Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File:                     n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier:          xzqpinz5c6akrD/Rqjr8DkHQwOlwo0IlexJskrRZp2U=
Subject key identifier:   D1:1A:72:B0:B2:77:86:E0:7E:89:18:CA:FF:D4:89:76:15:58:D9:31
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer:       /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial:       019D9BF59F20EDB78F29D220158B9F151A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number:          084B
Signing time:             Fri 17 Apr 2026 15:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:58 +0000
Files and hashes:         1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=)
                          2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: SZjVkZIakpYzETH8dcS/NJgEKrRcODZ15xbW5R/mBMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:9f:20:ed:b7:8f:29:d2:20:15:8b:9f:15:1a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
        Validity
            Not Before: Apr 17 15:00:58 2026 GMT
            Not After : Apr 18 15:00:58 2026 GMT
        Subject: CN=d11a72b0b27786e07e8918caffd489761558d931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:f4:30:c0:9a:41:1e:67:e4:06:b3:3c:07:
                    8c:15:7b:6e:2c:c1:89:8c:b9:6a:06:31:7a:97:4a:
                    d6:c1:e4:ca:3b:c8:28:8c:ca:b7:dc:78:0c:73:e1:
                    3f:cb:1a:61:bd:43:e8:84:a0:f0:87:0f:89:79:30:
                    41:01:33:01:e1:f7:49:0c:4d:04:0c:01:8b:7f:39:
                    32:91:9c:1e:41:23:e9:97:39:da:23:de:00:9a:c4:
                    a7:13:aa:6f:9e:1b:73:ef:12:82:e8:75:20:5c:33:
                    d5:48:5f:d8:ba:77:00:d3:83:b0:25:7e:33:5f:0e:
                    47:20:1b:e1:bf:46:d7:04:be:39:86:e9:77:27:7f:
                    71:dd:80:12:36:34:a4:f1:92:4c:37:30:8e:fb:1b:
                    07:b7:03:15:1b:a9:2c:96:5f:3b:b5:0c:12:7e:40:
                    04:7f:86:75:4c:9a:9e:bb:86:6e:72:ba:94:f7:52:
                    8e:76:b7:b4:b3:3a:c5:a3:ea:79:53:27:ce:99:18:
                    6d:68:6c:9c:e1:09:8a:05:2d:32:c9:cc:20:b3:9a:
                    26:1e:0a:94:0f:dd:e9:df:40:22:1b:37:0a:55:67:
                    77:97:48:66:85:cc:19:c3:74:79:29:df:8d:de:32:
                    96:00:7f:e4:7f:35:1a:85:78:0c:ca:cd:2c:01:c8:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1A:72:B0:B2:77:86:E0:7E:89:18:CA:FF:D4:89:76:15:58:D9:31
            X509v3 Authority Key Identifier:
                keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:07:29:fc:07:71:2d:ab:64:12:7b:13:05:e1:78:d1:82:19:
         f3:40:81:a0:70:97:c6:1b:18:92:51:33:07:f7:d5:20:f9:d5:
         35:e7:82:5d:55:85:1d:62:24:bd:95:a8:a9:71:b0:f1:5e:01:
         6d:bd:fa:ca:3a:a5:68:bd:dc:18:0b:a6:6f:f5:63:11:20:dd:
         1d:81:29:cf:47:36:b3:00:a7:5b:44:94:0b:6e:e6:db:34:3e:
         7c:78:a9:10:25:cb:94:6d:66:c6:80:ca:28:f2:32:0b:e3:d9:
         02:d1:d2:a0:6c:5b:a1:aa:7c:09:e3:32:fb:6b:dd:2b:ef:bd:
         96:50:14:c8:6d:8f:53:d1:64:dd:0d:36:1c:eb:8c:70:78:cb:
         38:de:db:bf:13:b0:9b:52:f2:71:0e:a2:5d:65:1d:ed:c6:21:
         b1:5a:c9:c7:93:f8:95:97:0e:89:31:a3:05:ec:62:f5:cf:93:
         d0:58:16:d0:0f:46:53:ca:a1:74:1c:fe:f7:bd:60:02:51:32:
         93:cc:11:0c:a3:7d:e5:18:7b:2d:bd:98:6f:0a:be:e0:76:51:
         34:0d:b1:45:63:ce:e6:63:1e:c1:f9:0c:78:72:6a:e2:39:13:
         0b:32:c5:a6:98:63:c9:69:f3:35:06:b1:cf:1f:73:52:0e:20:
         96:d3:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:54 2026 by rpki-client