Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          qZScwn3HOstPT30lddazAIehKxsMabeEvXppywRq0uY=
Subject key identifier:   67:7A:E3:15:88:B4:4A:ED:D0:7B:81:B8:73:DA:D2:A2:93:F9:C3:4D
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       019D25BA1F86B181DAAB096ACF41A27D5691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          080D
Signing time:             Wed 25 Mar 2026 16:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:47 +0000
Files and hashes:         1: SWhQi_UAdhdfZQ8xohoDcQApCOc.roa (hash: gJ6z0wn4XpC1RNjkvRpV7fnnpuhf2KJJCHokwAqVqC8=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: YtbExd5qw6xqjnoJzzt0gP7WSkq9c1UDIW9gLH0J2qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:1f:86:b1:81:da:ab:09:6a:cf:41:a2:7d:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Mar 25 16:00:47 2026 GMT
            Not After : Mar 26 16:00:47 2026 GMT
        Subject: CN=677ae31588b44aedd07b81b873dad2a293f9c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:0f:e7:28:e4:e8:40:f4:10:70:3d:16:40:
                    c1:12:de:2c:bc:89:75:d6:1f:a5:f3:65:da:69:14:
                    18:e2:8c:44:fc:ff:fd:2b:72:e2:3c:a2:37:a6:fd:
                    87:d4:de:d1:07:75:3d:06:97:d9:c2:35:bf:23:fe:
                    07:91:05:b4:98:a1:5d:96:e1:41:d5:d4:68:b6:27:
                    27:dc:ec:b6:ae:d1:21:79:8a:4b:77:ff:f9:02:f6:
                    c6:24:4a:aa:e1:c9:27:44:d5:87:1f:51:a5:9f:97:
                    14:96:37:d6:dc:a4:37:4a:e3:d0:38:77:d6:58:a6:
                    df:d9:2d:b4:74:c5:35:5f:50:ca:6b:78:fb:12:e5:
                    9f:3d:a8:dc:8f:d6:0a:9c:53:db:b1:de:07:71:23:
                    f3:ec:f7:18:ef:86:52:e4:96:a4:66:83:f4:1d:2f:
                    ed:37:30:a0:02:1b:72:ce:9a:91:ad:5c:9e:61:2f:
                    7e:46:f0:8a:ee:cd:37:9b:24:b7:b0:04:68:cf:89:
                    0a:bd:2e:23:26:2b:25:bb:d4:65:40:7c:98:e1:a8:
                    27:5e:d2:44:69:d6:05:d8:cc:47:bc:cc:e0:59:74:
                    c5:64:cb:ee:31:a2:5f:bf:4b:8b:54:83:6a:1a:06:
                    74:cd:fc:b5:2d:8a:6c:f6:b3:f5:6e:c0:e3:b9:a1:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:E3:15:88:B4:4A:ED:D0:7B:81:B8:73:DA:D2:A2:93:F9:C3:4D
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:c0:dc:bf:f3:4a:26:e8:ed:58:4c:25:6d:a1:f2:c1:16:
         49:44:87:dc:91:04:b5:dd:71:b5:10:a8:a7:a6:10:a8:e5:fb:
         67:58:0a:b5:ea:d5:73:a3:7d:0a:ed:ca:1a:f3:59:ad:5c:d7:
         42:67:8b:a3:f8:65:3d:d1:72:bd:14:0b:df:c3:71:7f:26:34:
         a7:e6:75:da:ab:7e:1e:ca:c4:ce:f5:a5:3c:06:65:8d:38:50:
         52:c6:f5:45:46:c0:3a:d5:f2:cc:99:65:50:b6:19:30:2e:17:
         64:4e:64:c7:34:34:cf:6c:f8:66:5d:43:f2:f9:f7:6b:57:34:
         4e:83:1a:09:58:e6:52:b1:49:07:5f:e1:9b:79:ff:0b:20:cb:
         eb:0b:45:68:30:d2:97:0d:87:c6:e5:f5:aa:33:26:34:fd:23:
         38:89:0e:95:5e:34:25:56:3c:7e:70:41:21:9e:c0:75:98:a7:
         1e:5b:99:2e:2c:d5:65:de:95:58:87:51:8e:1c:b9:66:c8:5a:
         f8:5a:45:0c:04:be:0d:28:e0:dc:8c:ee:6e:f1:18:23:f9:03:
         d3:e3:98:da:dd:17:d8:aa:da:0c:d2:ad:98:e8:8a:71:a1:32:
         98:3e:50:24:36:81:87:68:15:20:b9:5b:64:87:e2:67:13:65:
         a1:74:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:20 2026 by rpki-client