Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File:                     n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier:          Mof3aaxUBb2XE79Zelz5zjizolilPh1s2h1orOIOCow=
Subject key identifier:   3D:F3:B1:2B:11:4C:69:16:A0:3A:72:28:A9:FB:50:57:D3:8C:04:86
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer:       /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial:       019D9A06C1151D76465EA660376D466F3975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number:          1854
Signing time:             Fri 17 Apr 2026 06:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:26 +0000
Files and hashes:         1: jIErjBv4bHsu41MjOA0shO_vyj4.roa (hash: bwwaPoZH0OKbIcvusR1D8Isx0CP0tMQ/CxFkxTG7ZIw=)
                          2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: zM59WetqjsjtR/j8ZUWzjLMacz+bbnDdJ70uDrX3AuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:c1:15:1d:76:46:5e:a6:60:37:6d:46:6f:39:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
        Validity
            Not Before: Apr 17 06:00:26 2026 GMT
            Not After : Apr 18 06:00:26 2026 GMT
        Subject: CN=3df3b12b114c6916a03a7228a9fb5057d38c0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:75:6e:3d:ed:43:46:9b:13:52:c1:71:49:
                    79:16:4d:38:91:63:84:3e:ff:42:0f:82:73:9d:57:
                    ac:54:d2:43:6b:d9:76:66:0a:4e:55:be:b8:59:6f:
                    4d:3b:08:62:56:80:38:ee:95:5f:6b:93:e5:77:dd:
                    78:1a:4b:02:8e:8b:79:ca:42:2a:53:74:93:00:72:
                    18:75:c5:4d:ab:4b:71:a1:1e:03:4d:d6:5f:82:25:
                    22:5f:dd:2d:cd:0a:34:85:65:48:16:c8:1c:f0:c6:
                    aa:ac:31:8a:46:00:e8:98:d5:3c:e1:cb:94:40:8d:
                    31:0e:32:65:8f:1a:c7:84:31:76:9d:57:f1:73:0c:
                    3f:ab:61:42:29:5c:2e:75:92:37:54:db:bc:98:69:
                    b7:4f:0e:30:01:84:a3:55:9c:9c:e9:34:af:d2:9e:
                    30:70:aa:c0:b1:e5:1e:26:96:04:4c:69:2a:53:8a:
                    41:b1:90:84:be:f3:ad:cd:6a:d7:11:68:ec:cf:23:
                    d0:ec:6f:a6:77:59:be:f9:88:5e:6b:7b:f0:ff:4d:
                    3d:fa:e6:10:23:a6:eb:e4:8e:d3:bd:cc:db:9d:37:
                    ad:5d:83:96:ec:54:3a:da:05:f9:dc:9f:66:a8:e0:
                    30:7e:60:56:18:d5:91:98:08:42:df:90:64:3e:3a:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F3:B1:2B:11:4C:69:16:A0:3A:72:28:A9:FB:50:57:D3:8C:04:86
            X509v3 Authority Key Identifier:
                keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:d5:b9:86:b3:1d:98:5d:6d:61:44:e0:9f:cc:e5:9c:a1:
         ea:cc:0d:60:68:a7:96:b2:5c:35:df:29:c1:42:6e:e2:a9:81:
         0b:f9:ef:35:cb:76:53:2e:42:39:57:49:46:b7:c8:34:b9:5f:
         c4:b3:a9:c2:32:bc:d5:ed:d8:95:03:01:da:8a:85:c6:18:24:
         47:20:06:38:a2:65:7c:81:05:f7:8b:6f:06:7c:90:57:f5:f2:
         f7:51:b2:32:2b:7a:f9:97:fe:73:61:c6:07:9c:7a:ed:ac:bf:
         9f:b7:31:d9:97:64:a8:38:31:ea:a4:61:5b:8d:e8:0e:5a:61:
         95:0c:e6:98:ed:b3:48:d7:9f:4a:09:b0:c9:66:6a:0b:0f:a1:
         59:10:69:2b:4e:96:0b:aa:fe:e7:e7:80:2b:78:fc:47:50:3e:
         b9:a8:72:2c:de:8b:d4:65:d6:c9:0a:71:fc:87:29:f6:90:a4:
         29:87:23:9b:2e:db:08:bc:f7:53:9b:e0:4a:30:50:af:ff:1e:
         52:ce:ad:ad:5f:8f:fa:0e:bc:df:4e:19:09:ef:77:f6:ce:30:
         67:0b:f2:b2:b0:99:2c:ea:6c:a8:2f:ef:ee:ee:36:9b:9b:51:
         92:6e:9b:b5:44:2e:99:d7:6f:92:4d:9a:0d:e7:d9:94:de:42:
         37:1c:7c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBsEVHXZGXqZgN21Gbzl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjJmNjgyMDUzZDQzYzlhZDFjNjUzOWNhZWU5ZjQ2MjFi
MGRhMTYwHhcNMjYwNDE3MDYwMDI2WhcNMjYwNDE4MDYwMDI2WjAzMTEwLwYDVQQD
EygzZGYzYjEyYjExNGM2OTE2YTAzYTcyMjhhOWZiNTA1N2QzOGMwNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeV1bj3tQ0abE1LBcUl5Fk04kWOE
Pv9CD4JznVesVNJDa9l2ZgpOVb64WW9NOwhiVoA47pVfa5Pld914GksCjot5ykIq
U3STAHIYdcVNq0txoR4DTdZfgiUiX90tzQo0hWVIFsgc8MaqrDGKRgDomNU84cuU
QI0xDjJljxrHhDF2nVfxcww/q2FCKVwudZI3VNu8mGm3Tw4wAYSjVZyc6TSv0p4w
cKrAseUeJpYETGkqU4pBsZCEvvOtzWrXEWjszyPQ7G+md1m++Yhea3vw/009+uYQ
I6br5I7TvczbnTetXYOW7FQ62gX53J9mqOAwfmBWGNWRmAhC35BkPjqh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3zsSsRTGkWoDpyKKn7UFfTjASGMB8GA1UdIwQY
MBaAFJ/y9oIFPUPJrRxlOcrun0YhsNoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2Qt
MTY1MTFhNmVkOWM2LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2QtMTY1MTFhNmVkOWM2
LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbvVuYaz
HZhdbWFE4J/M5Zyh6swNYGinlrJcNd8pwUJu4qmBC/nvNct2Uy5COVdJRrfINLlf
xLOpwjK81e3YlQMB2oqFxhgkRyAGOKJlfIEF94tvBnyQV/Xy91GyMit6+Zf+c2HG
B5x67ay/n7cx2ZdkqDgx6qRhW43oDlphlQzmmO2zSNefSgmwyWZqCw+hWRBpK06W
C6r+5+eAK3j8R1A+uahyLN6L1GXWyQpx/Icp9pCkKYcjmy7bCLz3U5vgSjBQr/8e
Us6trV+P+g68304ZCe939s4wZwvysrCZLOpsqC/v7u42m5tRkm6btUQumddvkk2a
DefZlN5CNxx8DA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:02 2026 by rpki-client