Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          McnQ0XyxybWbYJp2mMxBBubJ2TgREe7QBIjFA9/BFVA=
Subject key identifier:   BF:4C:AC:23:5C:56:61:25:00:0F:2C:E6:B3:FF:8A:3D:6E:A9:E3:65
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       01A03C3B214E945A9E74BB8A8C6E9B0ECD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0C62
Signing time:             Wed 26 Aug 2026 04:01:42 +0000
Manifest this update:     Wed 26 Aug 2026 04:01:42 +0000
Manifest next update:     Thu 27 Aug 2026 04:01:42 +0000
Files and hashes:         1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: hGmKHWWlMvVBkcAiy6abVOSu7b5zKpHSCDfEDuao7aI=)
                          3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:3b:21:4e:94:5a:9e:74:bb:8a:8c:6e:9b:0e:cd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Aug 26 04:01:42 2026 GMT
            Not After : Aug 27 04:01:42 2026 GMT
        Subject: CN=bf4cac235c566125000f2ce6b3ff8a3d6ea9e365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d1:67:14:7c:fd:7c:1d:ab:fd:b4:73:9e:ab:
                    a1:40:19:5c:0d:e3:d0:d9:53:cd:1b:c7:c2:1b:ae:
                    84:53:11:7f:e9:82:a2:0b:6a:e9:6b:6b:e5:01:6b:
                    f3:67:58:95:e2:d7:90:ba:21:37:37:7a:e0:e1:72:
                    e3:72:41:43:c1:ad:c9:b4:c0:5d:65:36:c1:e7:c3:
                    c6:18:7e:71:e7:ac:c2:d0:d3:57:11:3b:b1:91:75:
                    34:20:42:6f:f9:32:47:3c:52:65:f6:3c:45:34:ba:
                    9c:53:56:68:06:4a:13:7e:0a:9e:3b:2f:ce:84:2c:
                    92:55:b6:91:67:f6:be:85:6d:ac:2c:2b:5c:e1:c1:
                    11:2c:d2:d3:23:67:89:0a:58:ea:ec:00:1c:15:b6:
                    be:58:88:bb:0a:26:cc:64:50:81:bf:a1:0b:be:f5:
                    42:0c:fb:63:82:4c:dc:35:9d:d4:7f:10:1c:54:67:
                    d9:10:69:29:ad:a4:d0:e8:0c:51:40:87:d5:de:35:
                    d0:f1:53:f2:1c:f4:e0:05:26:95:1e:e8:60:cd:ce:
                    df:22:26:db:5a:a7:5a:23:37:05:41:a5:b3:37:4b:
                    f0:df:f0:ff:f8:c4:f4:85:a8:ca:f7:e1:c7:73:32:
                    51:19:d6:81:66:65:4d:cb:35:22:8a:19:bc:42:8f:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4C:AC:23:5C:56:61:25:00:0F:2C:E6:B3:FF:8A:3D:6E:A9:E3:65
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:fa:13:e6:75:d9:c9:9c:f3:fc:79:bb:80:73:ba:8d:ae:
         e5:46:f4:7a:f6:9d:b3:37:b6:f3:0a:0a:5c:3d:e3:3b:4c:9f:
         69:f0:f1:0b:c7:22:90:76:b1:3e:25:03:b4:81:62:ba:90:64:
         5a:78:97:f4:29:2d:d7:91:e4:de:2a:99:c8:e6:11:86:c6:0e:
         b3:42:68:43:5e:ff:51:2b:6f:60:59:66:89:cb:be:9b:ae:ac:
         f7:89:7a:c9:9b:bd:d0:f9:e9:fd:f5:e0:6b:22:31:c9:4b:4b:
         00:10:5b:ae:98:f0:05:94:66:a5:23:a9:91:15:86:72:f1:17:
         cd:95:bf:c7:1a:5f:e2:c4:58:1c:92:5e:27:60:2f:75:70:34:
         95:3c:9c:b9:83:9e:d2:50:4c:98:f4:bf:7c:36:80:93:51:1b:
         d1:e6:e9:c3:ee:be:12:26:c3:5b:fa:ee:09:4b:39:c3:95:26:
         f7:1c:bb:bf:02:88:02:63:ea:8f:fa:4e:06:75:15:08:c5:2a:
         c4:37:0e:0c:09:cb:9f:37:4d:0f:82:ae:f9:7b:0e:88:73:39:
         4e:80:89:72:de:44:f2:83:a0:bb:21:a1:8b:b1:ce:06:e2:84:
         8d:8b:19:fe:40:33:5b:9a:f4:7a:1c:e2:13:0d:7d:cb:f9:5c:
         91:bb:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:34:23 2026 by rpki-client