Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File:                     N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier:          53PvyP9BiNj1RvJ4Ln9mPF2VPHa1p1JyEQr6Fhd+JYY=
Subject key identifier:   80:62:1C:1C:B1:FC:E4:7D:14:64:DC:AB:4D:F2:2F:FA:3D:12:F1:7F
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer:       /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial:       019D97E1DE957C4C8E5C2C99AC706C6F760E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number:          15C5
Signing time:             Thu 16 Apr 2026 20:00:55 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:55 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:55 +0000
Files and hashes:         1: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (hash: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY=)
                          2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: 8adAUgnJuJHMNb2tRNcUPD6T64qsTgQqn5sz+l7yg5o=)
                          3: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (hash: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:de:95:7c:4c:8e:5c:2c:99:ac:70:6c:6f:76:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
        Validity
            Not Before: Apr 16 20:00:55 2026 GMT
            Not After : Apr 17 20:00:55 2026 GMT
        Subject: CN=80621c1cb1fce47d1464dcab4df22ffa3d12f17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4c:13:b3:59:82:27:a2:09:34:1a:3c:ea:f0:
                    32:4a:c2:1a:4b:87:1e:ee:f4:a1:c0:78:e8:f4:7c:
                    a8:9a:5e:cc:9c:19:28:bd:db:08:72:36:96:1a:86:
                    03:43:e0:b5:35:6e:43:4f:22:ff:d0:5a:3d:88:65:
                    b1:c8:c1:d0:12:11:be:c4:5e:c9:b2:9d:78:fd:2c:
                    cb:95:ea:a5:ba:09:11:41:37:9d:e3:5c:ea:bd:a2:
                    82:b5:42:ac:4a:01:0f:e1:3a:f5:bf:5b:0e:ac:53:
                    b2:19:81:5a:62:cf:c7:08:7a:a0:42:c6:32:2a:80:
                    9f:ce:de:23:04:29:77:ac:fc:59:28:ee:6d:2d:c3:
                    55:76:71:1a:f3:33:2b:cf:63:5b:9b:62:6a:87:82:
                    6c:4a:4c:0b:97:83:0b:13:40:49:46:15:27:44:c3:
                    04:92:57:ac:38:3a:10:0b:0e:69:6e:35:94:6d:6f:
                    39:fb:39:74:d7:a4:ab:50:62:0e:9b:89:e5:84:fe:
                    7f:e5:d8:8b:cf:33:42:d2:66:fc:0d:59:78:d4:97:
                    5e:75:bb:88:ac:0f:c8:25:06:b5:4e:d4:09:9a:ba:
                    02:39:b3:39:ab:35:d0:c0:08:f3:1f:8b:1a:9b:c7:
                    65:f3:4d:2c:15:f8:1f:1b:97:30:e2:90:f3:90:fc:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:1C:1C:B1:FC:E4:7D:14:64:DC:AB:4D:F2:2F:FA:3D:12:F1:7F
            X509v3 Authority Key Identifier:
                keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:60:8b:e5:7d:67:cc:96:f3:68:6c:12:76:8c:be:e7:1e:d6:
         97:bc:7b:98:4c:80:10:e2:53:9f:69:95:99:9b:6a:b4:69:64:
         1c:44:c7:67:1f:a3:10:6c:c8:ae:96:3b:cb:55:52:a5:28:01:
         7f:59:26:9d:64:f2:87:b7:a8:0b:17:4e:81:ff:74:68:9d:06:
         61:b2:cf:6e:65:79:c5:37:30:56:1a:c1:40:16:72:85:ce:85:
         86:fd:7c:81:5b:74:cc:d9:7d:9f:15:2d:e9:71:ea:90:a8:ea:
         06:f3:69:15:88:4c:e3:4d:84:16:52:89:fb:80:b6:25:49:44:
         54:1b:cb:f8:f8:3a:fe:10:83:1d:ef:80:b8:28:0a:f5:54:f8:
         8b:eb:e6:6d:e0:80:47:57:46:51:bf:7d:52:aa:45:74:8b:1c:
         17:21:4e:ac:6b:ed:de:1c:77:61:de:d6:2e:71:7d:aa:09:e4:
         0d:06:c9:8d:5d:41:f1:99:da:ac:69:cc:3a:1c:97:b5:88:e6:
         65:86:c4:d3:76:09:b5:15:7c:1c:5e:f6:e6:c9:81:0d:87:e0:
         88:d3:53:6e:27:d7:83:f7:c5:9f:98:3e:5d:8a:eb:72:eb:c1:
         0b:9c:f1:a8:7d:01:7e:d3:ac:bf:03:8b:88:97:90:58:0b:a3:
         f2:a1:d3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:04 2026 by rpki-client