Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          FeoQToLAwbOSMdGOIJ8+UpwvxDfjwau8vgIp1EU6xT8=
Subject key identifier:   6A:2C:F3:D9:12:05:BD:55:9D:BC:F6:AC:F9:A0:F4:04:0A:93:0A:F3
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       019D99D0BE6D9F49EB50B83F75D0B8F6E4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          0680
Signing time:             Fri 17 Apr 2026 05:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:27 +0000
Files and hashes:         1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: 0TY7r0OtzjUFf19lE8xYfj8VNiDQWmkyL8eGwIt17R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:be:6d:9f:49:eb:50:b8:3f:75:d0:b8:f6:e4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Apr 17 05:01:27 2026 GMT
            Not After : Apr 18 05:01:27 2026 GMT
        Subject: CN=6a2cf3d91205bd559dbcf6acf9a0f4040a930af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:5c:7e:65:9c:c5:75:0c:29:43:62:81:9e:
                    73:cb:36:94:e9:b0:10:32:f4:9b:d2:a8:26:a5:3b:
                    a3:4b:16:a6:5e:84:c9:33:48:86:9b:54:bb:25:5a:
                    3d:0c:60:64:e7:d8:7a:7b:e3:cb:8f:09:6c:8d:46:
                    c4:23:3b:da:ec:b7:de:7d:68:ca:1d:d0:e8:7e:6c:
                    45:d8:51:c2:71:75:42:c8:4d:a1:b8:07:87:ef:0a:
                    b7:f1:37:a9:b0:bf:b7:9e:4f:15:98:2f:37:23:f7:
                    96:67:85:65:55:4e:4e:2b:ae:44:25:35:bd:fe:fe:
                    41:78:60:4d:4a:87:22:90:73:ac:23:90:c7:0f:d5:
                    b6:b2:3d:5d:67:f7:7a:95:81:3a:d6:54:6c:db:86:
                    49:af:6e:1e:ab:17:ce:7f:bb:62:f5:ed:fc:77:9f:
                    f8:0c:1d:3e:b2:8b:14:f5:97:39:0d:a1:b6:fd:16:
                    fa:4c:a6:18:3a:33:54:76:a4:33:fd:0f:a6:b8:5d:
                    16:0e:b3:11:d6:15:c5:22:b4:c7:71:a2:a3:24:ab:
                    29:44:4e:e4:9c:99:d3:b9:c9:26:ce:cf:52:5a:94:
                    48:ad:65:4d:dc:e9:87:61:54:cc:76:0d:e0:dc:00:
                    5a:99:22:56:fc:e8:62:67:1d:e7:d3:a2:85:4e:c5:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:F3:D9:12:05:BD:55:9D:BC:F6:AC:F9:A0:F4:04:0A:93:0A:F3
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:de:8a:05:50:44:e8:fd:06:e4:30:1a:9a:f0:90:1f:10:
         0a:15:73:bd:d3:b3:77:e6:0a:d3:dc:11:9e:ce:30:dc:76:fe:
         11:ae:38:1b:1e:7a:73:9c:db:19:f3:ce:1f:3a:3d:84:c5:0d:
         e2:8d:97:4d:0f:77:e3:f8:b0:f4:93:85:1d:b8:24:01:10:fd:
         e3:9b:39:84:9a:0f:10:d4:53:62:96:9e:54:ee:15:01:17:51:
         a6:90:2b:4d:ac:16:79:c5:9a:1c:da:5c:dd:a7:8b:ed:48:96:
         5b:4d:11:02:65:89:8d:ed:ca:1a:78:2c:1f:de:40:24:8f:9f:
         26:6d:d5:f0:e1:4f:37:28:ff:87:77:4d:f9:a4:4d:b2:3b:86:
         17:82:90:aa:53:27:35:9f:66:2c:d1:88:2d:4c:bc:32:be:f2:
         6c:5f:6b:47:2e:fd:17:c2:3e:2c:1f:a2:f4:f8:54:8a:29:e3:
         01:45:43:43:cb:3f:f9:4e:f7:49:e2:7f:1a:30:eb:5f:70:9a:
         ef:b5:dc:5f:0d:cc:cb:6c:d4:2b:32:44:ac:d4:22:ef:b9:26:
         8f:4c:ec:7d:27:30:a0:8d:10:cc:8a:4e:c7:38:ac:1f:01:10:
         42:a0:f7:6a:5b:90:a6:74:77:40:c4:fd:b7:ff:ca:0c:ec:86:
         47:ee:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:19 2026 by rpki-client