Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          PHFwo7R/oPnJIs12B/fLY4PJSlnHy0OTGYujOfoLxN0=
Subject key identifier:   29:11:10:0B:FC:A3:E6:F7:4F:0F:45:72:42:58:C2:4E:5D:CB:71:50
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       01A029FCD1A5B088808C189F122E79B90B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          107D
Signing time:             Sat 22 Aug 2026 15:00:29 +0000
Manifest this update:     Sat 22 Aug 2026 15:00:29 +0000
Manifest next update:     Sun 23 Aug 2026 15:00:29 +0000
Files and hashes:         1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: oM2+hKgNftYRs4W2FspOZrzoGvoMEurhLwlWdzgEOgc=)
                          2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
                          3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
                          4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
                          5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:fc:d1:a5:b0:88:80:8c:18:9f:12:2e:79:b9:0b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Aug 22 15:00:29 2026 GMT
            Not After : Aug 23 15:00:29 2026 GMT
        Subject: CN=2911100bfca3e6f74f0f45724258c24e5dcb7150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:89:6b:27:21:87:5e:a8:4e:1c:13:54:79:
                    f0:a7:a1:50:8c:8f:40:25:b7:62:82:82:3d:8f:d2:
                    cd:0e:20:ef:fd:4d:73:08:3c:9f:c9:9f:01:d7:5f:
                    3f:f1:d2:14:cd:2e:20:9a:08:6f:99:a7:de:32:be:
                    45:3a:c3:9b:a7:67:09:77:32:01:93:76:aa:8e:9b:
                    8c:fd:2c:c5:18:fc:05:27:eb:62:f3:8b:7b:80:20:
                    78:dc:06:9f:75:40:d8:7d:77:86:b8:43:38:62:88:
                    15:94:77:fa:74:60:30:45:30:33:63:fe:9a:07:66:
                    da:7a:99:b0:57:4f:1b:93:f3:e1:9f:6c:b5:46:56:
                    65:19:06:b5:89:0e:ee:eb:28:59:fc:58:ae:20:43:
                    31:31:98:f1:ac:e4:a0:ab:19:52:86:84:83:9c:67:
                    ea:10:9c:a8:69:9f:a3:76:bc:33:d8:85:10:1d:cb:
                    b1:28:41:27:ab:ed:83:f9:70:90:20:3a:b9:01:b2:
                    f0:27:ca:a3:41:df:7f:92:98:c3:91:7c:2d:82:9c:
                    57:f3:f4:1c:14:b3:1e:6e:bb:b3:33:2c:3a:f0:a0:
                    c6:2e:25:df:c3:67:06:50:d7:3f:65:a6:f4:60:c1:
                    6a:ca:b5:d2:5c:f1:ca:c6:59:5b:52:c3:b2:18:c6:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:10:0B:FC:A3:E6:F7:4F:0F:45:72:42:58:C2:4E:5D:CB:71:50
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:67:11:14:ae:b3:82:db:57:0f:64:a5:e2:d6:1c:b0:54:
         4d:f8:ce:90:00:33:c3:ee:09:e0:28:99:eb:d9:ed:bf:89:61:
         c4:39:2f:bf:89:6e:93:c8:bb:32:1f:39:ec:54:a0:87:d2:7d:
         a1:51:2e:48:dc:6a:7c:58:52:16:37:4a:07:d7:d6:ab:ea:d7:
         ea:ee:58:f1:01:84:52:cf:6f:9d:cb:de:26:08:95:bb:ff:6f:
         79:f6:8d:fa:9b:4a:d7:c0:eb:d6:e0:40:48:b1:8a:66:b6:d6:
         24:c6:ce:ad:8c:b5:35:49:9b:d8:9a:0f:94:6a:c4:60:37:89:
         7d:d4:04:1b:ad:f0:63:0e:a3:dd:10:1b:ad:d5:1c:6a:67:b4:
         fc:19:3f:5a:3b:30:2b:83:17:06:cb:18:ac:ae:3e:da:31:73:
         28:c2:0b:76:d6:10:f5:b2:30:8c:72:a2:98:3c:b4:09:69:58:
         13:69:e3:e0:87:ef:e9:0c:ec:1f:4f:61:70:fa:c3:f8:c6:5a:
         7c:77:50:27:05:bd:60:27:82:97:e3:63:d1:09:05:bf:a0:b1:
         05:87:0a:64:77:8b:77:4b:49:31:07:c6:2d:5a:53:31:ed:e0:
         0d:94:04:5b:2d:d0:70:5e:96:2a:fb:91:af:60:6f:f0:e7:39:
         91:36:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:36:28 2026 by rpki-client