Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          dVK8Ve4WliOGmEiJ8ifAQfaDFICtEKiycI1iAmqS9kI=
Subject key identifier:   BB:29:E2:72:12:30:4D:82:D3:4C:63:2E:4B:F1:7D:68:BF:6C:7A:69
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019EC06E3FE08A124B8B7359CD4438BAF9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          0483
Signing time:             Sat 13 Jun 2026 10:01:51 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:51 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:51 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: pAxA4aBu8o2Pl23y8o45c67Qfi8POm4AWbcuC0uUocM=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:3f:e0:8a:12:4b:8b:73:59:cd:44:38:ba:f9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Jun 13 10:01:51 2026 GMT
            Not After : Jun 14 10:01:51 2026 GMT
        Subject: CN=bb29e27212304d82d34c632e4bf17d68bf6c7a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:96:59:fe:80:5f:70:29:12:c6:70:6f:63:
                    7b:27:1c:dc:11:e2:5b:a8:df:44:42:b2:f9:ab:1d:
                    a6:1d:45:44:a6:13:9e:cb:3c:f2:9c:ba:26:5e:21:
                    51:48:8c:90:23:0d:a8:1e:18:f1:32:36:de:4e:18:
                    be:9c:65:95:23:15:14:95:d7:d8:17:73:c9:bb:8f:
                    a1:e0:00:14:92:de:21:40:5a:85:cd:97:ff:37:8d:
                    0e:c8:5f:05:76:49:de:6c:0a:59:7f:98:65:df:f0:
                    da:03:7a:db:73:e0:98:d3:b7:3c:ac:4c:b9:a8:2a:
                    53:37:85:4e:92:e9:d5:57:eb:eb:80:ef:0f:36:5c:
                    b3:17:1c:c2:16:12:17:6b:6b:3a:c2:e6:26:a4:41:
                    85:8f:1c:36:ae:0b:54:89:24:d7:c9:2a:2f:9c:64:
                    e7:0c:8e:48:d1:f9:db:eb:25:34:8f:18:1e:8e:f7:
                    c2:73:f6:e9:81:2d:c6:fe:d5:2c:99:3e:d6:62:00:
                    07:1d:fc:3d:fc:57:d4:3b:56:34:63:2e:52:bd:17:
                    39:d4:c3:72:2a:d9:9e:e3:b4:c5:dd:3a:0d:b3:85:
                    57:93:75:c3:c9:a2:80:31:65:37:54:a8:c8:b7:68:
                    57:e7:8c:0e:e7:02:58:77:73:43:37:f7:e6:c0:4d:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:E2:72:12:30:4D:82:D3:4C:63:2E:4B:F1:7D:68:BF:6C:7A:69
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:c3:65:d5:88:02:e0:4c:2f:3a:09:8b:0b:cc:42:72:59:
         8e:66:1d:c1:fa:ed:6b:36:6a:07:8d:ca:0c:2d:af:8e:e6:c3:
         f4:bb:f0:97:53:5b:25:1b:e6:5d:ae:6a:e0:b4:9b:ad:35:43:
         ea:9d:c9:f1:19:0d:b4:64:05:2d:2b:79:80:a8:fa:13:de:76:
         e6:d6:3c:c5:9d:e2:c7:d4:0e:72:af:4f:05:6e:2a:7c:9c:60:
         0e:68:aa:c6:15:27:fb:78:03:19:2c:6b:da:f2:2e:5f:62:84:
         c1:9f:8a:ca:9c:1e:2b:66:84:88:ef:8b:c8:18:32:83:bf:4a:
         58:e3:35:93:98:02:fa:12:53:21:20:f7:09:35:16:88:d0:0a:
         2e:ac:09:de:61:47:c1:9e:25:b3:aa:7d:98:f1:57:3f:07:bd:
         eb:6c:f2:63:99:cb:c7:86:c7:f0:ef:28:1a:1a:2f:96:69:95:
         ff:38:ff:41:6b:32:95:17:9d:c9:dd:df:52:ab:14:6d:f1:44:
         27:b7:06:f0:5d:b5:bd:77:96:a2:6b:fb:8a:b6:59:d5:ef:e6:
         d0:71:74:21:de:f2:62:dd:18:cc:69:fb:8a:d7:13:bc:d9:cd:
         99:20:f1:fb:20:69:14:c8:fe:3e:05:60:39:aa:12:3d:73:a5:
         ff:4d:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:30 2026 by rpki-client