Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File:                     n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier:          d+GvaUJXGeSEFnWxviEtKtp96xDcvbb4UnfqMqnLfgo=
Subject key identifier:   E4:6F:53:8C:51:EF:23:55:D7:DE:B3:08:5F:44:CA:E4:93:A8:99:FE
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer:       /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial:       019CAAFD434C92748EEB4B9C5D40E7B8C88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 20:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:50 +0000
Files and hashes:         1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
                          2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: Y2NxtvJFI/trAUhhHU/yyjg5c7yCw+L5ZhkGB2Cw5HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:43:4c:92:74:8e:eb:4b:9c:5d:40:e7:b8:c8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
        Validity
            Not Before: Mar  1 20:00:50 2026 GMT
            Not After : Mar  2 20:00:50 2026 GMT
        Subject: CN=e46f538c51ef2355d7deb3085f44cae493a899fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:4d:6e:1a:84:d0:3e:6e:05:68:ba:8f:79:
                    2d:9e:b7:2d:bc:35:19:aa:b6:a8:30:a5:ac:4e:8c:
                    5c:02:46:bf:e7:06:e3:b3:91:a8:02:08:82:32:35:
                    11:10:78:8b:90:ef:04:7f:67:9e:3b:61:50:cd:b3:
                    a1:4b:cf:ae:7e:fe:8c:27:04:19:aa:bc:ad:77:82:
                    6f:63:87:dc:eb:d2:66:7b:c9:1d:88:74:cf:a7:22:
                    0c:21:c4:c4:e7:17:b2:64:b0:b8:96:4d:89:ee:c1:
                    3e:ea:a7:37:16:8f:28:b4:78:6a:ef:e1:11:5d:19:
                    5d:fd:9f:f0:c0:68:e8:a8:3d:1a:a2:00:79:4a:18:
                    39:14:b3:32:3d:fe:0d:ce:32:ac:3c:28:d3:30:00:
                    2b:16:29:4b:72:5b:37:fd:10:eb:b2:b2:b8:a4:36:
                    d0:0a:d4:00:08:c3:0c:14:18:db:db:bb:47:81:ac:
                    db:0e:db:29:57:5f:46:10:2f:bf:77:9d:ab:64:04:
                    be:12:fe:31:2c:37:02:2f:6a:0c:22:5e:1c:1f:0a:
                    d5:9c:8d:a3:18:7c:60:41:ec:c2:47:67:92:23:9d:
                    71:f1:c4:5d:15:e8:0b:fb:95:b9:3d:38:e3:f3:61:
                    8c:ad:14:d5:26:36:23:ee:a0:3d:86:8c:90:91:5f:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:53:8C:51:EF:23:55:D7:DE:B3:08:5F:44:CA:E4:93:A8:99:FE
            X509v3 Authority Key Identifier:
                keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:d3:f9:64:1e:ca:23:85:62:a4:8e:48:6a:67:85:68:ee:15:
         ee:12:ef:61:e5:eb:80:07:89:d1:e7:a3:79:4f:bf:59:7b:ec:
         de:51:5d:cf:0e:c2:48:ad:70:e1:f1:de:25:e2:10:f8:b3:f6:
         20:4b:6d:fb:bf:b9:26:eb:6c:bc:2a:71:d2:3a:22:3a:13:1f:
         2d:77:5a:eb:d9:81:12:86:5d:a5:fb:21:48:47:72:fc:28:ce:
         f6:f8:78:fb:8f:4d:f9:ba:f9:e7:95:40:12:8e:30:a2:af:2f:
         8b:ad:1f:f0:93:a3:af:57:6a:f4:1a:16:6e:f3:90:36:ee:6a:
         ee:aa:37:dd:a3:ac:f3:8a:8f:3f:e6:b9:f2:65:2a:79:04:11:
         c2:82:4d:1c:a5:d5:bc:53:0e:39:df:21:1a:e0:4a:6f:9d:63:
         ee:e5:83:89:c9:67:be:b7:59:b5:3b:de:8f:03:f3:a2:4f:74:
         e8:70:3a:29:93:b2:f5:fb:3e:97:c0:d4:5c:f3:fd:03:f6:1f:
         c1:65:bc:2e:c4:65:c2:5a:d4:37:e9:5e:3a:ec:c7:1b:e0:1f:
         ed:cf:05:a1:6e:f7:4e:1a:16:76:26:62:6d:08:84:7d:39:70:
         14:9f:57:cb:5c:78:27:0e:1a:15:74:ba:2a:79:ed:d9:96:2f:
         2a:6b:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:10 2026 by rpki-client