Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
File:                     n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft (raw, json)
Hash identifier:          oy1Sipy6W97SYX1pE+et//oSP+4Y8tjY4xvrdSgbfPU=
Subject key identifier:   60:73:A8:A0:E5:87:56:F6:0E:72:92:B9:BC:43:1B:4D:9B:7B:E1:23
Authority key identifier: 9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A
Certificate issuer:       /CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
Certificate serial:       019D2771DEBC224339203A66BB2474F38847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
Manifest number:          9E
Signing time:             Thu 26 Mar 2026 00:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:07 +0000
Files and hashes:         1: n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl (hash: BlY303W420DtmW4fGoD3f4JT+yzkBVkn3nlUZainDFo=)
                          2: xXO4hAuj6CV2n-3NGJk-DbRFOdI.roa (hash: dzRHmEV436bNSbP8ukf6XV97axT5lZpoDEiJJC7vBXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:de:bc:22:43:39:20:3a:66:bb:24:74:f3:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9a958e3c204a6d4e5536ec43765d04d1b0c96a
        Validity
            Not Before: Mar 26 00:01:07 2026 GMT
            Not After : Mar 27 00:01:07 2026 GMT
        Subject: CN=6073a8a0e58756f60e7292b9bc431b4d9b7be123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:05:6a:2f:41:49:f3:18:5d:48:b0:dc:cb:
                    df:d3:1a:05:ad:0a:99:cc:33:6d:17:4e:42:c9:1f:
                    f8:4e:cb:d1:ec:7b:71:f7:e8:a7:bd:36:01:68:44:
                    b8:1e:9f:cf:f6:e3:12:70:5c:37:3d:54:d1:dd:1c:
                    fc:45:e2:d2:dd:98:64:eb:27:70:c1:96:00:df:7a:
                    91:5f:f4:8e:e1:cb:c8:6f:c9:16:a6:7e:d2:f6:c7:
                    1a:c5:dc:89:9e:91:e1:bd:ca:37:0e:0f:13:32:d3:
                    88:e3:44:46:f8:09:c1:7f:00:fd:35:8f:9e:47:33:
                    db:f5:74:c9:95:3f:36:52:f0:3e:64:e9:2d:19:91:
                    ca:4b:bb:d9:c7:74:9b:a1:57:2d:0f:17:63:bc:e2:
                    e7:4c:44:1f:77:2d:92:e3:8c:b1:5e:bf:49:2a:d7:
                    c4:8f:18:fe:92:da:06:6a:5a:fd:e9:e3:ec:09:b9:
                    6c:f5:94:2e:c7:a7:69:c6:17:8f:d7:13:a9:bd:7a:
                    1e:26:51:16:6d:9f:3a:54:f4:ac:37:d8:9c:2b:bd:
                    c8:4c:af:2a:0a:f6:26:7e:1c:e3:b1:47:98:7e:6b:
                    9d:40:ba:ce:1b:0b:06:3c:5a:ae:a2:56:41:c1:b9:
                    4a:65:cc:12:a2:ca:47:d6:57:95:50:25:41:c4:76:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:A8:A0:E5:87:56:F6:0E:72:92:B9:BC:43:1B:4D:9B:7B:E1:23
            X509v3 Authority Key Identifier:
                keyid:9F:9A:95:8E:3C:20:4A:6D:4E:55:36:EC:43:76:5D:04:D1:B0:C9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/762e75-4821-466e-a94e-769bdd172a2b/1/n5qVjjwgSm1OVTbsQ3ZdBNGwyWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:94:ed:ce:70:24:c7:89:12:c9:2d:5d:b5:2b:23:a4:c5:
         f1:76:e6:eb:62:00:2b:84:b5:d7:b3:89:c8:c7:c9:23:5c:1f:
         81:8c:f2:e7:19:90:11:5a:24:06:16:64:8d:80:cb:a8:97:53:
         d3:3d:43:1a:93:b8:be:77:b3:2b:e8:e7:a0:b6:ca:af:58:24:
         32:ab:d6:b0:aa:b1:d8:9c:0a:80:36:e3:6b:05:da:aa:28:ee:
         3e:b0:64:af:41:c5:29:fd:15:ca:90:4e:ce:e4:e2:e8:1a:fe:
         ed:32:28:5b:33:d4:46:93:c0:6f:49:38:27:b1:b6:9e:1d:c2:
         95:6e:4d:f1:4e:73:fa:9d:c3:fb:39:d3:bd:5c:48:2e:e7:4b:
         ed:24:64:60:68:55:c9:1d:8d:b8:55:0d:89:9c:09:95:0a:ff:
         05:90:90:55:31:d6:0e:e9:08:06:5f:05:d6:3c:00:02:73:05:
         78:68:09:82:02:e0:b4:58:d7:47:87:5b:9a:cb:c1:57:a1:bb:
         b0:79:e0:bd:c4:71:11:76:36:b4:f6:3a:50:e6:e1:aa:c9:24:
         d6:f0:c4:d7:bf:02:d6:91:9a:2c:25:0e:9a:b1:c8:e6:d8:c2:
         44:5f:0f:a3:11:5f:2d:27:4e:e0:83:a7:25:8e:79:bf:2b:ee:
         a1:ab:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:43 2026 by rpki-client