Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          6aol31g2oMSI0e/rKppBrjS8D7LALgqNPZZ5kUWTGY4=
Subject key identifier:   BF:59:25:D0:87:91:D1:8D:5D:E9:C2:53:03:89:FC:6A:5C:06:0E:E0
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019E1F7E756968479F1416EDD4F760ABFF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          055B
Signing time:             Wed 13 May 2026 04:00:41 +0000
Manifest this update:     Wed 13 May 2026 04:00:41 +0000
Manifest next update:     Thu 14 May 2026 04:00:41 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: fTcPnGDU9CsWxUnNuskjNTikYMYeDS4Y40d2V/GzYgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:75:69:68:47:9f:14:16:ed:d4:f7:60:ab:ff:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: May 13 04:00:41 2026 GMT
            Not After : May 14 04:00:41 2026 GMT
        Subject: CN=bf5925d08791d18d5de9c2530389fc6a5c060ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:34:52:e5:0a:24:84:9d:be:d1:45:ff:a6:
                    a8:ab:16:73:51:9f:db:7f:8f:6b:44:d7:db:c2:49:
                    2b:a1:70:9e:54:53:78:d3:29:7d:2c:86:d9:5a:0a:
                    a9:86:e5:f4:cc:ed:89:03:d5:e5:35:40:62:fe:2b:
                    21:cf:13:90:0e:e4:32:a6:5b:d3:03:7f:ac:39:2b:
                    09:99:ed:b0:48:cd:4d:9c:2d:07:36:f2:3e:2c:72:
                    54:75:0f:3e:23:5c:a7:c8:18:ef:c1:74:4f:d1:89:
                    ba:33:52:28:cd:78:02:61:d3:0b:83:5a:c4:83:83:
                    bd:ae:5c:3d:2e:bc:9f:ad:c3:26:a1:c5:5f:6b:48:
                    8b:66:17:e5:65:00:68:08:c9:b4:b1:3a:23:5f:d2:
                    aa:5e:5c:a7:71:18:c7:5e:45:2a:bc:33:b1:e4:6e:
                    23:a4:d7:b4:b5:58:30:e8:d3:c3:24:2b:16:16:0b:
                    b8:dd:c9:63:63:6c:91:b1:f3:e2:cf:77:bf:c7:ca:
                    88:24:00:93:af:db:93:8b:4d:8b:d9:72:7f:2d:48:
                    27:b6:ff:04:4d:16:c0:a5:ae:63:f0:71:b0:f8:3a:
                    0a:83:b4:c3:62:c5:84:2c:66:b9:ce:59:37:35:e7:
                    27:3f:11:43:58:b6:2a:ca:55:50:92:c7:b7:4a:38:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:59:25:D0:87:91:D1:8D:5D:E9:C2:53:03:89:FC:6A:5C:06:0E:E0
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:99:61:12:47:60:5f:a7:25:6f:dd:18:bb:13:0d:48:77:
         13:45:fa:c0:aa:55:73:56:00:68:ea:fc:97:f0:04:c9:c3:1c:
         08:d4:39:00:7a:cd:06:c0:e5:a3:21:ab:91:64:a1:14:72:a3:
         96:14:e7:09:c6:05:9a:a6:b8:57:af:9f:64:10:f9:5d:33:3c:
         ec:f8:8e:cd:97:65:80:03:45:63:37:23:4e:d3:d0:a0:e7:0d:
         5f:bf:e6:4e:23:e6:7c:41:11:10:d2:a8:42:a4:33:3d:f1:51:
         48:f2:8c:12:a1:88:e1:e2:24:55:89:38:88:27:e7:e4:08:99:
         92:74:bc:05:55:75:e8:fa:51:d1:af:7d:d4:93:97:36:ff:d5:
         ad:1e:82:dc:c2:8a:92:48:56:68:0c:57:27:8e:f7:76:1e:79:
         01:46:6d:cc:b3:3c:88:59:7a:5c:6f:6f:91:4b:8f:d6:07:61:
         3e:49:14:ca:18:b1:d8:3c:d2:68:7f:1d:0f:f7:1f:07:85:1b:
         d5:3e:8c:f0:c9:e5:bb:c1:f4:d6:18:4a:fd:ab:e4:ee:a3:64:
         da:70:05:0c:ef:42:95:7b:8e:db:dd:a5:40:30:51:9f:5e:4c:
         cf:e1:df:d4:ab:98:da:3a:0c:d0:cd:9f:b3:a8:af:43:2c:05:
         e4:d1:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:36 2026 by rpki-client