Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          9EXnbclZC2j6QMctk1tL/ZDYLLNBELUfSl6gvm14dJI=
Subject key identifier:   FF:42:86:23:59:64:D3:E9:A0:6E:7F:8F:49:8C:C9:13:52:A0:28:22
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       019E1DFDE10BC5DFF91CA1F5E8602BDDB1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:00:37 +0000
Manifest this update:     Tue 12 May 2026 21:00:37 +0000
Manifest next update:     Wed 13 May 2026 21:00:37 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: r2LWOiDq/0eZOCXdZGFZ+SsFn7Q1ZWxDQ7k/JtdAYaQ=)
                          2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
                          3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:e1:0b:c5:df:f9:1c:a1:f5:e8:60:2b:dd:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: May 12 21:00:37 2026 GMT
            Not After : May 13 21:00:37 2026 GMT
        Subject: CN=ff4286235964d3e9a06e7f8f498cc91352a02822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:46:40:00:d9:52:27:42:33:3d:5a:6a:58:
                    0c:22:3c:6f:ef:20:ce:81:bd:3e:4c:34:75:58:4c:
                    24:40:9f:b8:fe:cf:1b:aa:47:d6:3a:9a:0e:7b:7f:
                    fc:71:99:e3:65:70:1d:83:21:14:45:6d:5b:6b:cc:
                    43:89:22:63:8f:e4:aa:6b:85:10:6e:09:eb:4b:63:
                    79:a9:de:e6:84:d3:49:90:50:25:44:1f:2f:bc:fb:
                    4c:e2:63:b6:1c:b6:e2:da:18:61:86:5b:91:68:5e:
                    20:3f:e0:ce:d0:11:10:57:97:a4:44:32:4e:59:43:
                    1a:a3:87:cb:a6:48:bf:61:8e:af:d6:5e:13:ca:35:
                    15:04:6d:0a:51:ce:56:ad:dc:bd:c2:90:67:54:3f:
                    e5:4f:3f:a8:55:e6:1f:38:a3:52:72:fb:aa:ce:d2:
                    b8:6a:62:3a:bd:42:38:bf:fa:75:c2:4b:a2:54:6f:
                    47:ac:e6:15:a0:a3:17:62:07:ba:59:5e:c0:ed:3c:
                    8f:2c:ba:9c:ee:43:07:6d:29:4b:2e:05:f9:6e:33:
                    53:f4:28:fb:1a:6d:98:ce:39:60:e6:5c:94:25:91:
                    54:d8:dc:ad:1f:72:6a:50:5f:7c:3f:9d:dc:9f:da:
                    cd:27:b9:88:0b:84:c9:58:e3:ca:52:06:dd:4d:71:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:86:23:59:64:D3:E9:A0:6E:7F:8F:49:8C:C9:13:52:A0:28:22
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:a9:4b:f0:55:f1:a2:e9:b1:1e:93:5c:7e:8b:25:46:5e:
         19:7a:af:92:58:b5:f5:f3:d8:9f:5c:fe:cb:0b:3d:4c:30:58:
         e5:a0:2f:11:77:5c:ce:18:21:cc:d2:c7:bf:75:50:00:eb:21:
         c1:ae:0b:3f:b1:17:13:92:be:fe:4c:b4:3c:ea:25:55:f8:8c:
         62:96:e4:e2:16:01:03:9d:8c:82:6a:02:28:4e:ab:a8:4f:62:
         b8:88:f8:9d:65:b8:04:49:22:d5:91:5a:b2:e4:44:42:ee:ac:
         76:f6:1c:e4:a8:9b:92:30:bf:fb:41:35:76:cb:99:9d:f0:4d:
         78:76:b3:90:44:14:f1:f2:69:6a:a7:89:ae:54:58:c7:4d:d3:
         3f:df:3f:5b:48:48:e3:00:a7:d7:07:dd:aa:ab:0d:4b:57:12:
         86:b6:fe:bc:34:c0:fc:a5:1a:2f:f0:a7:44:3e:0f:a8:de:a4:
         ce:91:23:71:61:50:83:fa:9c:d6:7a:8e:d2:db:18:57:9d:80:
         e0:22:42:ba:0e:b3:ad:35:e8:c6:fd:a6:64:8b:f7:85:a3:5e:
         99:82:95:9a:48:95:a0:e8:df:48:a2:f8:20:f6:63:a3:38:16:
         8e:d1:d6:e4:41:a8:4f:41:93:d7:59:ea:ce:30:b6:c1:65:55:
         05:cd:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:48 2026 by rpki-client