Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          JkptHeDtaWWt8iZUUtfWv96atfksjPcoyMdmPnmR260=
Subject key identifier:   77:E7:6B:97:A9:B8:3C:C9:37:70:50:9A:F8:8D:16:68:49:B1:15:92
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019CAB6BC42431181A30166F151BEE0A46B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          036F
Signing time:             Sun 01 Mar 2026 22:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:32 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: oJ9ggJQxalLNhkFjdAbxrI7rH4i45ZobFyz/AghJaIc=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c4:24:31:18:1a:30:16:6f:15:1b:ee:0a:46:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Mar  1 22:01:32 2026 GMT
            Not After : Mar  2 22:01:32 2026 GMT
        Subject: CN=77e76b97a9b83cc93770509af88d166849b11592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:f0:fb:f4:c0:f3:65:0f:4a:1f:27:09:7e:
                    b9:2b:ea:24:c2:81:cd:ab:f1:0f:00:d6:15:32:d7:
                    8b:a9:15:05:57:6b:54:a2:bb:49:60:c6:1f:db:e2:
                    ea:00:19:e8:36:b1:3b:6c:ed:61:78:26:d9:13:2f:
                    97:fa:ec:9a:6d:5a:99:28:f0:63:a9:53:ae:4d:34:
                    8d:4d:de:28:9e:bb:54:a7:2e:5b:7e:2c:bc:90:8b:
                    e2:b3:7d:97:64:cb:19:a4:8e:e6:8a:ac:b6:65:1c:
                    24:fb:fb:ae:da:3a:92:c9:81:a7:ed:02:19:c6:91:
                    80:9e:7f:c9:a0:6c:d1:18:54:13:55:02:bb:93:97:
                    e5:e2:a5:de:f3:40:07:0f:a7:6f:a7:e3:01:c7:ee:
                    55:a2:99:01:a4:5e:13:a7:75:fa:33:9b:88:97:cc:
                    b6:a7:8b:c3:5d:e0:03:da:fa:ef:e5:dc:43:c7:b9:
                    9e:50:f3:a4:e3:e1:a9:af:98:60:1e:ed:59:76:61:
                    3b:c2:f0:71:94:50:5b:c8:b6:46:d2:d1:91:57:bf:
                    fd:14:18:a1:af:15:d2:87:1b:a7:7b:5e:8e:12:66:
                    ff:30:e6:2d:74:06:a4:91:b8:73:ca:19:e8:b8:7d:
                    f0:04:76:bf:27:95:b5:8d:29:df:4b:10:28:c1:19:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E7:6B:97:A9:B8:3C:C9:37:70:50:9A:F8:8D:16:68:49:B1:15:92
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:6c:cf:d1:81:38:fe:da:b5:c0:e1:0e:c7:78:30:48:1c:
         e3:bc:1b:c3:0c:d1:01:ca:bb:dc:7f:e6:78:63:36:c6:b2:de:
         9a:32:ff:f5:eb:9d:79:bf:70:89:4e:4c:a0:53:c3:b0:be:c7:
         e2:67:6e:89:70:b8:29:05:08:b0:82:ac:5c:19:a1:72:f1:31:
         f4:25:79:7f:23:b6:45:45:9d:2a:9f:9e:26:4d:0d:7f:f5:b0:
         cf:d7:ff:92:34:c7:aa:4c:f2:0f:ae:a4:47:49:10:37:f0:9d:
         73:8b:68:27:d4:72:0a:45:97:19:49:3d:fe:43:be:1d:2c:46:
         9f:0d:92:32:26:51:27:e5:f1:1a:62:b1:10:ba:0c:e7:8f:17:
         e5:1d:a1:2a:c8:34:9a:fb:47:d4:72:e2:91:84:32:45:05:34:
         4a:31:c0:52:5a:6e:e5:fa:d2:1c:db:14:e1:f0:5a:27:f3:6e:
         29:5e:8c:c5:d5:1b:d4:4e:a4:53:c3:a7:29:bd:8a:35:11:4e:
         6c:96:b3:11:87:aa:f7:e8:df:63:6a:b2:da:4a:2f:67:ea:27:
         37:18:af:0a:40:83:a2:f7:c8:82:d6:2a:49:05:2e:bc:73:ce:
         19:b2:06:35:ca:bb:88:5a:84:b0:8a:d8:db:ce:f9:0b:ab:19:
         49:b3:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:28 2026 by rpki-client