Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          IPbohtI0qKKXL+wrY1u17CyajmBDEQwm0yhFB7UE44U=
Subject key identifier:   90:1F:8B:B7:EC:AE:18:5F:F0:A3:60:91:0C:7E:02:9C:57:1C:1F:4E
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       019D284E79D1CEA000CFC2791AB3D93B9C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 04:02:04 +0000
Manifest this update:     Thu 26 Mar 2026 04:02:04 +0000
Manifest next update:     Fri 27 Mar 2026 04:02:04 +0000
Files and hashes:         1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
                          2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: rHIV3JpOIG0nNUUd7MTUUoDrExxcO/piMXPYDNa9v3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:79:d1:ce:a0:00:cf:c2:79:1a:b3:d9:3b:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: Mar 26 04:02:04 2026 GMT
            Not After : Mar 27 04:02:04 2026 GMT
        Subject: CN=901f8bb7ecae185ff0a360910c7e029c571c1f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:81:94:be:1c:3e:14:b1:16:48:f7:ff:14:
                    67:5b:a3:b1:ab:25:62:3b:54:6e:b5:e8:c3:16:5e:
                    39:06:b4:ff:29:fe:bd:1c:b8:86:1e:fb:e4:6f:c1:
                    9e:d8:4c:c8:16:82:a3:96:c4:e5:04:04:39:51:f2:
                    d8:63:f2:7a:69:e2:79:cd:54:cf:ce:19:f3:68:91:
                    da:21:61:6b:91:3b:30:9d:30:3e:9b:ed:2a:f4:6e:
                    c1:8a:3c:7b:c8:f0:bd:0a:e2:6f:32:c7:31:f8:05:
                    2f:08:0b:c9:1b:fb:60:60:16:11:72:57:87:8b:ae:
                    c6:2f:b0:4a:4d:43:fa:50:d9:fa:41:40:f1:9b:95:
                    a4:bc:3b:60:d6:5f:16:ab:1d:2a:3f:2b:c2:86:28:
                    67:4c:e1:12:21:29:31:de:ce:64:e4:5f:02:e6:1f:
                    ba:fe:ef:46:c8:24:4a:7d:63:87:33:d0:10:60:3a:
                    23:8a:aa:ce:0a:72:e3:ba:13:9e:0d:b3:27:26:dc:
                    b1:2f:98:45:d1:34:9a:67:f3:c0:39:96:3b:7a:2e:
                    cf:1a:59:d1:94:b3:02:20:f3:e8:9c:7f:e6:4f:5b:
                    4c:f7:ac:6b:e2:a5:1d:b3:02:d5:ec:c8:0d:e9:84:
                    2b:ac:2f:ec:6e:3c:01:85:a0:bb:7f:a6:6d:89:3c:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1F:8B:B7:EC:AE:18:5F:F0:A3:60:91:0C:7E:02:9C:57:1C:1F:4E
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:c7:e5:aa:67:3a:c4:66:d8:9e:65:db:e7:27:1e:55:e3:
         ef:d8:9b:87:85:5e:d7:41:6c:ae:d2:c5:bb:46:b1:e0:9a:e3:
         b4:a5:cc:f0:7f:dd:85:86:a3:6b:22:9d:7e:8c:0f:63:c5:61:
         b2:41:b7:af:f0:25:da:69:67:7c:12:05:73:d6:23:d4:0d:7f:
         58:95:f5:da:30:31:c5:07:9d:c8:ae:4e:34:4c:f9:22:fc:70:
         46:e6:f5:6e:6f:f8:50:01:fa:a5:b2:12:2b:ac:57:b5:0c:94:
         7b:e8:24:21:78:6b:02:7f:79:02:48:bb:e8:00:ac:2f:49:9f:
         29:71:e8:8f:a5:bb:12:e6:c6:c0:f9:b2:4d:54:b4:60:2b:c4:
         88:7a:50:4e:c1:e5:30:b6:33:9c:74:9c:e7:8f:06:c8:ea:6f:
         79:25:fd:93:2a:2e:33:3e:f8:bb:cc:9f:49:f7:11:29:57:8b:
         c8:f9:7e:82:80:70:0c:20:79:16:90:ad:82:cf:5b:1f:8b:bf:
         f3:3d:a3:13:07:fc:47:e7:74:0e:b4:ac:c2:8d:3d:de:ee:e5:
         9e:b1:dc:d9:2d:50:ce:0f:80:5e:98:1e:3b:de:d8:5e:eb:3e:
         62:ed:1d:af:d2:e1:3b:39:da:51:d3:01:90:79:b4:75:9c:5a:
         86:30:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:07 2026 by rpki-client