Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          4jtIqt4R8s9JbmSF52Dw8E6Al7uowIKB3LOkCZPilDA=
Subject key identifier:   FC:57:00:8D:AF:D3:42:C6:AF:C6:59:DA:9C:94:EE:2C:45:36:10:B7
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       019DD050B4CD4F68004D1BD2527AD473F97F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          1870
Signing time:             Mon 27 Apr 2026 19:00:43 +0000
Manifest this update:     Mon 27 Apr 2026 19:00:43 +0000
Manifest next update:     Tue 28 Apr 2026 19:00:43 +0000
Files and hashes:         1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
                          2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: o0Lj9i46/JhD/2KBpnLhyRtV+kpGGKJ6lE3M/2BIxpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:50:b4:cd:4f:68:00:4d:1b:d2:52:7a:d4:73:f9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Apr 27 19:00:43 2026 GMT
            Not After : Apr 28 19:00:43 2026 GMT
        Subject: CN=fc57008dafd342c6afc659da9c94ee2c453610b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:cb:8c:ab:d5:83:ed:6e:56:27:65:3c:5f:
                    a2:5e:e9:ad:fe:ea:88:f0:0b:2d:1a:53:2a:36:75:
                    1d:e2:0d:bd:64:d0:03:00:1b:a2:80:89:52:ac:69:
                    d3:d9:5b:55:e5:a6:62:97:2c:3b:37:cf:5b:d7:23:
                    2a:30:0a:a5:52:58:f1:57:bb:e8:0f:89:cd:20:ad:
                    6c:67:1f:43:74:6b:68:64:48:a6:08:7e:81:ee:63:
                    f0:3a:19:23:9d:3c:70:10:d0:09:7b:ca:97:7d:89:
                    1c:e7:4c:75:d2:df:e4:5e:d2:6c:98:65:a6:3d:a5:
                    e2:4d:64:31:eb:31:cf:c7:18:c6:63:b6:bd:56:32:
                    76:8d:16:80:34:5d:77:42:68:38:89:f3:e6:8f:87:
                    7f:62:fc:2f:5e:ca:0f:a6:2d:a3:e5:a8:17:13:8d:
                    21:ce:31:3b:2a:ee:68:37:50:1f:e0:d4:9e:93:2a:
                    c0:21:77:c8:28:0b:a4:76:e1:4b:1d:42:c0:a2:15:
                    3e:4b:b6:bc:4d:e0:e2:bc:27:fb:1d:80:f9:87:bf:
                    bc:e1:94:44:54:45:04:32:5b:5a:c7:f3:ce:97:26:
                    87:28:2d:2b:a9:a8:56:86:7d:92:86:99:6c:8c:42:
                    7a:16:67:97:02:e7:7d:9d:8b:1d:b6:d6:60:2d:33:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:00:8D:AF:D3:42:C6:AF:C6:59:DA:9C:94:EE:2C:45:36:10:B7
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e1:07:9e:8f:3a:df:8c:13:f2:0e:00:43:16:f2:a8:56:d8:
         e7:30:a1:34:ef:51:48:e1:12:f6:be:c4:dc:d5:09:16:4f:b7:
         f5:95:d9:f3:29:c0:fe:87:1d:07:ee:cf:7b:95:a7:f4:64:75:
         db:10:52:c1:da:ce:9c:57:ff:7c:41:3d:df:05:35:47:83:4a:
         96:60:ef:ba:f2:23:c3:0b:32:93:29:c1:5b:f3:51:71:91:3a:
         20:c9:7b:5a:1f:0f:d2:5b:b4:3d:ec:89:4d:23:5f:5a:e7:92:
         d8:3c:0b:66:7c:0c:54:00:e7:d5:0a:15:3b:d3:ad:6f:35:36:
         73:30:63:47:83:40:85:15:7a:79:38:8e:6c:ad:0d:e2:50:c7:
         0c:f0:83:d9:58:a0:cd:80:92:a2:0e:de:bd:e0:34:ce:53:39:
         01:87:a6:88:8d:e4:9c:2a:8d:23:de:6b:8f:1d:c4:3b:45:34:
         88:27:df:e3:88:b9:b0:e4:c3:55:ea:04:d8:a8:9d:4e:a3:88:
         ad:59:cb:29:1a:2e:16:36:56:f4:87:ac:29:8a:3b:ad:93:f6:
         19:05:55:8f:e0:5d:4f:dc:2c:3d:74:a4:8f:e4:9e:98:02:da:
         33:5e:2b:a6:0b:50:71:12:05:57:f5:5f:92:e8:ce:74:14:43:
         d9:77:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:00 2026 by rpki-client