Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          MvGaOlTbCCAhTkMzrF71dudEUm1vClJLLTN6qwaeqME=
Subject key identifier:   F1:D1:A8:9C:31:DC:AE:7A:48:07:46:45:51:68:92:2C:B1:9C:69:6B
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019CAAC6493C4A6CC6817A7B703ED11A95FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          049A
Signing time:             Sun 01 Mar 2026 19:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:47 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: PZvlNu+x9SIekM/mHai4y5Ul3Q/VkaqROYxn8X3Jei8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:49:3c:4a:6c:c6:81:7a:7b:70:3e:d1:1a:95:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Mar  1 19:00:47 2026 GMT
            Not After : Mar  2 19:00:47 2026 GMT
        Subject: CN=f1d1a89c31dcae7a480746455168922cb19c696b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:d2:31:02:d0:d5:83:bc:79:7e:c5:d5:80:
                    23:be:2b:67:19:ab:94:6f:81:da:2b:56:72:87:f6:
                    7a:1a:01:10:4f:66:99:9e:79:c8:a7:21:4f:18:8f:
                    57:dd:91:37:cc:b4:d5:ab:c6:ee:02:4e:cb:97:d4:
                    1e:dd:52:c1:c0:fd:77:d3:0d:d5:83:2e:65:4c:e9:
                    e4:06:0c:da:0c:87:76:d8:ca:52:68:c7:b3:c6:49:
                    54:4c:9c:fe:a7:c2:04:19:2a:90:c9:63:2b:14:68:
                    a2:c4:20:70:bf:76:28:e8:94:ef:7f:2d:0f:b0:dd:
                    8e:82:e5:43:63:d0:60:88:e5:98:93:a7:6f:d9:2e:
                    79:09:52:ab:29:b1:40:d7:2a:2e:87:0f:6a:33:fd:
                    29:a9:0e:95:27:9e:f5:37:c6:2f:45:1e:19:e3:77:
                    ef:5d:b1:55:03:c1:9a:72:e8:92:3f:47:ac:b7:c0:
                    cd:3e:aa:9b:e7:b4:24:1c:3a:94:41:ec:82:29:a5:
                    b5:b4:24:09:6b:ab:72:aa:26:9f:f4:cb:f0:80:9b:
                    da:85:83:8f:e7:15:39:6f:81:2d:62:86:40:03:15:
                    0c:5d:9e:75:a0:d4:73:38:b5:fa:75:ca:5b:b9:2e:
                    1c:da:a4:23:00:e2:e1:e1:9c:7a:d6:ee:70:e8:bb:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D1:A8:9C:31:DC:AE:7A:48:07:46:45:51:68:92:2C:B1:9C:69:6B
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:a8:3f:b1:8b:44:d3:51:c5:0b:b2:e2:8f:22:f1:7e:b0:
         cd:03:6b:6b:7d:f6:4b:01:2e:5c:1c:07:fa:c1:95:df:38:fa:
         ce:5e:66:6b:31:bf:a4:65:9c:aa:de:52:32:b7:00:f3:b7:d6:
         4b:df:65:6f:bc:00:b5:2a:d6:03:4d:9a:f8:9f:3c:cf:61:c9:
         7a:c9:6e:a3:3d:6c:e3:f4:21:fc:a8:c5:51:f9:ab:4f:c6:0a:
         87:15:6c:dc:7e:ae:6c:e0:b0:59:ec:dc:25:a4:88:b6:ce:5d:
         37:b6:12:6e:b0:2b:b0:1a:5f:28:61:ad:52:d5:ad:21:1e:61:
         2a:1d:1a:15:9d:bd:e8:a4:35:8a:35:0b:59:3c:b7:6e:f0:94:
         ed:cf:c3:f9:d1:11:3d:a0:60:17:49:86:d1:8b:42:75:9c:b0:
         e6:bb:90:16:c5:9c:28:ea:e4:52:28:93:c7:d1:aa:79:9c:28:
         83:35:ca:50:ed:cb:0d:0b:12:61:32:0f:42:b7:7d:dd:d4:d3:
         20:17:ce:9a:71:8d:b4:8c:06:b8:b8:1d:0e:2f:0e:84:e9:62:
         4a:e2:b5:e4:2f:03:0c:3e:8b:55:53:d4:11:40:18:03:3b:bf:
         ca:61:6b:51:e2:44:67:56:3c:9a:aa:5d:b5:c2:3e:01:75:ad:
         05:34:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:39 2026 by rpki-client