Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File:                     n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier:          roFYKG9ngzo+XwGFB/kE7NMYpTO5GLM2CeP+aSi98SM=
Subject key identifier:   2E:C2:B6:EF:8D:5F:74:01:52:2E:7B:D3:F3:58:C1:6B:86:D0:D8:22
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer:       /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial:       019D2627F48682DC9371E71AE5CC0A874493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 18:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:45 +0000
Files and hashes:         1: jIErjBv4bHsu41MjOA0shO_vyj4.roa (hash: bwwaPoZH0OKbIcvusR1D8Isx0CP0tMQ/CxFkxTG7ZIw=)
                          2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: OWKnf45yY5Ga6hrGRwX5pU18/TOGzcGKUYxOo/UkE9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:f4:86:82:dc:93:71:e7:1a:e5:cc:0a:87:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
        Validity
            Not Before: Mar 25 18:00:45 2026 GMT
            Not After : Mar 26 18:00:45 2026 GMT
        Subject: CN=2ec2b6ef8d5f7401522e7bd3f358c16b86d0d822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:8d:d6:0f:6a:02:39:fc:a5:07:5a:0f:90:
                    0a:dc:e9:65:09:63:bf:e4:9a:a4:1b:d4:a3:a4:d8:
                    81:59:fe:32:7a:b3:0e:f6:63:42:cd:b8:f2:05:41:
                    42:7f:13:63:d5:b9:35:34:d0:fe:56:3f:71:1c:31:
                    a1:84:ed:82:fc:e6:da:35:de:fb:df:fd:ee:e9:cc:
                    c1:f6:d4:cc:64:29:25:b8:1b:25:cb:d1:1c:39:95:
                    5b:db:bb:e2:f8:72:9e:71:24:b0:4b:77:ee:b4:73:
                    5a:eb:5c:6c:0c:16:11:2a:75:b7:67:84:85:37:fe:
                    87:8d:52:c6:83:15:da:c0:1d:8b:96:fb:ca:13:50:
                    b8:c1:4d:4a:a0:cd:3f:18:2c:f5:6b:40:55:d0:25:
                    31:f0:b9:2e:e4:da:74:7e:4d:90:6a:ed:c3:35:62:
                    1d:1d:d5:58:50:7f:b4:38:f4:39:69:47:fb:6c:c0:
                    a7:ce:6a:44:1c:ab:88:ae:9f:65:a4:4c:a3:ab:23:
                    18:35:a9:ef:7e:1c:eb:55:fa:a2:8f:e4:e3:d2:09:
                    8b:d6:a6:63:e2:eb:be:c6:39:4a:90:64:cc:73:23:
                    12:88:69:5e:e7:b4:57:d7:c0:77:33:8b:ef:2a:91:
                    d7:4c:ab:17:44:5c:6f:38:fe:1f:b9:23:b7:1c:70:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:B6:EF:8D:5F:74:01:52:2E:7B:D3:F3:58:C1:6B:86:D0:D8:22
            X509v3 Authority Key Identifier:
                keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:d1:b9:18:6a:00:42:e1:c0:8b:30:33:f9:42:74:be:38:
         7e:d5:a7:e3:05:45:3a:02:e2:cc:6a:d2:95:c9:12:00:ad:f5:
         b7:d4:9c:41:a0:ae:e3:2a:0e:ad:2e:cb:34:45:cb:74:80:05:
         09:fc:51:18:9c:a0:74:30:ae:0f:a0:a1:65:5e:8a:6e:20:e4:
         b0:b2:ee:d3:e1:34:a7:03:b6:1f:d8:4d:bf:27:4a:e5:ab:52:
         c3:50:59:24:ff:81:64:67:28:ad:ba:5e:67:8a:7a:ba:7a:e0:
         dd:bc:a5:dc:d2:be:7a:55:9d:da:0d:de:98:ee:2f:41:02:b5:
         7a:2c:4e:d9:e0:21:a0:e9:48:6e:f0:e0:74:aa:ab:f5:22:68:
         c5:32:9c:c2:12:df:56:0d:d0:a7:fa:1c:60:2c:d0:9c:de:02:
         3c:02:e1:a7:98:1c:ce:76:88:77:5d:11:75:7a:c0:69:b3:89:
         b1:0f:8c:0d:c2:03:80:ad:31:29:76:da:4a:83:73:36:1e:96:
         ce:7c:63:97:74:2c:5c:72:39:93:72:c7:1d:db:92:02:14:27:
         ab:15:dc:55:95:f7:2d:49:f3:28:8b:07:1c:1f:44:7a:3d:49:
         20:a2:40:f5:38:e6:b8:97:de:20:1e:6b:ff:c7:e5:d5:32:4d:
         b7:db:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:09 2026 by rpki-client