Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          WbXaOps/Q6HotSABBjuMtSTrpxONVDndWuvX81vFQVE=
Subject key identifier:   2B:6A:0C:2A:F7:06:32:88:A8:3F:EC:BC:77:C7:CD:7C:DD:BE:16:16
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       01A0035D499F98D56496BFCFFF89A8E43A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          0827
Signing time:             Sat 15 Aug 2026 03:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:40 +0000
Files and hashes:         1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
                          2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: ckhwhM+Hz8hRuCtFuI1vpi4HHKAz5OqyeSMireb7KI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:49:9f:98:d5:64:96:bf:cf:ff:89:a8:e4:3a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: Aug 15 03:00:40 2026 GMT
            Not After : Aug 16 03:00:40 2026 GMT
        Subject: CN=2b6a0c2af7063288a83fecbc77c7cd7cddbe1616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:b7:4e:9a:dc:6d:52:4e:53:a0:b4:ff:b3:
                    c4:03:0f:35:ed:81:f3:7d:d5:21:28:bd:ad:77:21:
                    c1:97:24:b4:84:97:ae:2e:0a:97:fe:2d:9e:85:83:
                    a6:52:ca:5b:ef:e4:67:bf:ba:05:3d:5a:16:a8:a7:
                    3e:46:a1:b3:9a:4a:d0:61:59:56:ee:38:e4:fb:38:
                    ae:23:a8:1d:7e:32:53:ad:19:b4:70:55:a4:e7:e4:
                    73:19:fb:d3:ec:cf:dd:f3:88:98:68:d9:a2:dc:de:
                    35:3e:6c:5b:12:22:84:87:6a:0c:3a:33:e9:ad:0e:
                    8f:8d:ef:1d:7b:36:92:07:62:f1:8c:d4:ee:39:f7:
                    ea:d1:4f:96:fc:7d:e0:f2:7d:81:85:c7:29:5a:b5:
                    08:07:d6:56:92:ea:1c:13:ff:e2:0a:45:f4:4c:44:
                    bc:3c:27:f2:96:40:3c:18:fd:98:2f:a6:b9:5e:23:
                    d7:a8:3e:b8:76:05:30:3e:01:bc:41:69:81:9c:70:
                    0e:a6:08:a9:4a:7d:e0:cc:06:9c:f8:c6:c5:47:44:
                    f6:e3:74:ec:4f:fc:7a:62:12:1f:ba:20:b6:38:d4:
                    28:7a:5f:c1:ba:16:4e:1b:dd:2f:12:91:42:df:e4:
                    7e:0a:8a:8e:eb:28:f9:61:6d:ae:c3:70:d2:85:67:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6A:0C:2A:F7:06:32:88:A8:3F:EC:BC:77:C7:CD:7C:DD:BE:16:16
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:2b:ee:53:57:ba:49:30:77:5e:7a:9f:6e:94:e2:ed:1a:
         b0:83:07:06:70:f8:27:fe:bf:b1:95:ff:44:fb:20:66:b9:c9:
         98:ba:56:ab:73:8a:eb:9d:72:3a:b2:d6:6e:58:10:1c:9e:3d:
         09:f4:3d:ac:95:98:e0:8e:ac:96:9f:25:b4:27:29:eb:60:6c:
         01:54:89:a8:75:86:4b:c7:d4:5e:e5:69:4e:d3:c0:60:e9:3c:
         17:85:e4:35:7b:b5:73:11:e8:55:46:91:ce:c7:09:24:fe:de:
         57:66:50:96:ac:68:10:7d:e2:a9:a1:90:e8:2d:d7:4a:7d:d1:
         d1:a1:c4:a7:64:84:cd:9e:63:d1:6b:08:f1:c5:91:77:ba:68:
         c4:27:07:56:8e:7d:d0:8c:42:05:91:bc:61:ad:51:48:ec:1b:
         01:d7:fd:68:06:6d:ea:3c:49:ba:c8:6b:35:5f:60:1d:80:3b:
         6d:3d:32:47:ff:fb:08:a5:57:d8:14:0f:a7:4d:d0:f7:8b:fc:
         27:e5:58:a0:04:f2:21:08:de:8e:5a:15:06:20:43:6f:97:1a:
         fc:8e:1b:56:27:0e:37:d6:93:4b:49:94:0b:35:1b:b9:a3:19:
         06:2c:02:81:c1:b4:97:0d:94:a6:a1:9c:76:dd:c6:ee:c1:f0:
         31:39:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:17 2026 by rpki-client