Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File:                     n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier:          g5v2iSkoOBUwB69AmRlkhW9qqd/LHmRTs2i/Q0eFmpI=
Subject key identifier:   9F:0C:C5:66:9B:C5:8A:D9:43:52:D7:AC:D2:57:55:C6:D8:B6:20:F9
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer:       /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial:       019F12651C9E29409AF5498797E923213EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 08:00:43 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:43 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:43 +0000
Files and hashes:         1: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: E+AGhOzZKqdH4cH4X58hcuCtt8efBFP20cSU0nK7Ey0=)
                          2: qEVUH4qtPIdY31l07wJYpUogkpY.roa (hash: 1CkNjM5HwfDl6NM7jfzoD/R4QOj8Vqv8jxVT070r3q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:1c:9e:29:40:9a:f5:49:87:97:e9:23:21:3e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
        Validity
            Not Before: Jun 29 08:00:43 2026 GMT
            Not After : Jun 30 08:00:43 2026 GMT
        Subject: CN=9f0cc5669bc58ad94352d7acd25755c6d8b620f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:bd:43:f8:78:bb:7e:49:c0:20:da:d0:ce:
                    8a:d3:46:20:98:c5:d6:2d:02:d7:4c:69:ac:6f:0b:
                    3a:60:05:eb:9b:05:bb:5d:71:59:7b:48:76:d0:06:
                    96:45:7d:e1:dc:ba:6e:a4:b4:87:40:0c:64:79:a6:
                    e9:85:d8:b0:42:99:94:b3:8e:11:ce:ad:87:5d:8c:
                    66:43:5d:b6:ac:e9:2a:dd:30:1b:ed:e9:11:6e:58:
                    95:af:84:e4:f0:41:df:a9:05:d6:1f:17:fb:32:68:
                    36:88:17:92:27:6d:1d:35:b9:99:1c:2d:72:b9:29:
                    83:4b:c7:1d:42:ae:74:42:fc:77:86:ca:4a:8a:77:
                    c7:5b:1b:80:eb:46:38:fc:2a:ad:7d:43:e4:2f:45:
                    83:8d:db:fe:3b:70:67:22:20:27:24:b4:d6:14:c0:
                    2a:28:86:13:87:8f:c8:38:88:4f:e6:ec:4c:34:92:
                    af:b7:95:36:c5:d4:85:1a:25:51:3d:39:65:00:18:
                    a4:6f:32:29:ef:85:2b:51:aa:01:62:34:22:d9:c8:
                    04:fd:9a:33:56:7d:01:12:77:8d:00:00:19:40:2d:
                    95:71:6d:26:b0:7c:f1:b2:03:f2:ca:1d:9d:01:e5:
                    57:15:43:a2:cf:d0:01:a3:0b:ee:3b:cd:f4:f2:8a:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:C5:66:9B:C5:8A:D9:43:52:D7:AC:D2:57:55:C6:D8:B6:20:F9
            X509v3 Authority Key Identifier:
                keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:a2:77:cb:45:7d:44:bf:ca:32:41:2c:3f:12:f6:54:ff:
         9b:a5:7a:24:53:fb:0e:e7:e0:54:49:66:b3:7a:07:c9:4c:dd:
         59:99:ea:0c:8e:d6:49:08:da:76:84:8a:29:64:bf:7b:d7:a1:
         c4:bb:67:5a:17:c8:20:e9:1b:45:af:65:63:59:d5:96:c5:7d:
         80:06:6c:22:98:e1:5c:ea:b5:bc:99:31:c9:ee:1f:95:14:e8:
         79:28:d6:5f:2d:14:77:8c:4c:2d:3b:1b:93:c5:95:e8:e7:f1:
         1b:a1:c1:fe:8d:ec:46:b1:99:b1:3d:7f:7a:95:20:ff:86:45:
         4f:e4:5a:31:3a:49:0f:a8:ab:81:de:85:52:88:70:17:0d:f1:
         f6:5a:a1:40:6d:80:f5:da:65:00:3b:14:52:9d:42:43:09:d7:
         fe:1a:27:88:ef:b1:0e:bf:48:38:cc:9b:ae:65:9f:ae:e3:11:
         d7:ed:ed:c6:98:6f:fa:cb:ea:11:85:44:eb:e6:b2:07:51:fb:
         4d:b5:f7:90:cd:85:8c:ce:24:e1:c3:89:c4:0f:23:80:f5:54:
         36:c5:2f:e4:b5:a2:50:c5:8d:27:c0:77:5c:b5:87:b9:4f:f5:
         13:27:4b:d4:ce:91:43:60:ed:fa:d4:d2:12:a7:e7:04:38:c6:
         06:95:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:43 2026 by rpki-client