Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          Yj1NHbF/0vba9lp2eOKPjZuBfk/C6zAtQg42mktLETs=
Subject key identifier:   D2:29:45:0E:DC:26:A1:63:70:8C:78:FC:63:74:BF:66:F2:9C:51:AF
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       01A073CDD8A366E7251095FEC272BB8880FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          1A41
Signing time:             Sat 05 Sep 2026 23:01:05 +0000
Manifest this update:     Sat 05 Sep 2026 23:01:05 +0000
Manifest next update:     Sun 06 Sep 2026 23:01:05 +0000
Files and hashes:         1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
                          2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
                          3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: yIb/Ld3OMgcVWSjJ6B92bSXWtaEYXXK0wI297BQXwZg=)
                          4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:73:cd:d8:a3:66:e7:25:10:95:fe:c2:72:bb:88:80:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Sep  5 23:01:05 2026 GMT
            Not After : Sep  6 23:01:05 2026 GMT
        Subject: CN=d229450edc26a163708c78fc6374bf66f29c51af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:7d:0a:cf:d5:db:3b:6c:12:cd:71:b7:32:
                    a2:c9:11:10:7b:bc:94:a1:b4:15:0d:fe:4f:35:34:
                    67:43:e6:f4:cf:2a:16:46:49:32:a9:eb:0d:85:20:
                    c2:1b:b6:6b:ae:69:d8:e4:f4:17:30:a8:40:ac:22:
                    7a:8c:c3:54:b8:c1:e6:d1:ee:74:36:65:bc:5c:66:
                    84:69:f4:a8:e7:be:44:0a:87:e3:b1:2a:a7:7f:40:
                    bc:6e:9a:3d:54:cd:df:6b:71:00:27:a4:3d:e8:95:
                    37:e4:f2:bd:e1:d5:19:f9:b0:ec:9d:53:59:ab:d7:
                    b4:c2:14:a2:b3:8b:52:4f:d3:cf:bc:16:7e:23:32:
                    24:1f:96:b2:8b:e6:02:96:22:ac:c0:2d:9a:bf:02:
                    5c:32:86:a8:95:05:60:79:c6:b3:4e:9e:2b:33:91:
                    06:a1:9e:27:6e:38:99:42:40:be:5e:47:f4:ad:a9:
                    02:82:10:dc:4d:db:24:59:7c:03:3d:27:89:57:6c:
                    24:6f:07:a2:c4:59:52:f0:3e:d8:cc:9b:5d:f8:ea:
                    ae:e9:5f:09:68:ec:83:bd:56:ac:d0:b2:d5:7c:d5:
                    06:04:d0:52:03:71:6b:00:00:2d:5e:e6:12:d7:88:
                    e8:14:20:66:cd:a9:5a:64:96:20:a1:6d:1c:7f:f1:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:29:45:0E:DC:26:A1:63:70:8C:78:FC:63:74:BF:66:F2:9C:51:AF
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:c2:e5:c2:fc:a4:53:1f:13:39:13:b0:a5:84:93:61:39:
         03:c5:f9:a9:bf:8e:0e:6a:d5:14:5a:c5:4f:be:7f:59:b2:1f:
         90:46:94:de:79:81:02:06:62:4a:f7:58:e0:b1:99:80:d1:5c:
         8b:25:71:d2:4b:f3:ec:53:db:25:bc:63:2b:58:ad:33:7d:db:
         da:94:dd:68:ba:c3:80:d8:b7:6a:6d:bd:ad:4a:71:89:dd:71:
         ac:40:c1:d3:dc:e6:eb:4a:6c:85:98:32:2a:58:61:be:6f:2d:
         cc:27:62:37:f8:ca:9c:5f:1b:95:94:8c:85:e3:8f:cb:4f:b4:
         43:8e:2b:d9:34:e7:0f:dc:35:6f:58:80:89:e3:7b:7a:20:32:
         7e:b9:a7:97:65:47:fe:12:0c:6a:cf:6a:dd:ef:4a:52:db:65:
         d7:82:fa:57:5b:d3:2e:23:4a:af:0e:92:2a:c0:ff:02:99:d5:
         8e:a7:bc:c2:8c:fe:6a:56:c2:42:fc:9a:d4:e0:9c:83:fd:c4:
         64:b0:0b:44:40:66:97:e4:28:b8:ea:d8:7c:c9:9c:ed:e4:53:
         78:c0:28:54:f5:c9:8f:b7:cb:b4:1f:d5:61:e5:d5:3b:f5:0f:
         ae:67:68:a0:03:25:d4:c3:3f:e1:ff:d0:b7:46:ab:b1:0c:75:
         6e:7c:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 05:57:56 2026 by rpki-client