Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          6XECIKxUxZG9TkVL+wpr9C5FnoXY6RQmzUNHA+RxRdE=
Subject key identifier:   67:0C:D6:10:92:E3:0A:7E:FB:5C:A1:CE:0D:03:E6:23:69:57:93:18
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019D28F339B8BF9DC7CEECCF41E67FBB864E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          03B0
Signing time:             Thu 26 Mar 2026 07:02:01 +0000
Manifest this update:     Thu 26 Mar 2026 07:02:01 +0000
Manifest next update:     Fri 27 Mar 2026 07:02:01 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: FvoVb2/GQiGv/AhAtMobVfzYJH80TK2l38heiPXSfeg=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:39:b8:bf:9d:c7:ce:ec:cf:41:e6:7f:bb:86:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Mar 26 07:02:01 2026 GMT
            Not After : Mar 27 07:02:01 2026 GMT
        Subject: CN=670cd61092e30a7efb5ca1ce0d03e62369579318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:ae:33:75:76:b7:bc:5f:d8:cc:e7:3c:5b:
                    04:e7:ef:33:57:76:cd:2d:e8:64:e8:9c:ea:c6:62:
                    eb:3d:57:94:b6:37:2f:96:01:b1:8c:fd:67:53:3e:
                    2c:0a:ac:da:e8:66:da:5b:2b:e4:cc:bf:78:b4:fd:
                    95:29:28:d1:ae:8a:8d:0b:dc:6b:b6:9b:3b:94:48:
                    17:73:55:d9:69:dc:54:4a:84:48:95:3d:cf:32:32:
                    93:8d:27:03:f4:8e:75:6e:cd:8f:13:29:5b:d3:22:
                    50:57:20:64:ba:ac:02:04:c1:97:88:aa:b7:fb:ae:
                    8a:5b:25:1f:d0:b7:38:f2:14:11:70:e0:0b:88:81:
                    21:82:e3:da:4b:42:49:ed:29:09:1f:f8:ce:86:c8:
                    09:dd:65:33:51:21:21:64:55:e5:41:d8:2b:35:22:
                    77:e2:47:61:a2:66:f4:5c:b1:4f:7d:22:d6:e7:81:
                    e3:b0:ad:c2:53:72:22:76:79:86:da:9e:77:1c:99:
                    fc:82:23:e6:b7:31:6f:a2:f6:49:2e:4d:ee:5e:d9:
                    6c:4a:72:24:32:87:71:87:91:e6:e7:64:16:4d:d4:
                    78:12:ef:f2:bf:d9:97:b4:7d:31:84:d2:04:da:49:
                    9a:99:b8:9b:25:e1:cc:e3:12:5f:c3:6a:7b:b1:ba:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:D6:10:92:E3:0A:7E:FB:5C:A1:CE:0D:03:E6:23:69:57:93:18
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:24:f8:2d:4b:75:b4:ba:30:17:1e:a3:11:9c:6f:ea:b2:1f:
         8e:1d:b3:31:68:47:9a:9f:ac:9b:f6:e0:50:e0:bb:b9:b7:17:
         ac:c8:65:cf:7a:6b:e0:84:81:6f:a0:57:9b:4d:ec:f5:91:5c:
         49:7e:6e:38:2e:c0:01:b0:34:78:e8:74:2b:ba:5f:df:91:d6:
         7f:bb:4f:13:84:d2:85:20:39:1e:74:ad:b8:37:b9:90:a2:c2:
         e7:3c:40:20:8d:93:e2:5a:5a:68:82:0b:fd:b6:69:18:ea:af:
         dd:1d:f8:be:91:46:80:c4:ee:b3:ee:e2:b4:c6:bf:dc:59:36:
         07:87:03:4c:39:39:47:7b:30:93:96:90:f3:85:ca:b0:d8:85:
         ec:b0:8e:4d:19:c7:63:34:53:38:5e:f8:0a:f2:1c:76:60:bc:
         53:96:9b:70:0a:6d:23:76:15:ed:eb:e3:1e:6e:bd:02:ee:99:
         78:d0:58:2b:51:4a:cd:3b:81:79:7f:fa:1d:ef:cd:e7:5f:9b:
         69:0b:c2:1e:8f:ad:34:13:af:2d:ff:fc:95:91:a0:c7:5b:ba:
         e0:e5:f1:08:a9:09:75:42:c3:69:10:1f:f2:14:f5:08:01:0b:
         12:3e:ba:43:25:24:b5:ed:50:7b:22:a0:5e:df:4a:70:ee:d6:
         a2:c3:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:03 2026 by rpki-client