Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          nz58X8pY1xGoxC2iupZzlvjTV3AVWaiJGgH88XoL6ww=
Subject key identifier:   DC:D6:6A:97:2D:A7:93:A9:81:D4:9F:DF:CB:8C:BD:1A:1B:5F:F6:C1
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       01A0E81CF6A4E6F54FD375EF684A23AD9CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          06CC
Signing time:             Mon 28 Sep 2026 13:03:27 +0000
Manifest this update:     Mon 28 Sep 2026 13:03:27 +0000
Manifest next update:     Tue 29 Sep 2026 13:03:27 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: 0q3tBeyKFKjmgpQFDXrsvEz/X3UUtBCWN+lL2qGpXSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 13:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:1c:f6:a4:e6:f5:4f:d3:75:ef:68:4a:23:ad:9c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Sep 28 13:03:27 2026 GMT
            Not After : Sep 29 13:03:27 2026 GMT
        Subject: CN=dcd66a972da793a981d49fdfcb8cbd1a1b5ff6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:7b:16:ed:cd:ce:57:60:37:00:10:8a:02:
                    9c:6b:6e:e2:6e:57:21:14:1d:33:b8:e6:ca:77:be:
                    97:22:e9:f6:77:ba:08:10:39:8f:f6:01:9b:6a:4d:
                    4a:e6:b7:98:96:3a:66:fd:34:21:c9:cf:3d:16:d6:
                    9d:4a:0d:4a:4d:69:7c:cb:74:59:04:70:64:c9:3a:
                    70:d1:74:39:13:bb:89:35:02:42:63:c4:68:e7:28:
                    e7:27:15:87:8b:0f:dc:aa:7f:ae:79:25:51:d1:8d:
                    70:97:6a:cc:ad:52:10:0d:c6:7f:48:0c:8f:39:96:
                    70:c4:bc:69:c2:8a:2d:6b:e5:f5:12:90:ad:81:80:
                    97:73:fb:1a:be:f5:60:ea:61:cf:55:a1:72:14:53:
                    15:42:6e:b8:dd:77:b5:83:0a:ae:95:8f:cd:2f:ff:
                    71:87:75:78:8b:5a:f3:6d:c1:1a:7a:0a:a1:cb:1b:
                    ec:ce:16:82:46:8c:ba:d3:20:66:42:8c:ed:9d:a9:
                    93:7e:c7:81:e1:01:ca:9f:92:40:30:08:22:21:70:
                    0a:18:ad:8b:71:70:68:78:51:46:57:c4:32:1a:36:
                    ef:15:7c:26:b6:0f:86:af:d8:d6:42:fc:cb:2d:5f:
                    fc:5a:a5:27:bb:65:ac:9e:e5:bc:6f:a1:a4:a3:09:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:6A:97:2D:A7:93:A9:81:D4:9F:DF:CB:8C:BD:1A:1B:5F:F6:C1
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:88:46:99:f1:9e:94:de:98:b9:15:a6:d0:47:b3:c3:d2:ae:
         be:49:f1:5c:07:c3:d3:fd:a1:90:2e:9c:be:4a:70:c5:81:a9:
         4a:5c:06:a6:e9:eb:71:56:8f:5e:50:ea:60:9b:ad:13:6b:1a:
         51:74:c3:a9:0b:c7:de:68:00:47:aa:85:2a:10:d9:f2:5f:b0:
         bf:71:03:c1:da:8f:1a:1e:37:6b:8a:e0:26:19:da:aa:0b:66:
         6e:a7:e3:8f:f4:e3:17:f1:0d:3a:d2:8a:30:6f:4e:e8:1c:d4:
         8e:bd:05:6a:be:3e:d1:eb:97:19:54:ad:63:4d:c4:39:9a:98:
         34:e2:32:9c:6b:f6:59:f0:37:df:9b:27:df:40:8b:3e:55:e8:
         80:c3:a8:0c:61:cd:6f:07:d8:72:19:86:71:50:91:13:a7:e2:
         e2:91:3d:5e:05:10:15:d2:9f:59:8b:23:7c:cd:ab:72:11:62:
         a2:1d:8a:fd:27:a0:99:4f:8d:61:d2:de:b6:af:af:c6:59:00:
         16:ac:6d:dc:09:d7:4e:97:f2:f2:17:e4:0f:63:e3:5c:12:46:
         a3:29:9c:94:84:98:52:e6:71:0e:05:a0:97:24:c3:f9:32:03:
         fa:d6:d3:79:63:6b:22:a9:09:36:5e:42:d6:1c:4a:86:9d:9b:
         49:16:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:02:19 2026 by rpki-client