Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File:                     n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier:          VoQTUzx7nCINQRGxSzFVhj1U7BqZjNZq/VaT5htDOuM=
Subject key identifier:   90:FC:58:81:E6:84:D0:79:34:6B:5D:C6:E3:79:76:20:FC:0E:D3:B5
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer:       /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial:       019D3789056A426093098834E5F2EA1FC33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number:          07F8
Signing time:             Sun 29 Mar 2026 03:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:19 +0000
Files and hashes:         1: 1t1mh1im05R5TEOwI71Jiu37ecs.roa (hash: m9uNu74yMGw3x49FIpVoScb0nsc8GhB3C9Hq/L+dUZE=)
                          2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: cxktV2kaCKvlnV6uj9WJZKyny+agtKa9rWXKT3cEF84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:05:6a:42:60:93:09:88:34:e5:f2:ea:1f:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
        Validity
            Not Before: Mar 29 03:00:19 2026 GMT
            Not After : Mar 30 03:00:19 2026 GMT
        Subject: CN=90fc5881e684d079346b5dc6e3797620fc0ed3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:6f:fd:e9:20:00:5f:c9:e9:4e:b3:2a:97:
                    fc:47:9b:75:88:d3:75:ca:50:a0:5d:73:a0:a3:16:
                    a5:46:63:3d:b1:1b:12:8d:99:b1:c8:bb:62:dc:f3:
                    74:39:2a:db:59:20:be:83:76:b3:eb:e6:e8:c1:aa:
                    70:69:ac:52:ba:a4:98:0d:23:a9:42:24:71:37:3e:
                    c7:22:1b:26:94:12:7b:cf:b3:5c:94:ee:ff:27:7f:
                    20:07:c9:16:d0:97:5d:f8:00:9b:e7:79:a6:50:74:
                    35:15:19:c0:97:72:bc:1f:22:11:b6:48:a1:21:a0:
                    17:0d:10:97:29:b1:84:1b:d3:e7:be:3a:66:28:b3:
                    b3:60:f6:6b:fb:64:d5:51:c3:cb:f5:19:48:51:a3:
                    fd:a7:c7:1c:e2:48:54:36:b6:bc:77:30:a6:10:a3:
                    06:44:67:f7:24:73:c9:e1:23:ce:1e:c6:97:5b:b4:
                    3b:43:31:80:d2:50:39:2e:1e:94:3d:b8:c3:f5:aa:
                    17:09:68:f2:82:ef:99:83:3e:30:2c:5c:0b:d1:db:
                    95:1b:09:22:66:45:f9:6f:9f:bf:20:ae:21:72:6c:
                    55:4b:d3:02:31:72:7c:58:9e:f9:bf:d6:a3:09:7b:
                    16:b3:b8:78:18:4e:0f:4b:ca:e9:30:38:25:4f:f2:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:58:81:E6:84:D0:79:34:6B:5D:C6:E3:79:76:20:FC:0E:D3:B5
            X509v3 Authority Key Identifier:
                keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:f5:d1:3d:20:10:7a:64:d3:b2:6f:ea:78:b9:98:62:b0:
         db:0d:23:bf:b7:fb:f5:c0:5b:25:df:7b:bd:c8:6f:09:75:7f:
         28:9d:35:7f:fd:37:35:a0:e6:95:19:4d:25:19:e8:6f:19:af:
         a8:b4:df:5e:ca:2c:dd:3f:fb:fd:13:00:c4:5a:8c:9f:62:1b:
         5c:5b:7b:c2:c4:ed:f7:5e:96:8b:ac:15:d0:4f:80:03:91:ac:
         7d:c5:b9:be:95:4d:68:c4:9b:71:4b:5c:14:11:b3:88:07:08:
         9a:b9:ac:06:15:e6:6d:7a:43:68:b7:3c:b7:be:7e:a7:2e:76:
         2b:85:17:71:02:7a:b3:87:48:57:ea:bd:50:54:e1:7f:f1:38:
         76:68:b2:59:f4:6f:fd:31:ce:38:8a:e9:db:d0:ef:21:c3:8d:
         81:db:05:7f:73:39:e5:41:f0:ef:a2:fa:11:46:9d:13:a2:a9:
         03:5a:e8:04:c5:54:52:81:80:3e:46:f6:95:f0:cd:68:46:b7:
         d5:79:c7:97:5a:13:8d:d1:69:55:8b:53:3b:8e:d5:3c:0f:28:
         d6:19:de:8f:3e:35:7c:8a:4f:1a:74:ba:d6:91:3a:2a:d0:b1:
         12:a8:ba:b5:36:97:32:b4:b1:5b:9a:be:2e:26:8e:1f:cf:cf:
         3b:67:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:01 2026 by rpki-client