Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File:                     NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier:          oqSRGjQXXBu4MY5sxnOCM7pYs8m+PPFy6TefYKSVxEA=
Subject key identifier:   27:11:F1:B0:22:30:56:B6:30:8F:C3:44:BB:66:AA:74:86:42:9F:43
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer:       /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial:       019E29CC0177F78BCD1F03EBD04A9F2C70D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 04:01:35 +0000
Manifest this update:     Fri 15 May 2026 04:01:35 +0000
Manifest next update:     Sat 16 May 2026 04:01:35 +0000
Files and hashes:         1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
                          2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: L1sb3Wgmhnr9vF7rmLMy1H/c7WqMY9bJdJ9zz3GXrA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cc:01:77:f7:8b:cd:1f:03:eb:d0:4a:9f:2c:70:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
        Validity
            Not Before: May 15 04:01:35 2026 GMT
            Not After : May 16 04:01:35 2026 GMT
        Subject: CN=2711f1b0223056b6308fc344bb66aa7486429f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:47:8d:73:a7:5c:fb:6a:e3:3e:3f:98:b7:
                    e1:7a:10:ad:31:85:35:93:f8:74:94:a7:c3:84:08:
                    57:5b:c5:8a:fe:cc:d5:e3:b8:a6:d9:8d:7f:90:fc:
                    76:b3:51:54:8c:a9:ef:a1:14:07:ca:8e:90:2f:e5:
                    1e:87:3b:59:a6:85:73:29:9b:25:b1:aa:e5:f9:8f:
                    d7:04:de:2f:69:68:5a:1f:46:dc:5d:c1:ae:be:08:
                    7c:02:9e:72:56:99:10:7e:6e:b9:72:17:21:4c:b2:
                    6c:0c:c7:5d:e3:cf:be:e8:20:9f:cd:ad:19:48:4c:
                    7a:04:9c:b0:a2:62:ad:ad:62:3c:ac:8c:93:ee:26:
                    80:50:5e:6b:58:5b:50:f0:00:4b:2d:d1:c0:67:3f:
                    97:9d:31:53:96:64:be:8e:1f:d4:09:27:6b:ab:36:
                    cf:cf:00:25:d0:e6:6c:0e:2a:15:26:91:9b:db:58:
                    09:5a:78:99:34:c9:55:16:41:38:b3:6e:e4:30:9d:
                    05:e9:75:69:a2:1e:4c:2e:02:50:9c:f8:cf:9f:d8:
                    44:c5:59:a4:35:b2:79:51:83:f2:80:ae:16:ac:6e:
                    ec:a0:5c:fc:e7:bc:48:08:86:be:e3:90:83:1f:bf:
                    16:71:54:43:99:17:16:b8:f3:8c:80:f1:71:cd:22:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:F1:B0:22:30:56:B6:30:8F:C3:44:BB:66:AA:74:86:42:9F:43
            X509v3 Authority Key Identifier:
                keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:58:a5:9e:35:9f:49:46:4c:04:2c:fa:ae:21:56:4f:25:
         c4:3c:7c:61:67:66:9c:2c:03:5d:94:a4:7c:6f:b8:f6:86:40:
         c1:ec:af:22:49:40:c8:21:de:98:35:18:2a:89:e1:72:08:e1:
         87:3d:da:fd:d6:c5:fd:f0:1a:29:a5:ff:e6:8b:3d:e5:5f:ab:
         3d:db:79:2e:3c:c1:96:80:2a:eb:b1:32:16:30:e8:af:ef:78:
         6b:57:25:d6:5c:69:ec:d5:96:a0:f1:98:e5:91:73:b9:35:e7:
         14:37:63:42:fe:1f:a6:d0:fe:b8:ff:d6:e0:dc:82:d2:e6:1d:
         a0:66:d6:ed:a6:cd:67:74:89:89:3c:36:ca:37:57:73:dd:3b:
         9e:c2:e9:44:ea:32:26:4a:a6:1c:4d:14:63:6a:c2:4f:56:66:
         31:69:a5:d9:bc:3b:84:b9:42:16:ce:a7:8b:c9:bc:e4:a5:52:
         2d:27:f0:3a:46:da:33:7f:59:fa:ea:95:96:d6:2b:f8:de:f2:
         78:7a:8a:d6:ed:a2:c6:5c:0a:5e:b7:6c:6c:5b:d1:ce:aa:97:
         4f:15:c2:8b:59:eb:3c:31:b8:a2:35:16:a5:ba:52:6e:5c:15:
         b6:c6:f2:38:03:bb:7e:d8:74:41:d6:2f:4c:87:5d:f2:86:61:
         ff:99:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:18 2026 by rpki-client