Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          7zFTAODVSos3Yljw1BrM3Ymo20nwesDkGgIet7Hm/Co=
Subject key identifier:   FA:C6:93:29:95:9D:D0:C8:FB:CF:E2:00:51:C2:45:50:26:1F:0A:E5
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019D270468E8B441CA5E1F76E201DA5C6B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          03AF
Signing time:             Wed 25 Mar 2026 22:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:33 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: 0iCjz+48IWOC6W9v4tAA9UlcUGBqqWrBObDKPDChQMY=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:68:e8:b4:41:ca:5e:1f:76:e2:01:da:5c:6b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Mar 25 22:01:33 2026 GMT
            Not After : Mar 26 22:01:33 2026 GMT
        Subject: CN=fac69329959dd0c8fbcfe20051c24550261f0ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:b6:78:31:5a:48:18:9f:df:7a:a3:9a:26:
                    f2:15:5b:d9:e4:f8:a0:81:e3:87:80:96:9d:74:bb:
                    f2:aa:06:af:e7:33:9a:63:7a:92:70:3c:9e:a6:f6:
                    0c:82:2d:49:d5:a9:11:f2:ac:83:c7:8c:00:0f:68:
                    3e:6c:d1:4d:13:6b:23:84:b6:ed:33:a0:df:c2:fb:
                    43:d1:e1:98:39:e0:14:7f:07:9c:91:34:15:c1:3e:
                    fb:65:c5:88:5d:de:0a:26:cd:4a:b9:5f:35:9a:8d:
                    c9:8a:03:57:e0:09:55:3b:01:a9:a7:21:7d:75:93:
                    0e:ba:08:e0:a5:f1:d4:d6:e0:e5:47:9d:b0:15:47:
                    72:17:9f:26:51:3f:af:4b:82:e0:b9:d7:51:ff:f3:
                    91:7c:7a:52:2b:93:87:a9:86:73:20:da:f8:c6:28:
                    cb:04:46:c3:e0:bf:f4:d7:31:8b:58:3e:db:a0:66:
                    ea:c5:63:73:90:fb:1b:15:a2:e1:81:5d:60:b1:e9:
                    a3:82:0a:9a:ef:d4:db:1a:43:e4:01:f2:c2:d7:d5:
                    44:07:7b:f4:2d:b8:c7:2e:1b:f4:47:8c:6b:a6:d3:
                    65:d7:e3:15:fd:84:d3:74:e8:28:0e:72:b1:f6:4d:
                    9c:a8:aa:9d:ab:96:f6:b2:f9:45:d7:60:00:94:4a:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C6:93:29:95:9D:D0:C8:FB:CF:E2:00:51:C2:45:50:26:1F:0A:E5
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:c9:44:4d:71:dc:30:b4:18:08:79:29:77:ea:6f:a6:90:
         3a:45:4e:ac:37:24:e4:2b:d4:a6:b3:cb:26:82:82:24:2a:01:
         10:67:47:2d:76:21:99:91:33:8c:c9:8a:0a:89:18:26:71:e0:
         03:1a:52:62:c5:4d:6b:33:b5:62:a8:52:f0:7a:46:e4:86:5a:
         26:b0:fa:37:52:01:9e:a5:31:a2:00:83:45:f5:69:3a:ee:62:
         c8:c0:6d:30:b9:f5:6b:78:c5:82:ab:86:ea:5f:e5:8e:29:e3:
         67:2e:0e:2b:94:52:fc:d8:a5:f4:4d:6a:ea:be:0a:dc:df:00:
         79:3c:e9:3b:9c:c9:54:f9:65:5f:0b:f8:d2:91:bc:b2:ab:d7:
         d8:92:28:10:c5:12:5b:84:d4:bc:43:d4:b0:31:cb:12:50:33:
         ef:fd:53:73:99:19:d7:2b:4d:f5:f8:86:18:72:5d:df:c6:83:
         2e:47:db:39:9e:84:d2:a6:f6:b7:1a:d7:f4:05:fd:9e:81:78:
         be:67:12:51:dd:ac:c7:d2:d8:af:3b:be:37:24:85:68:ea:3a:
         cc:ea:88:c5:bf:62:32:f3:db:49:3b:b9:f8:11:b5:e6:98:b4:
         44:d0:0b:85:f9:e3:e4:ef:96:b4:74:2d:c4:0e:5b:f6:e2:0a:
         66:8b:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:13 2026 by rpki-client