Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File:                     n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier:          n0Hp+/r969a797DYoCX8y/wu8TMQ+uzaGwBFu7Ko3Q0=
Subject key identifier:   C2:F0:2C:2F:78:9E:31:FC:22:9B:F9:5F:AF:5E:70:71:50:E9:49:35
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer:       /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial:       019CAAFD7EE13AF1E970C0C81BFDEB69D7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number:          05EA
Signing time:             Sun 01 Mar 2026 20:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:05 +0000
Files and hashes:         1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: dJglfFuxKlDnBxnYHdOsb4iYF2/8MPJ/c2amYQ/Rwmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:7e:e1:3a:f1:e9:70:c0:c8:1b:fd:eb:69:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
        Validity
            Not Before: Mar  1 20:01:05 2026 GMT
            Not After : Mar  2 20:01:05 2026 GMT
        Subject: CN=c2f02c2f789e31fc229bf95faf5e707150e94935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:a9:ee:59:d3:0a:ec:3d:92:7b:b3:92:c6:
                    b3:9e:16:9a:7d:56:34:a3:7a:94:4d:ae:1e:3c:a2:
                    4b:03:e5:ab:2a:3d:36:72:8e:8c:0a:4e:ed:83:63:
                    16:f4:7e:06:a2:cf:92:ab:ac:e5:15:f4:0d:be:aa:
                    f0:73:63:a8:7d:28:9e:fd:a8:5a:a9:19:ca:13:bc:
                    5c:93:7d:0a:a8:b5:d4:13:c7:08:b3:40:1e:5d:fe:
                    d3:da:5b:2d:85:45:ae:54:cf:02:8a:f6:fd:0a:69:
                    95:8d:75:c9:11:19:62:04:15:02:b8:9c:ab:32:69:
                    35:50:22:db:c8:25:88:d2:79:b8:a4:12:b2:52:31:
                    b7:c9:6a:97:7d:c1:a3:c7:46:ce:8c:e0:06:f7:bd:
                    46:68:56:a3:52:54:65:74:f7:42:4f:af:fa:58:80:
                    3a:4e:2d:de:4d:57:40:ff:6d:41:b8:86:c4:c8:56:
                    8b:db:79:e2:9d:d7:6e:87:7b:32:f6:69:ad:89:23:
                    2d:eb:0c:dc:ca:40:03:5e:4f:82:03:14:c2:56:51:
                    1e:8a:b1:c1:88:70:d5:05:15:51:75:f2:cb:a6:c1:
                    e3:d4:74:6e:eb:81:67:14:67:74:f9:fc:3d:95:81:
                    42:98:fc:3d:8e:b7:2c:3b:98:2d:7f:a2:ce:8f:c2:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:2C:2F:78:9E:31:FC:22:9B:F9:5F:AF:5E:70:71:50:E9:49:35
            X509v3 Authority Key Identifier:
                keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:66:a2:5d:b3:d4:92:d0:01:83:dc:0c:a3:42:58:d0:27:
         be:ba:a0:8e:ea:05:9b:c8:d0:c5:62:9f:65:61:5c:a0:e5:ca:
         03:d2:98:fa:1b:56:0d:9e:94:a5:c5:79:9a:2f:09:32:ef:74:
         83:7f:28:11:a0:c7:32:71:9f:30:58:07:d7:0f:c0:6f:89:f0:
         1e:5f:60:be:d9:ad:64:c0:a5:9e:b2:c7:7a:64:e6:d6:23:5b:
         6b:c0:b5:46:16:1a:07:48:d7:41:bf:38:6d:f3:5d:8c:ce:35:
         0e:48:02:d9:4e:f5:dc:80:d5:c4:78:e6:bb:00:f4:30:d8:a8:
         31:4d:bc:cf:45:27:84:19:16:95:1a:df:1b:54:99:57:59:69:
         41:8a:b0:09:c3:5e:c2:21:48:c5:fb:ff:e0:c5:f8:7e:4f:90:
         f6:86:70:68:0a:d4:95:c2:6b:ad:24:29:8c:64:0c:c7:e1:23:
         2b:7f:48:16:63:a6:93:3e:57:45:53:f4:b7:43:f0:d0:55:5a:
         06:16:cc:0e:1d:e2:66:96:8c:78:5c:cd:c2:71:61:5f:91:16:
         d1:42:6b:bc:ce:28:62:a8:85:e5:10:a8:67:27:5c:23:b4:54:
         4a:91:db:29:fe:d4:13:9c:a3:63:fb:ab:db:81:89:f4:be:45:
         23:f9:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:35 2026 by rpki-client