Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          deEH85QCF5Bevky+JbFo4xLzEgnxkyr8ny8jlnl6DeI=
Subject key identifier:   6B:67:C2:E3:8F:2D:38:D0:76:CA:1B:DC:EA:A3:FA:4A:2F:84:00:DC
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019EC1B70A7FD95CBEDA9D4F86F2F0749EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          05AF
Signing time:             Sat 13 Jun 2026 16:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:58 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: ZV7NfUWEVU+iahyW3GQqFv3W+IcTKycKzbZTdN/VlDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:0a:7f:d9:5c:be:da:9d:4f:86:f2:f0:74:9e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Jun 13 16:00:58 2026 GMT
            Not After : Jun 14 16:00:58 2026 GMT
        Subject: CN=6b67c2e38f2d38d076ca1bdceaa3fa4a2f8400dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:f5:c2:d0:83:28:87:df:c4:55:d2:cb:51:
                    c7:5a:81:c2:8d:4c:7e:c3:d9:46:1a:22:17:47:90:
                    82:ff:4f:4a:d1:f5:e0:20:c7:97:b5:8b:79:20:c2:
                    dc:23:83:46:fc:d3:9c:ff:0a:78:da:c1:71:c4:dc:
                    32:58:63:c5:15:c1:aa:5f:e6:aa:f3:a0:d5:3b:ba:
                    b6:21:0e:ff:7b:0e:c0:9f:e8:c6:78:8b:76:8a:e2:
                    c9:3b:dc:fc:e3:d1:b3:40:b0:a3:94:53:81:52:d2:
                    2b:37:67:3d:91:ed:a4:ce:74:e6:c8:b7:31:8e:c5:
                    a3:2b:0a:af:c9:27:a7:97:f4:ce:64:d9:23:5a:c5:
                    a1:91:5e:b5:28:60:23:4a:07:db:d0:ee:5a:b2:94:
                    73:33:6d:ff:5d:b4:6b:2d:ca:b3:66:c0:69:74:2a:
                    3d:d1:ab:69:bf:45:5a:67:81:8e:fd:8a:b6:1d:4c:
                    f7:f5:b9:f3:1a:67:07:a5:f6:50:7d:15:ce:36:db:
                    c4:c5:b3:0f:56:b1:65:b2:08:f9:76:46:22:93:e3:
                    54:c9:6b:a7:16:00:fb:a7:ca:52:86:61:6a:4c:c3:
                    69:6c:22:59:b6:1b:4f:51:b4:22:97:bb:6c:7e:ed:
                    19:d5:0b:9a:69:f8:57:e5:c0:26:66:f8:31:cd:c4:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:67:C2:E3:8F:2D:38:D0:76:CA:1B:DC:EA:A3:FA:4A:2F:84:00:DC
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:84:cf:9a:06:60:23:fa:c6:33:ba:68:13:f1:8f:8b:08:9f:
         d0:e0:ae:03:76:27:1c:94:8a:91:18:df:b1:1e:f9:12:01:d2:
         cc:cb:e6:ae:46:7d:4c:99:9c:43:f8:17:47:9d:09:b7:94:9a:
         f0:b5:bf:5d:43:ad:62:07:fa:3d:05:10:27:b9:43:54:c0:62:
         f3:21:8d:6d:7e:ef:53:8b:c1:2f:2e:8e:e6:0d:5d:90:b5:46:
         88:50:0f:65:71:fc:20:0b:95:ea:29:0f:d9:3e:ba:8d:2f:12:
         33:88:6c:ac:35:e4:c5:ca:de:bd:52:35:18:e9:c5:cf:c2:9b:
         20:6b:b3:97:92:eb:e8:bf:5c:2c:12:e6:01:ea:75:ca:d0:ac:
         5e:0b:c8:15:26:e8:7c:ad:5e:18:03:26:77:a4:42:96:69:c8:
         7a:a2:2a:5d:58:7d:36:e1:bb:96:79:85:3c:7a:f5:97:10:c9:
         61:d7:93:3e:a1:7c:ee:f8:88:b7:fc:31:e8:f6:9d:c0:3f:f7:
         c4:af:1f:9b:be:d4:71:25:84:44:5c:b5:a3:5c:65:0c:6f:dc:
         95:c3:24:ea:40:f9:62:90:c9:0d:e1:66:cf:b0:6a:80:7b:c6:
         56:dc:cb:be:3c:22:6b:c1:3f:46:11:8b:d0:00:4a:70:73:f3:
         de:08:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:11 2026 by rpki-client