Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          Lj311nBb6faG3FId1gBGPUUtFega3auaDxjwmYqQ4Pc=
Subject key identifier:   33:72:C8:06:37:0E:17:A9:38:52:AD:C1:9B:64:CD:FC:2B:56:7F:9C
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       0199FBEA75F45C3D220CE65B6D8518D8A13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          0336
Signing time:             Sun 19 Oct 2025 10:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:10 +0000
Files and hashes:         1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: hRZMynYnS7ikz9C3CrLDI2/9r1lOWRxBrnKB4jVvgdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:75:f4:5c:3d:22:0c:e6:5b:6d:85:18:d8:a1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Oct 19 10:01:10 2025 GMT
            Not After : Oct 20 10:01:10 2025 GMT
        Subject: CN=3372c806370e17a93852adc19b64cdfc2b567f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9c:51:17:d3:23:7a:9f:83:97:ae:b4:29:10:
                    aa:fe:2a:4d:78:7c:d7:ca:92:77:80:cc:c5:53:bf:
                    0c:45:87:8e:fc:34:e8:cb:e6:1a:d5:83:c4:a7:3f:
                    6e:e1:ee:e8:7f:18:86:f3:1a:86:05:c5:6a:00:cf:
                    3c:46:1e:0e:2f:86:43:38:48:7d:2f:6b:5e:48:c8:
                    d1:e7:29:20:51:86:be:38:d2:64:cf:f6:5b:f8:6c:
                    fb:7f:c4:86:f4:20:0f:bc:26:26:8f:77:11:45:c0:
                    15:25:95:9e:34:f0:45:7e:df:c6:03:d9:e9:3b:5f:
                    f1:bc:b4:28:ad:5b:72:98:e5:7a:25:96:d7:ac:eb:
                    3d:7b:cb:c2:4c:22:0a:bd:34:7f:03:2c:36:e6:9f:
                    04:69:60:65:88:17:37:31:cd:0d:67:a7:d4:14:78:
                    af:21:6a:63:67:97:54:a8:32:5e:ba:69:05:1e:8a:
                    2e:23:2f:d2:5d:59:50:60:2f:21:db:7e:26:4a:c0:
                    82:a1:59:12:6a:74:bd:77:71:b2:35:a6:c8:15:6f:
                    ef:f2:18:9b:5c:51:48:d6:b1:85:ab:98:af:64:67:
                    44:46:c2:35:f8:3f:8a:41:e4:7c:f8:48:08:d4:2c:
                    87:26:54:e8:39:00:0e:52:72:4e:03:e6:48:1e:94:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:C8:06:37:0E:17:A9:38:52:AD:C1:9B:64:CD:FC:2B:56:7F:9C
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:09:a0:0e:74:84:73:d2:45:53:91:2f:cd:00:fd:4b:7f:
         ac:c9:c8:45:8a:ea:a5:1b:2c:f6:16:a1:03:86:a4:cc:dc:6b:
         73:42:69:a6:98:04:bf:b0:30:8d:69:65:42:cb:78:7e:05:30:
         a2:d0:34:db:c4:34:08:dd:3d:71:a6:c6:20:fe:6e:d5:b3:7e:
         0f:41:f1:21:b7:5b:1d:6a:26:8d:d0:a0:6a:88:c5:c2:a1:6a:
         7b:52:bc:77:05:e7:bc:b4:8e:0a:92:1c:ae:0f:d9:e5:8e:83:
         35:34:ab:6a:b7:bf:07:48:01:52:3c:d0:14:52:c1:d5:57:e5:
         a4:97:54:eb:e9:26:41:5a:e8:5a:b8:b4:96:23:1e:be:09:90:
         6c:73:62:7d:bb:bb:8a:9f:da:f9:69:62:6d:4b:3a:aa:c3:8e:
         30:0a:f8:3a:63:f7:c2:ac:4e:88:3f:27:4e:ae:71:d1:81:52:
         89:79:90:19:0a:3d:7b:7e:ef:89:68:d9:46:3e:d5:c5:fd:3b:
         53:51:98:05:d5:ee:72:ce:62:a1:ba:3d:de:36:b1:e3:dd:45:
         c2:82:99:54:f7:7d:74:c1:0a:7b:3e:24:5d:51:4b:54:cc:7f:
         2e:c0:c3:ca:e2:17:e4:bc:45:48:ce:64:af:ac:a3:fc:15:2d:
         26:ec:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:51 2025 by rpki-client