Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          6LSZXJlCpwxBxPzeHVOeICOd4i/UGH2NKjG1pvkRfYI=
Subject key identifier:   54:6B:15:56:8C:47:A5:F3:92:A4:A1:A6:EA:E8:22:2B:4A:AF:4B:2E
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019F943750662336912544B640F8E65517EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          061C
Signing time:             Fri 24 Jul 2026 13:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:20 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: cwZUDZzkMEOR8o79NgZkB1GTzMwV0+DYx5GlE4K7XZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:50:66:23:36:91:25:44:b6:40:f8:e6:55:17:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Jul 24 13:01:20 2026 GMT
            Not After : Jul 25 13:01:20 2026 GMT
        Subject: CN=546b15568c47a5f392a4a1a6eae8222b4aaf4b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:2e:84:aa:0c:2b:ee:bb:50:cb:38:f7:8a:
                    24:80:ce:cb:5c:85:6a:ea:9c:92:93:62:a4:4b:74:
                    08:35:a6:cf:e0:41:94:65:7f:b4:b9:fb:05:54:53:
                    03:f8:99:a3:d5:77:16:c5:7a:de:a8:5d:59:7f:a2:
                    08:b3:2a:53:35:69:41:10:fe:4f:8b:12:2d:63:23:
                    ab:e6:2f:70:b7:f6:1c:df:d7:31:01:45:04:73:93:
                    70:86:b6:89:55:44:09:1d:30:31:c3:60:a7:18:bb:
                    7d:a9:f8:81:39:ab:67:b5:f4:38:fc:49:b2:a9:a6:
                    73:65:de:51:62:e1:63:ca:4d:be:50:a5:89:70:ce:
                    c0:65:24:c2:22:94:59:20:6f:af:68:09:2d:fc:d3:
                    b0:dd:6e:b9:11:9a:28:35:3e:60:0a:1f:69:05:b0:
                    b4:87:a3:d2:5e:d0:83:68:54:c0:07:db:0b:9e:fc:
                    43:7a:79:fd:50:35:ca:3d:e5:24:00:73:a7:bd:10:
                    29:c8:63:3e:20:89:e1:60:c4:00:cc:31:86:4f:30:
                    c8:84:8b:da:77:9b:cd:b3:4a:f1:6b:06:b4:fb:69:
                    2e:89:c6:11:8d:67:fd:4d:84:41:41:54:41:73:b6:
                    56:6e:83:ef:6d:4a:86:d6:29:b5:cb:2a:63:44:16:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6B:15:56:8C:47:A5:F3:92:A4:A1:A6:EA:E8:22:2B:4A:AF:4B:2E
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:da:b1:c8:4d:e9:f4:23:e8:fd:7f:bd:9d:40:aa:42:60:
         ae:3a:bf:07:13:81:2f:f7:22:54:ab:a8:18:8f:cd:62:00:cf:
         3a:14:3a:94:42:00:ef:ce:5b:d5:b6:c9:30:91:7a:cb:2e:03:
         ae:32:43:7f:d4:36:38:fd:da:26:d4:7a:9f:94:bd:08:13:dd:
         3f:06:48:a1:a0:69:36:70:a8:6d:7d:ac:9b:92:55:92:ca:9a:
         2b:4c:91:23:a6:c1:48:a6:9a:d7:79:bf:e8:af:78:8e:ff:d0:
         c9:cf:2f:9b:a9:16:72:28:59:b6:03:44:18:92:e4:a4:02:0b:
         1f:8b:35:22:bb:fd:64:25:2e:69:91:ab:de:c6:29:b0:28:68:
         ea:3c:87:24:34:20:f8:0e:00:c4:ec:c8:21:ac:34:0c:57:d4:
         4a:0e:69:31:c1:6e:b3:b2:0f:4b:73:5e:09:7b:8a:b2:71:b3:
         fe:ee:1b:d6:60:d2:84:f5:de:39:7d:ba:cb:80:67:e9:ca:d0:
         f6:d7:de:2e:8a:76:1f:75:c3:e1:0c:c9:d1:47:a9:e5:f6:fd:
         89:89:b3:f6:1b:13:5d:4b:f5:4a:d3:e0:42:e2:76:21:d6:45:
         89:ed:18:85:b2:28:0e:3b:1a:e8:96:27:f2:62:bd:25:f4:9b:
         ec:ff:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:22 2026 by rpki-client