Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
File:                     n68L-T_EOB__fnqoa0B2wDMkL_o.mft (raw, json)
Hash identifier:          Z/RaME7oTT2xQdmmQDuhIDn7MYG90Y5g9ETeYkd22+U=
Subject key identifier:   91:99:88:55:85:E7:A3:2A:A8:25:AE:40:D7:8D:30:B6:08:37:AE:70
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Certificate issuer:       /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial:       019D2772A70F97B79300B033DA730B74ABDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
Manifest number:          1893
Signing time:             Thu 26 Mar 2026 00:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:58 +0000
Files and hashes:         1: QXAXKQse-zxsNeZcBW31eN8iK4A.roa (hash: f3ylgAsAECBTPC68DpHhP++oWirLHR/7JnZ++PmB7MY=)
                          2: b3tykz7qYBo8FHo1Alq0xkKOZ7o.roa (hash: 1ypK/Mw+A8zmnLsUWYOUbBmARKUuAvo9CZIkqCyhL9k=)
                          3: gOI9QAjx9asUoiBanW_Q7AH65eE.roa (hash: btRqTQNfT6qG4Ogb/fwuOqtaLET+qOPfh8v3EgSP/yU=)
                          4: n68L-T_EOB__fnqoa0B2wDMkL_o.crl (hash: lKgvV/QcyD5zJn8huAlaoLgiELuykWWtMy7rIXyvgnQ=)
                          5: v_GyPtTsAH9QIYnrTtEoRffH7XA.roa (hash: BYuG14Z6tAEZyqszWQjrNSyqvdK+bV7ylGqKH6e88To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:a7:0f:97:b7:93:00:b0:33:da:73:0b:74:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
        Validity
            Not Before: Mar 26 00:01:58 2026 GMT
            Not After : Mar 27 00:01:58 2026 GMT
        Subject: CN=9199885585e7a32aa825ae40d78d30b60837ae70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:2f:c2:0f:31:67:a0:2d:94:c2:77:ba:30:
                    6b:83:bc:60:e3:84:b1:b4:a0:f9:4c:f8:66:53:b1:
                    35:1f:8a:44:a0:06:e3:42:80:99:89:99:17:ab:c8:
                    38:18:34:22:f9:bf:54:3b:63:6c:2c:d1:2b:37:95:
                    c1:6d:f1:15:c2:3d:d0:7b:24:80:8a:a1:e0:2c:06:
                    cc:8e:54:9e:c3:d0:dd:f5:10:38:58:ed:a5:f4:8b:
                    11:0f:8c:3b:21:46:fb:49:27:ce:8c:75:96:b8:18:
                    ae:47:f1:48:97:6f:15:5f:9c:ce:76:fc:80:33:53:
                    f5:cd:b6:ee:97:e9:ad:90:1a:63:6c:ad:af:4a:ab:
                    f6:2e:fd:26:6a:c5:2a:56:b8:c0:9a:a8:c1:15:eb:
                    03:2d:3d:47:6b:20:f4:77:7b:ce:fe:e7:1b:29:7b:
                    45:9e:6e:21:36:86:ba:19:b6:5c:03:b3:a6:79:93:
                    14:d7:20:3b:38:a3:fc:9c:ec:f9:0b:a4:61:84:c5:
                    b5:1f:a8:a4:54:73:2a:5d:39:60:72:a5:07:bf:4b:
                    56:fe:b6:5d:0f:09:c7:57:70:87:87:3b:8f:d3:d0:
                    8c:f7:61:6d:8f:78:98:52:c3:4a:5d:9d:f1:63:1c:
                    a3:3e:6d:18:51:4a:12:95:ef:55:41:fb:18:36:3b:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:88:55:85:E7:A3:2A:A8:25:AE:40:D7:8D:30:B6:08:37:AE:70
            X509v3 Authority Key Identifier:
                keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:9d:1e:6f:0f:b3:70:6f:9d:3f:00:a7:e3:fd:39:e5:0f:
         b5:99:ea:e9:7e:21:09:a5:ff:4b:51:73:6c:ed:4d:b8:22:c7:
         55:77:3f:6e:b4:e1:74:6f:b0:55:c4:25:bc:e3:ef:ea:82:01:
         89:56:12:28:ae:04:71:07:53:ce:86:14:73:85:84:e5:56:2b:
         cd:60:0f:b0:e7:1f:16:8a:1e:76:13:31:18:08:27:7a:7d:5d:
         95:c1:ed:83:2c:d7:21:c7:d7:8c:6d:ed:c1:9e:cf:e8:a0:7d:
         ca:31:67:9f:33:aa:8a:98:07:15:0c:af:48:03:83:e8:96:6d:
         0c:35:94:f2:26:e0:a9:70:92:1f:04:06:94:30:72:c5:5a:a3:
         5c:71:31:71:59:64:eb:9c:9f:15:0c:fc:99:f5:85:b8:b8:9a:
         c2:a7:20:a5:ea:04:cc:d5:11:7b:1b:72:f1:6d:f3:df:73:83:
         d4:6e:4a:58:93:a3:94:07:5a:4d:1c:10:88:83:9b:58:d5:94:
         10:b1:0c:ce:f5:aa:bd:94:cb:4f:62:ca:62:65:03:63:a1:89:
         cd:90:1c:3f:82:f3:18:cc:c5:38:e1:9c:fd:88:d1:56:3a:23:
         37:21:3d:76:56:b2:68:cf:1a:4c:59:d5:3e:52:1f:4e:0f:db:
         41:b8:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:23 2026 by rpki-client