:f1:71:a8:10:
         a8:59:bb:ac:f9:f6:60:06:f6:f8:7e:f1:b9:de:0e:c7:78:cf:
         b8:e7:98:e8:a0:66:91:66:16:d8:76:21:6c:75:9d:a1:f6:88:
         19:e0:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:10:18 2026 by rpki-client