Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File:                     n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier:          EA0FHOA3oDjHikisDugKtflh6D8aq3DKSxQ9BjLWkxY=
Subject key identifier:   CC:4E:67:E2:88:88:1A:DC:F7:8D:88:21:16:C0:97:86:67:35:C6:98
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer:       /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial:       019D99993C074ED8BE0ABAA975EE9D9D3B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number:          016B
Signing time:             Fri 17 Apr 2026 04:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:49 +0000
Files and hashes:         1: MDrbORic-T38FR83kdivFTffx_U.roa (hash: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4=)
                          2: TayBP7whOn8uG-iZTgalyiKPGes.roa (hash: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk=)
                          3: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (hash: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ=)
                          4: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: G5sTlpGP5XOWPlOda5ingHp28rrhsydqnrAdUdcXjjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:3c:07:4e:d8:be:0a:ba:a9:75:ee:9d:9d:3b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
        Validity
            Not Before: Apr 17 04:00:49 2026 GMT
            Not After : Apr 18 04:00:49 2026 GMT
        Subject: CN=cc4e67e288881adcf78d882116c097866735c698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:ed:a7:7a:36:89:ee:b4:d6:0a:00:5c:e9:
                    f7:96:83:12:e8:05:03:e3:f3:34:d7:a8:f6:08:7f:
                    94:df:ea:ca:43:92:e3:ae:93:a5:df:8d:83:8d:6a:
                    7e:bb:e9:ef:4a:d4:54:15:9e:f1:6c:c6:84:14:94:
                    00:ea:d5:f3:8c:ea:d2:21:78:f6:9e:17:fa:17:8a:
                    61:42:cd:c2:72:99:d6:7b:e7:c7:8e:cf:5b:4c:d4:
                    52:d8:9a:44:3e:8a:9b:9c:68:dd:8a:2c:b7:96:57:
                    10:c3:4d:f8:96:ca:f3:bb:5b:bb:84:09:12:91:a4:
                    c8:77:64:94:6d:45:0d:4a:77:b3:17:d0:7b:1a:50:
                    8c:3f:70:86:bc:1f:cd:36:64:2c:3a:66:27:1e:01:
                    5e:c9:0d:bd:c7:d6:52:e2:c0:4c:42:19:fb:55:9e:
                    31:9d:52:25:93:7b:ab:17:f6:f0:03:92:e5:4e:59:
                    9e:64:3f:a7:f2:a6:9d:4d:4c:a5:9d:98:bf:14:30:
                    3d:ce:6f:ff:8d:75:62:9c:80:f8:5b:83:49:7e:1d:
                    a0:94:94:60:e8:e1:e2:b9:aa:22:5f:e1:59:1c:8c:
                    9c:b7:65:e2:75:81:89:61:e3:77:db:2c:a3:41:31:
                    c7:52:e9:57:86:3e:a0:21:14:ab:f8:d5:ab:44:32:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4E:67:E2:88:88:1A:DC:F7:8D:88:21:16:C0:97:86:67:35:C6:98
            X509v3 Authority Key Identifier:
                keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:f8:e4:ed:e0:bf:f0:f7:e7:14:45:cd:f3:a5:5a:a5:0e:
         f0:f6:4e:ea:cc:a9:ad:03:c6:6b:63:a3:b1:8f:14:f0:00:45:
         57:48:45:8b:7d:4d:a7:96:5c:9a:96:88:6e:8c:4b:71:d7:f2:
         05:ca:97:61:41:62:fa:7a:62:f6:6e:80:2b:af:71:0d:b4:72:
         46:c9:1c:82:4b:a0:bb:ab:19:e0:f1:a9:8b:19:2a:90:eb:e8:
         44:c3:7c:ad:c3:4c:e3:ff:b3:02:9b:63:22:99:12:c9:20:82:
         87:67:c6:3b:a1:34:05:b2:d1:e9:1a:66:79:7a:7c:91:51:53:
         0d:d2:33:cc:dc:5b:4b:90:25:3f:db:3c:f1:69:f2:12:a7:2f:
         75:0a:58:79:1c:8c:bd:12:f0:ba:33:d5:b9:fa:f3:15:03:a6:
         b2:ff:7b:64:67:1a:ad:be:36:a7:99:41:46:22:be:c5:6e:07:
         e2:ed:07:c8:3c:c4:29:05:be:6e:99:e0:9c:db:06:2f:39:c0:
         d2:1a:54:02:17:61:cd:f1:77:ee:57:99:cb:b2:ec:22:3d:fe:
         4a:6d:e9:74:d5:d1:3a:d5:e1:69:75:8c:fa:bc:d9:15:84:8e:
         ee:07:f5:a0:4f:a7:b1:e2:d5:23:68:ad:05:cb:0a:b9:6f:57:
         91:ff:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:07 2026 by rpki-client