Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          PTxDNkUF72czBIcU3/qNsgp26Ww50T3mr1vHMhUtGLs=
Subject key identifier:   27:5B:D2:6E:8B:B1:2D:92:9C:99:34:8D:E3:19:7E:F3:9F:1F:68:E0
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       01988B0F83D1AFF0F4B2559D387CCED5B46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          0277
Signing time:             Fri 08 Aug 2025 19:01:46 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:46 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:46 +0000
Files and hashes:         1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: LWYmAMU7q/8mQLzjBtmkzaxE43nCkWvgyt+jcK+86d8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:83:d1:af:f0:f4:b2:55:9d:38:7c:ce:d5:b4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Aug  8 19:01:46 2025 GMT
            Not After : Aug  9 19:01:46 2025 GMT
        Subject: CN=275bd26e8bb12d929c99348de3197ef39f1f68e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:df:ad:0c:96:d8:eb:2f:c5:9f:5f:84:e4:
                    58:4b:70:00:26:67:da:ec:5a:32:d9:4f:37:25:be:
                    8d:23:04:c2:71:32:7b:96:f5:5a:e3:d6:9c:51:6a:
                    7e:00:af:b8:21:a3:73:2b:1b:19:37:9d:59:7f:95:
                    44:b7:fb:47:93:b5:ca:5c:c6:1f:54:57:d8:af:6a:
                    b4:f3:a8:aa:04:ad:ef:47:a2:f1:9d:a3:a8:b7:10:
                    9d:67:84:cd:00:b7:41:0e:e7:ae:d7:fd:9e:67:8d:
                    f3:ed:c7:b6:bc:4c:be:c1:ad:44:41:27:48:00:36:
                    bd:d4:93:3c:db:2e:02:fc:d1:ed:13:5f:3c:f6:3a:
                    6e:be:5f:0d:80:f9:d9:7b:4f:9b:34:85:98:20:6c:
                    8d:19:3e:f1:35:fe:3b:16:a9:2c:81:a2:a6:e4:7d:
                    b6:d2:c6:9a:2e:89:a6:0c:5e:cd:23:f9:5f:35:6b:
                    56:05:c2:27:e7:fd:32:e0:af:1c:e6:1f:ab:c4:a2:
                    d5:f0:96:18:be:44:3e:f3:80:18:49:70:20:f4:d7:
                    c8:b1:26:e5:3e:39:6d:fd:92:b7:bd:ac:7e:2c:b8:
                    73:d1:7d:ac:22:9f:23:8f:99:35:73:35:a3:76:0e:
                    af:86:e1:fd:02:90:f7:9f:fa:b1:28:07:f2:a6:67:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:D2:6E:8B:B1:2D:92:9C:99:34:8D:E3:19:7E:F3:9F:1F:68:E0
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:b5:33:db:13:c8:28:ca:83:f8:9b:87:1e:38:c6:8a:7a:
         e5:d0:bd:ae:4a:64:21:ed:7e:80:f3:1b:d2:b9:3f:03:32:f0:
         3e:1d:7d:4c:05:17:f5:1d:c8:61:3b:87:1c:b8:4b:98:d6:a2:
         d3:15:d6:6f:3a:40:8c:35:80:4c:ce:ee:1e:ac:43:b4:0e:4e:
         5d:06:65:cb:25:32:af:24:78:53:c2:9a:a5:c3:bc:fc:03:74:
         94:9e:9b:c9:5d:f1:3b:59:46:c1:fa:0d:52:b0:2c:b2:a9:e8:
         33:d6:03:77:69:12:94:f3:a9:a5:27:74:45:46:cc:7c:a6:6d:
         b6:f2:70:37:f7:a6:f2:23:4b:b7:8b:f2:85:eb:61:5d:f4:19:
         a4:7d:79:7c:36:57:e6:9f:57:21:b2:65:5e:4b:fd:72:41:6b:
         b7:0e:c2:75:56:90:d7:68:ed:43:dc:2b:ee:10:9e:48:7b:05:
         2d:5e:6d:d3:8e:be:01:f4:a3:0a:d5:8e:02:5d:dd:75:81:49:
         54:f0:11:c0:f5:de:90:e9:aa:4f:4e:30:f9:a4:b0:22:f4:e2:
         06:5b:e7:ac:7d:0f:1c:54:c7:cb:aa:60:94:20:90:cb:5e:20:
         a2:83:f4:36:67:4f:6a:2f:fc:7b:89:44:ce:3c:ac:fc:8d:77:
         f9:8f:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:42 2025 by rpki-client