Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File:                     n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier:          kbkjhllVnP+oqShkmZdq6cNubuWWLZiEsot6qP50dWQ=
Subject key identifier:   8E:BD:54:6E:3F:CA:22:82:21:68:A7:4E:8D:CA:39:91:2A:36:9D:32
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer:       /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial:       019D265FE8D4817171A98AF70558AF06DF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number:          13F0
Signing time:             Wed 25 Mar 2026 19:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:52 +0000
Files and hashes:         1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
                          2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: oeuZecXqmP24pLGFYTENx+2y86A9Ogsz9RIik4ur9sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e8:d4:81:71:71:a9:8a:f7:05:58:af:06:df:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
        Validity
            Not Before: Mar 25 19:01:52 2026 GMT
            Not After : Mar 26 19:01:52 2026 GMT
        Subject: CN=8ebd546e3fca22822168a74e8dca39912a369d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:00:73:63:5e:b1:bc:3e:ea:ec:e4:64:02:
                    15:13:69:29:2b:74:c8:42:bd:2c:3b:30:86:00:35:
                    bc:65:00:df:3a:79:1c:12:f5:06:96:c3:0e:44:30:
                    88:ac:f4:18:0d:14:43:f0:bf:7c:45:d2:41:91:fd:
                    4d:3b:38:2c:eb:9d:c4:a7:25:41:32:55:51:1c:f9:
                    8d:9c:be:5e:e8:1e:75:68:cb:6b:36:9f:5b:4b:a4:
                    0f:ac:d2:93:5f:96:85:4a:8c:e7:57:69:f0:55:5e:
                    b0:f2:9a:f6:66:e4:fc:6e:3c:dd:72:56:93:7a:49:
                    d6:62:9c:b4:c3:90:80:38:21:7f:5e:f0:ae:b8:10:
                    00:63:22:0e:a8:df:74:56:5d:48:4a:40:b4:65:53:
                    2f:e9:50:19:a3:45:bf:42:5d:98:22:9b:2f:29:91:
                    ff:78:b5:07:34:6d:a4:e6:1a:cb:1c:0e:af:ac:51:
                    a0:f0:66:80:9f:24:80:d4:08:dc:92:5f:db:60:b2:
                    e1:2d:35:6e:b7:66:2c:f1:fe:67:de:81:0e:51:c6:
                    54:f4:cc:28:ba:76:93:37:b6:8b:27:d8:7e:ef:8d:
                    50:13:3e:a6:ed:12:b7:2c:b0:69:24:da:c3:df:dd:
                    34:dd:da:13:af:82:c9:86:b8:d1:0d:f1:a3:4a:09:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:54:6E:3F:CA:22:82:21:68:A7:4E:8D:CA:39:91:2A:36:9D:32
            X509v3 Authority Key Identifier:
                keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:e6:30:5e:60:21:4e:ee:4f:ef:69:c5:8e:47:18:d5:5d:
         4f:9b:43:75:de:c7:28:47:55:66:e3:fc:04:01:0e:7c:c6:65:
         89:95:43:71:2c:22:9d:27:76:09:5b:c6:59:15:c4:c2:b9:ff:
         5d:05:ce:be:13:93:43:8c:9f:2e:91:18:90:97:27:12:a3:80:
         07:ce:dc:02:e7:c5:3e:a8:ff:bc:a4:c7:e9:ab:91:e1:0d:81:
         7f:75:8c:b4:99:0b:31:e2:1a:ff:82:d5:48:c5:15:3c:75:7b:
         f3:ce:5d:8e:e2:27:1e:fe:cf:1e:c9:8f:16:94:79:e2:40:77:
         ff:09:5e:8a:d0:13:94:55:64:dc:79:92:23:76:6b:aa:ae:84:
         3e:79:27:ee:ad:e6:31:7f:f0:e9:a0:61:88:93:5f:b2:15:15:
         0d:0b:55:57:15:e9:13:a1:9f:fc:05:9a:30:6e:96:be:6c:63:
         2a:22:f8:5c:43:85:87:1f:66:d5:40:77:c1:e1:71:18:3e:ff:
         55:cf:86:80:07:86:f3:54:bf:90:0a:d2:78:4b:4b:5d:9b:27:
         51:92:ce:31:44:ff:78:a4:4d:bb:2e:d9:b2:14:fe:70:cd:c5:
         a9:66:8e:35:3e:17:50:de:63:32:90:59:35:65:0a:63:b9:d0:
         da:03:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:54 2026 by rpki-client