Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File:                     n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier:          OpiQzoBTOZ4sE2RONdM/+HHO81a26WFAV8NN7v0Juio=
Subject key identifier:   73:52:E5:BF:37:F9:4C:00:77:BD:EF:09:6D:46:29:E9:8A:85:01:EC
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer:       /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial:       019D9B1961C8FE34A7FC4453AAF933249DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number:          176B
Signing time:             Fri 17 Apr 2026 11:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:25 +0000
Files and hashes:         1: Dcw-9xDEt0LNQllufwK5cz5PrZk.roa (hash: GXNoM6IBXntm7+w+WV0lZ7wmbCHNUEG3uFWcTka2eaY=)
                          2: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: j7+yMQyBBPEHLwoz6uxv3U7WFUakYCS3OmIVKQLYuoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:61:c8:fe:34:a7:fc:44:53:aa:f9:33:24:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
        Validity
            Not Before: Apr 17 11:00:25 2026 GMT
            Not After : Apr 18 11:00:25 2026 GMT
        Subject: CN=7352e5bf37f94c0077bdef096d4629e98a8501ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:0b:31:bb:20:c9:16:8c:b7:04:8b:44:91:
                    11:18:55:d7:51:36:ba:b1:91:95:aa:03:b7:59:cc:
                    23:cb:1f:e7:96:31:3b:5d:a2:b1:69:71:3c:ba:54:
                    e2:1d:16:0b:26:c1:aa:a3:a4:68:dc:20:d4:1e:69:
                    31:ec:26:f9:61:a2:20:3c:2d:15:da:54:38:56:96:
                    60:cd:56:9b:5a:e0:d7:bc:7f:9e:3c:a5:13:09:61:
                    62:ea:d9:01:a1:b8:43:25:51:64:9d:07:74:74:8d:
                    d0:5e:22:41:82:7a:c9:6f:dd:bc:af:db:e0:06:59:
                    db:a7:7f:fe:d8:7f:4c:aa:24:81:ad:5f:a2:f1:9a:
                    75:69:c0:1a:e0:42:4a:07:36:ed:71:0a:ea:e9:cc:
                    8d:06:39:b2:92:49:5e:ac:07:af:57:63:f5:f6:9a:
                    58:0c:3c:b8:4d:42:56:1c:96:3f:b3:04:50:16:aa:
                    0e:8c:89:19:da:92:68:0c:44:1d:d1:84:e3:64:b6:
                    ff:aa:70:e3:0c:e1:9a:e0:8e:c2:dd:55:f9:9f:c8:
                    7b:4c:3c:ca:dd:26:ed:82:7a:31:8b:e9:3a:6d:5f:
                    3f:ec:9c:93:04:f3:89:45:89:97:9f:81:70:20:04:
                    ce:5b:d5:79:78:0d:ea:7f:e3:1d:2d:c0:9e:1a:40:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:E5:BF:37:F9:4C:00:77:BD:EF:09:6D:46:29:E9:8A:85:01:EC
            X509v3 Authority Key Identifier:
                keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:24:59:06:5e:08:33:2b:b1:c1:c6:52:1c:8b:c0:8a:84:96:
         f4:2a:85:37:0c:d0:c6:3a:66:a9:1b:ba:5c:60:53:cd:62:bf:
         30:f3:8f:fc:49:ee:36:90:b9:b4:0b:c2:6e:fa:0a:cc:a9:2a:
         5d:86:ec:d3:fb:ff:8e:55:17:76:89:6f:34:ac:fe:e5:ea:eb:
         09:6e:61:1e:de:c4:02:92:92:99:78:33:2e:23:11:78:2b:ad:
         bf:bf:45:2c:3b:96:3c:ea:99:1e:3c:da:49:9a:d6:cd:e8:c6:
         42:aa:41:71:06:67:54:97:71:a5:8c:16:4a:e6:9a:b2:fe:e6:
         9e:5d:ff:9e:92:d0:ac:88:a8:72:ec:05:eb:1a:ee:2d:66:86:
         5d:2f:b4:88:16:ec:d0:a9:fe:85:07:58:3c:77:97:92:43:23:
         b4:44:9b:98:9b:85:bb:ca:37:c6:fb:52:43:87:ce:7a:d0:76:
         a5:89:27:cb:25:cb:3c:ce:da:b3:eb:67:29:89:0d:23:25:70:
         da:64:6b:ba:77:90:fd:d1:2a:39:94:50:3e:63:8f:52:c0:85:
         2a:0b:2e:8a:2b:76:7e:e6:b2:04:31:d3:84:0b:d8:6b:7d:13:
         af:d1:83:0c:cc:5e:2e:12:be:d1:4d:b6:6e:d6:e6:57:68:8b:
         95:d2:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:12 2026 by rpki-client