Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.mft
File:                     n1CHukFYXJwiw5j9X1VswWats_c.mft (raw, json)
Hash identifier:          x+RAzP7aOciI+4WP+wqdlKDDXmMB/mBTD0Oqo6OWG/4=
Subject key identifier:   F6:68:44:AE:24:33:72:8C:68:4D:A9:F8:D4:F3:6A:BA:99:23:B4:7F
Authority key identifier: 9F:50:87:BA:41:58:5C:9C:22:C3:98:FD:5F:55:6C:C1:66:AD:B3:F7
Certificate issuer:       /CN=9f5087ba41585c9c22c398fd5f556cc166adb3f7
Certificate serial:       019ED42B761BE330D5CC72A7650EA37C6173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1CHukFYXJwiw5j9X1VswWats_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.mft
Manifest number:          3C
Signing time:             Wed 17 Jun 2026 06:01:18 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:18 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:18 +0000
Files and hashes:         1: k7OFfEjwlsPHRgABKjVHvSw98gk.roa (hash: ULJA6Cgc4JM66V+ygxdfXgpMQOYr75XD8p/jyhM8eaE=)
                          2: n1CHukFYXJwiw5j9X1VswWats_c.crl (hash: VkbchtJWRjLdINPDGEcFtZ4fIBR6XAJXjok63H4VWxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n1CHukFYXJwiw5j9X1VswWats_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:76:1b:e3:30:d5:cc:72:a7:65:0e:a3:7c:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5087ba41585c9c22c398fd5f556cc166adb3f7
        Validity
            Not Before: Jun 17 06:01:18 2026 GMT
            Not After : Jun 18 06:01:18 2026 GMT
        Subject: CN=f66844ae2433728c684da9f8d4f36aba9923b47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:9e:a9:99:9c:a3:5f:a6:7a:47:fb:f6:f9:
                    d0:bd:1c:cd:aa:34:5e:1e:b9:e7:88:00:fe:e6:f5:
                    da:8a:a4:1a:f7:86:43:05:65:3b:00:4f:e3:d1:fe:
                    aa:12:8e:cf:82:f8:0a:6a:a3:2a:ab:ec:62:da:8e:
                    3f:5a:86:21:be:63:d7:38:1b:c8:0c:d1:d3:34:1b:
                    cd:d7:5b:ca:db:64:76:1c:b3:0c:9a:fc:f8:9b:eb:
                    44:f7:60:f2:23:12:a6:aa:da:c0:0f:c5:46:e8:61:
                    a6:88:54:8c:60:1b:c7:23:bc:7f:f2:d2:4e:e2:bd:
                    c6:45:7b:9f:3b:eb:d2:bc:f7:58:a6:05:43:47:a5:
                    97:3b:8e:36:6f:2a:f4:37:d4:5f:e6:c7:9b:fc:29:
                    ce:75:23:1f:80:72:8f:50:af:ce:01:d6:a6:1c:5d:
                    e2:58:31:d4:9e:7e:2a:ca:fb:fc:38:ec:17:25:36:
                    ec:d7:4b:90:cc:a1:d0:f8:ce:85:5f:70:b4:b5:02:
                    74:34:60:d4:1d:a6:6b:13:98:34:19:5a:f2:00:63:
                    19:1d:95:ab:bb:64:c2:2e:7f:1b:98:17:cd:64:68:
                    62:d9:5c:fb:0e:f5:8a:3f:be:40:23:e0:7f:cf:b1:
                    c4:32:f6:66:2b:0d:8d:6d:66:62:bb:d5:dd:de:45:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:44:AE:24:33:72:8C:68:4D:A9:F8:D4:F3:6A:BA:99:23:B4:7F
            X509v3 Authority Key Identifier:
                keyid:9F:50:87:BA:41:58:5C:9C:22:C3:98:FD:5F:55:6C:C1:66:AD:B3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1CHukFYXJwiw5j9X1VswWats_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45cd13-1d67-4b8c-b096-bd945cd4dde8/1/n1CHukFYXJwiw5j9X1VswWats_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bb:d1:e0:ff:06:b8:f0:1b:02:2e:87:6f:42:24:63:16:7d:
         78:d6:77:15:f2:cd:cc:db:94:92:8a:a0:1f:19:2b:51:07:34:
         6a:ef:35:cb:8a:5f:4a:0d:c6:2d:0f:a6:52:e5:52:de:ac:3c:
         fc:5c:fe:06:50:a9:cf:41:a2:96:34:3e:7c:a4:68:b8:3c:32:
         50:01:a5:5e:9f:1d:b7:d0:f5:7e:08:79:28:4c:10:21:61:77:
         c2:e7:74:4e:0c:23:8f:eb:74:67:6e:ba:6c:0f:6b:3a:ac:0e:
         0b:31:8b:b4:c3:70:49:ec:16:e2:f5:84:55:d3:7f:52:dd:f2:
         0d:94:4c:df:a5:6e:ce:43:af:00:b9:cf:f3:81:bc:f0:58:b6:
         19:5a:84:d3:bd:02:05:64:a4:df:11:56:0e:e9:76:3a:97:3e:
         97:ee:68:74:5c:80:42:c9:92:6a:e9:37:86:3c:bc:ab:eb:49:
         04:c4:ba:1b:cd:65:94:dd:fe:81:15:1d:f5:b2:48:f9:eb:b9:
         a8:ff:35:a0:27:ea:22:9f:6f:d8:f5:6c:be:0b:8a:10:32:f3:
         67:07:14:2d:a6:a2:88:52:df:b5:a2:d4:d8:61:1b:de:64:dc:
         d4:56:2b:d2:8c:e0:91:fa:64:c3:2c:00:20:f2:c9:1d:e4:a6:
         ec:62:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:42 2026 by rpki-client