Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          TDlR/SEyIJpV2ntPjOhhAeIDuBNs/UONmvuRr5IA5/Q=
Subject key identifier:   18:6B:DE:8F:B4:B5:1E:A1:FA:81:AA:57:B7:46:22:93:F5:52:D5:C6
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       019F12D3DBFD00534C24BB6594ED5F230C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          05D9
Signing time:             Mon 29 Jun 2026 10:01:41 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:41 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:41 +0000
Files and hashes:         1: WkUUwZ6rVtE4GE30shju3hlhJgM.roa (hash: 0WM1KO6HOedT6k303IOfaiByBYuzAj6O/xtO7pUBUvU=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: juc8dRQPOpKN09bovYslK+gPfcdCQUSnZWylNt1ihZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:db:fd:00:53:4c:24:bb:65:94:ed:5f:23:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Jun 29 10:01:41 2026 GMT
            Not After : Jun 30 10:01:41 2026 GMT
        Subject: CN=186bde8fb4b51ea1fa81aa57b7462293f552d5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:26:f0:83:01:e5:0e:20:87:5d:f8:80:5a:
                    12:58:47:30:9e:24:7d:67:8e:3a:58:35:17:93:98:
                    5d:22:4a:a7:61:86:76:82:e7:ba:58:77:69:eb:39:
                    bc:31:a1:62:51:84:e3:b8:9b:b8:df:d7:e0:a4:21:
                    a7:8b:81:f9:70:02:76:5f:ed:28:99:cb:83:fb:a0:
                    1d:7a:8f:b1:6d:f9:ae:78:4c:50:66:c4:ad:50:fa:
                    a0:06:bb:b6:44:d5:8e:09:ad:f1:88:70:c0:f3:fe:
                    e1:78:ac:11:f8:89:24:36:40:76:ce:ff:a7:d3:5a:
                    22:e9:3a:20:76:e4:7d:d7:0e:b5:46:82:c4:7b:f9:
                    2b:d8:21:d4:cb:f1:96:f6:52:fd:07:9a:2e:5d:b3:
                    6d:c9:28:d1:77:4a:b0:e2:2b:80:36:fe:a5:c9:f1:
                    ef:72:f7:65:31:62:4a:dd:25:1b:83:fc:62:90:69:
                    94:c3:ba:b9:fd:3f:7a:e9:37:12:cd:a7:68:0a:cb:
                    9d:ad:0a:7e:a0:98:72:32:0c:5f:6f:c2:35:fa:87:
                    5e:c3:63:c5:63:8c:84:31:cf:65:20:98:c1:74:67:
                    b0:4c:ed:2a:3c:df:f7:c4:eb:3c:1a:26:2c:d8:c8:
                    3a:14:7e:3c:58:90:f3:d3:b6:42:28:83:55:99:99:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:DE:8F:B4:B5:1E:A1:FA:81:AA:57:B7:46:22:93:F5:52:D5:C6
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:11:8a:d9:ad:8a:94:ad:8b:6c:59:95:4a:f4:72:fc:c8:
         0d:b6:c8:4e:52:59:10:34:7b:e8:07:a7:b7:86:bf:65:41:20:
         c6:83:e7:5a:55:e9:8d:47:bd:45:61:14:e2:29:ec:21:5b:9c:
         15:f4:fb:18:6d:72:d4:49:b4:e9:c5:a8:8b:20:0f:23:3c:fc:
         16:9b:fb:2d:5c:97:59:c5:05:70:3c:e5:4a:62:09:00:0f:1e:
         d0:7a:b3:67:80:32:02:76:1e:59:c1:46:8c:33:fb:98:0d:e4:
         ff:eb:a3:b9:26:29:ba:34:82:89:82:5a:bd:9b:aa:2a:fd:55:
         a5:ba:cd:6e:36:1c:9c:c9:cd:b6:b7:df:7a:e1:21:ff:7b:93:
         df:f2:d4:f0:ac:e0:18:7a:a0:9d:b6:9e:e5:6d:6a:cf:19:5f:
         cc:17:45:7c:9b:a3:ae:7a:4e:c9:8d:7a:a4:86:f1:d3:10:16:
         03:cc:1d:8a:a6:e8:f7:ae:d9:a2:d5:76:86:06:b7:6a:1e:a8:
         8f:45:70:e1:da:b2:46:4a:e5:c5:10:d3:37:76:1b:1b:fd:b1:
         46:d0:3f:35:c3:1c:8b:30:a9:3d:08:71:ee:1e:4b:24:c7:be:
         21:2a:de:71:49:d6:e5:2f:f2:4b:14:75:ee:44:7c:38:7c:3a:
         8d:d7:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:24:35 2026 by rpki-client