Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File:                     n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier:          Jbpcv/7DryIgGMeOWMZfqopRTr1KK61UOZaXp/oBK48=
Subject key identifier:   0F:6F:D0:B1:8B:74:7C:78:B2:12:70:2F:3E:8A:93:10:C7:75:A0:F1
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer:       /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial:       019D29CEBA88F638800BCC8590D6945AAF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number:          0388
Signing time:             Thu 26 Mar 2026 11:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:47 +0000
Files and hashes:         1: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: n08K+t/VfMg8XULhcMiJ1lMpOGYgTypiWYYhgonKMWQ=)
                          2: qvxb9I-qtYwq5nyaTOxh967mrFw.roa (hash: 0+npisFp4U/poMLopt75vxz8Mv7lcpuIpt+bI27YjSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:ba:88:f6:38:80:0b:cc:85:90:d6:94:5a:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
        Validity
            Not Before: Mar 26 11:01:47 2026 GMT
            Not After : Mar 27 11:01:47 2026 GMT
        Subject: CN=0f6fd0b18b747c78b212702f3e8a9310c775a0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:08:fc:25:dd:7d:7a:5f:81:04:d5:e2:bf:
                    b6:80:bd:7a:7e:23:f5:ec:50:fa:cd:2e:3f:3e:04:
                    2c:4c:bb:0c:cb:79:7b:7c:84:2c:cf:cc:9f:d9:57:
                    4c:b6:c0:7e:29:89:15:ab:2d:ff:d3:d0:dc:ee:52:
                    e0:81:2c:0f:90:c8:e9:c9:5b:f8:a9:47:49:4b:bf:
                    b5:cd:48:c7:b8:25:5b:38:1a:22:67:2e:17:ee:7b:
                    c0:e7:f5:3d:1f:34:54:5e:a0:6d:89:0e:c1:fa:05:
                    63:db:ea:b1:f6:51:cc:11:55:2c:97:80:7f:2d:a7:
                    c8:54:36:9b:e6:51:97:3d:12:ce:71:a7:2c:35:ea:
                    6b:46:e1:56:17:b3:37:08:9a:37:b9:54:66:ec:1e:
                    e9:60:4d:bc:bf:48:fc:e4:4f:5a:2e:25:0e:7a:7b:
                    21:46:17:66:6a:5a:da:71:0e:f2:52:02:19:dd:75:
                    6d:21:36:c3:ca:62:9d:8e:5d:ec:70:10:67:59:7e:
                    cf:d9:2e:9a:fc:be:e9:76:f6:dd:11:ab:c0:20:b9:
                    e2:3c:16:c7:81:0b:01:fc:77:09:42:c6:16:ae:7f:
                    76:94:e9:8d:83:f4:99:2a:e8:83:9a:33:db:c9:88:
                    17:6f:9a:b0:49:55:e0:4a:3e:41:4b:5d:45:48:20:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:D0:B1:8B:74:7C:78:B2:12:70:2F:3E:8A:93:10:C7:75:A0:F1
            X509v3 Authority Key Identifier:
                keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:35:9d:4b:ad:47:5c:42:b7:b1:d5:78:a4:69:03:7b:fe:
         f1:ff:2c:3f:55:69:0f:68:9a:8c:bd:4e:f4:aa:5b:b2:8a:08:
         1d:6e:c1:05:7c:95:c1:37:76:0f:cf:1a:06:0c:74:3b:89:9c:
         0e:12:39:18:7b:9e:ce:eb:d3:6c:4c:4c:0e:5e:0c:47:9e:ee:
         11:8d:38:ce:df:03:b6:c8:24:98:71:dc:56:5b:db:ca:0a:d9:
         61:2c:9c:aa:2f:74:28:f8:1b:e9:29:08:07:29:15:d7:23:5b:
         7c:89:3b:87:0c:15:a8:55:83:71:36:d4:f7:94:d6:c7:d8:1f:
         13:00:73:5b:07:8c:fe:f4:25:5a:76:1d:47:fb:e8:fa:1c:a0:
         2c:c4:99:74:50:50:01:1c:ff:98:11:68:2c:44:97:8f:ca:bf:
         8f:d5:cf:cf:5f:3f:16:98:18:23:62:42:e1:52:e6:c5:4c:e6:
         ee:82:ed:ea:4f:bb:68:64:a2:7f:c6:8f:8e:ca:60:f4:82:65:
         a5:1d:6d:a5:a7:48:c5:86:dd:b9:b9:34:67:ad:b2:c3:67:49:
         02:14:46:73:ff:10:1e:4f:f0:3a:b3:da:51:ae:5e:96:80:b9:
         8a:fc:04:e5:99:8e:bd:c6:15:b7:c6:54:b6:e3:7c:1c:f3:e4:
         23:ae:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:53 2026 by rpki-client